Digital Services Act
Akt o usługach cyfrowych (Rozporządzenie (UE) 2022/2065, DSA) jest unijnym aktem prawnym dotyczącym pośredników internetowych. Modernizuje zasady odpowiedzialności usług hostingowych, nakłada obowiązki należytej staranności na platformy internetowe i wprowadza wzmocnione wymogi zarządzania ryzykiem dla Bardzo Dużych Platform Internetowych (VLOP) i Bardzo Dużych Internetowych Wyszukiwarek (VLOSE) — tych, które osiągają co najmniej 45 mln miesięcznie aktywnych użytkowników w UE.
Free EU Compliance CheckerWhat does DSA require and when does it apply?
DSA applies to Social Media and Marketplaces organisations across all EU member states. The key deadline is February 17, 2024 (all platforms). Non-compliance carries a maximum penalty of Up to 6% of global turnover (VLOPs/VLOSEs); per member state for others. Core obligations include remove illegal content upon valid notice and provide transparent advertising registers.
- Remove illegal content upon valid notice
- Provide transparent advertising registers
- Disclose algorithmic recommender system logic
- Conduct annual risk assessments (VLOPs)
- Allow third-party auditing (VLOPs/VLSEs)
| Deadline | February 17, 2024 (all platforms) |
| Max fine | Up to 6% of global turnover (VLOPs/VLOSEs); per member state for others |
| Primary sectors | Social Media, Marketplaces, Search Engines |
DSA: Up to 6% of global turnover (VLOPs/VLOSEs); per member state for others max fine
DSA applies to Social Media and Marketplaces organisations in all EU member states. Key deadline: February 17, 2024 (all platforms).
Source: Official Journal of the European Union — Digital Services Act
Who does DSA apply to?
DSA nakłada obowiązki stopniowe: przepisy podstawowe dla wszystkich usług pośrednictwa oferowanych w UE; dodatkowe przepisy dla usług hostingowych; dalsze przepisy dla platform internetowych; oraz najbardziej rygorystyczny poziom dla wyznaczonych VLOP i VLOSE.
- Usługi pośrednictwa: zwykły przekaz, caching, hosting — oferowane w UE (niezależnie od siedziby usługodawcy)
- Usługodawcy hostingowi: mechanizmy zgłaszania i działania, uzasadnienia decyzji dotyczących moderacji treści
- Platformy internetowe: zaufani sygnalizujący, przejrzystość systemów rekomendacji, zakaz ciemnych wzorców (dark patterns)
- VLOP/VLOSE (≥ 45 mln miesięcznie aktywnych użytkowników UE): coroczne oceny ryzyka systemowego, niezależne audyty, reagowanie kryzysowe
What are the penalties for DSA non-compliance?
Państwa członkowskie ustalają sankcje dla ogólnych pośredników i platform internetowych; Komisja jest uprawniona do bezpośredniego nakładania grzywien na wyznaczone VLOP i VLOSE. Można dodać okresowe kary pieniężne.
| Maximum fine | Up to 6% of global annual turnover for VLOPs/VLOSEs; member states set penalties for other intermediaries |
When does DSA apply?
DSA wszedł w życie 16 listopada 2022 r. Ma zastosowanie do wyznaczonych VLOP i VLOSE od 25 sierpnia 2023 r., a do wszystkich pozostałych usług objętych zakresem — od 17 lutego 2024 r.
- 2022-11-16 — Entry into force
- 2023-04-25 — First VLOP/VLOSE designations
- 2023-08-25 — Obligations apply to designated VLOPs/VLOSEs
- 2024-02-17 — Obligations apply to all other in-scope services
Próg, powyżej którego Komisja Europejska może wyznaczyć platformę internetową jako Bardzo Dużą Platformę Internetową (VLOP) lub wyszukiwarkę jako Bardzo Dużą Internetową Wyszukiwarkę (VLOSE) — co uruchamia najbardziej rygorystyczny poziom obowiązków wynikających z DSA.
Rozporządzenie (UE) 2022/2065, Artykuł 33 ust. 1
February 17, 2024 (all platforms)
Up to 6% of global turnover (VLOPs/VLOSEs); per member state for others
Social Media, Marketplaces, Search Engines
Próg, powyżej którego Komisja Europejska może wyznaczyć platformę internetową jako Bardzo Dużą Platformę Internetową (VLOP) lub wyszukiwarkę jako Bardzo Dużą Internetową Wyszukiwarkę (VLOSE) — co uruchamia najbardziej rygorystyczny poziom obowiązków wynikających z DSA.
