Digital Services Act
The DSA creates obligations for online platforms and search engines to tackle illegal content, protect users, and ensure algorithmic transparency. Very large platforms face enhanced obligations.
What does DSA require and when does it apply?
DSA applies to Social Media and Marketplaces organisations across all EU member states. The key deadline is February 17, 2024 (all platforms). Non-compliance carries a maximum penalty of €20M or 6% of global turnover. Core obligations include remove illegal content upon valid notice and provide transparent advertising registers.
- Remove illegal content upon valid notice
- Provide transparent advertising registers
- Disclose algorithmic recommender system logic
- Conduct annual risk assessments (VLOPs)
- Allow third-party auditing (VLOPs/VLSEs)
| Deadline | February 17, 2024 (all platforms) |
| Max fine | €20M or 6% of global turnover |
| Primary sectors | Social Media, Marketplaces, Search Engines |
DSA: €20M or 6% of global turnover max fine
DSA applies to Social Media and Marketplaces organisations in all EU member states. Key deadline: February 17, 2024 (all platforms).
Source: Official Journal of the European Union — Digital Services Act
February 17, 2024 (all platforms)
€20M or 6% of global turnover
Social Media, Marketplaces, Search Engines
The highest penalty for non-compliance with DSA in the EU.
EU Official Journal
How do I comply with DSA?
- Remove illegal content upon valid notice
- Provide transparent advertising registers
- Disclose algorithmic recommender system logic
- Conduct annual risk assessments (VLOPs)
- Allow third-party auditing (VLOPs/VLSEs)
Does DSA apply to your business?
Find out in 2 minutes with our free regulation checker.
Check now — freeDSA by Country
Related Regulations
AI Act
The EU AI Act classifies AI systems by risk level and imposes obligations on providers and deployers. High-risk systems face mandatory conformity assessments, documentation, and human oversight requirements.
GDPR
GDPR governs the processing of personal data of EU residents. It requires lawful basis for processing, data subject rights, breach notification, and accountability measures.
NIS2
NIS2 expands cybersecurity obligations to essential and important entities across critical sectors. It mandates risk management, incident reporting, and supply chain security.
Next step — classify
Classify your AI systems
Use the free regulation checker to find out exactly which DSA obligations apply to your business in 2 minutes.
For informational purposes only. This is not legal advice — consult qualified legal counsel.
Last updated: · Editorial policy