Rozporządzenie (UE) 2022/2065, Artykuł 33 ust. 1
| Official name | Regulation (EU) 2022/2065 of the European Parliament and of the Council on a Single Market For Digital Services (Digital Services Act) |
| Reg. No. | (EU) 2022/2065 |
| CELEX | 32022R2065 |
| Type | regulation |
| In force | 2022-11-16 |
| Applies from | 2024-02-17 |
| Max fine | Up to 6% of global annual turnover for VLOPs/VLOSEs; member states set penalties for other intermediaries |
| Authorities | European Commission (for VLOPs/VLOSEs) (EU) National Digital Services Coordinators (DSCs) (member-state) European Board for Digital Services (EU) |
| Source | (EU) 2022/2065 — EUR-Lex Official Journal |
How do I comply with DSA?
- Remove illegal content upon valid notice
- Provide transparent advertising registers
- Disclose algorithmic recommender system logic
- Conduct annual risk assessments (VLOPs)
- Allow third-party auditing (VLOPs/VLSEs)
Does DSA apply to your business?
Find out in 2 minutes with our free regulation checker.
Check now — freeDSA by Country
Explore DSA in depth
DSA by Industry
Related Regulations
DMA
The DMA designates large online platforms as 'gatekeepers' and imposes obligations to ensure contestable and fair digital markets. Targets the largest tech platforms operating in the EU.
GDPR
GDPR governs the processing of personal data of EU residents. It requires lawful basis for processing, data subject rights, breach notification, and accountability measures.
AI Act
The EU AI Act classifies AI systems by risk level and imposes obligations on providers and deployers. High-risk systems face mandatory conformity assessments, documentation, and human oversight requirements.
Explore DSA in depth
Penalties & Fines
See enforcement patterns, fine tier tables, and real enforcement cases across EU member states.
Deadline Timeline
Key milestones, implementation phases, and country-specific deadlines and phased rollout dates.
Industry Guides
Sector-specific DSA guidance for SaaS, fintech, healthcare, and other affected industries.
Next step — classify
Classify your AI systems
Use the free regulation checker to find out exactly which DSA obligations apply to your business in 2 minutes.
Check Your Compliance Obligations
Find out which DSA obligations apply to your organisation in under 2 minutes.
Recent DSA Articles
Frequently Asked Questions
- Who is subject to the EU Digital Services Act?
- The DSA (Regulation 2022/2065) applies to all digital intermediary services offered to users in the EU — regardless of where the provider is established. Obligations scale by service type and size: mere conduit and caching services have minimal obligations; hosting services and online platforms must implement notice-and-action mechanisms and transparency reporting; Very Large Online Platforms (VLOPs) and Very Large Online Search Engines (VLOSEs) with over 45 million average monthly EU users face enhanced obligations enforced directly by the European Commission. Small and micro enterprises (under 50 employees, under €10M turnover) are exempt from certain obligations, including complaint-handling and out-of-court dispute settlement requirements. All obligations applied from 17 February 2024.
- What content moderation obligations does the DSA impose on online platforms?
- Online platforms under the DSA must: operate a notice-and-action mechanism allowing users to report illegal content; process valid notices expeditiously and notify users of removal decisions with reasons; provide a non-discriminatory internal complaints mechanism for content removal decisions; offer access to out-of-court dispute settlement bodies; cooperate with trusted flaggers — vetted organisations that report illegal content at scale; and publish transparency reports on content moderation every six months. Platforms may not use dark patterns that undermine user choices. Advertising cannot target minors or use sensitive data categories (health, religion, sexual orientation, political views) as targeting criteria.
- What obligations apply to Very Large Online Platforms under the DSA?
- VLOPs and VLOSEs with over 45 million monthly EU users face enhanced DSA obligations enforced by the European Commission, not national coordinators. Core obligations: annual systemic risk assessments covering illegal content, fundamental rights, electoral processes, and public health; independent audits of risk assessments and mitigation measures; real-time data access for vetted researchers; algorithmic transparency including a non-profiling-based recommendation option for users; and advertising transparency registers. During elections or public emergencies, the Commission can impose crisis response measures. Non-compliance fines reach 6% of global annual turnover; repeated infringement may result in temporary access restrictions.
For informational purposes only. This is not legal advice — consult qualified legal counsel.
Last verified: · Source: EUR-Lex 32022R2065 · Editorial policy