With the growth of the number of social networks, websites and other platforms, there was a need for legal regulation of the digital space. The European Parliament understood this need and the result of the work on solving this issue was the adoption of the DSA (Digital Service Act). So Before we look at how the regulation will affect you as an Internet user, let’s first understand what the regulation is, when it will come into effect, and whether it applies to you.
The DSA (Digital Service Act) is a regulation in EU law that, unlike the E-Commerce Directive, will apply immediately in all member states without the need for further implementation into national law. The DSA updates the E-commerce Directive on illegal content, transparent advertising and misinformation. It is worth noting here that the DSA will not replace the E-Commerce Directive, which remains the cornerstone of the legal framework for all digital services. The main purpose of DSA is improving content moderation on platforms, social networks to solve problems related to illegal content.
The DSA was published in the Official Journal of the EU on October 27, 2022. On August 25, 2023, the DSA entered into force for very large online platforms та very large online search engines. It is fully applicable to other subjects from February 17, 2024.
This is probably one of the most relevant questions today. Firstly, it should be noted that unlike the e-Commerce Directive, DSA will apply to you if you offer services as individuals residing in the EU, and legal entities, established or located in the EU, regardless of where you are or where your company is located.
At the same time, it is clear that if one user from the European Union starts using your services, it does not mean that you must apply DSA in your activity. However, if many of the people who use your services reside in one or more countries of the European Union, or if your activities are targeted at one or more of those member countries, DSA will also be applicable to you.
Nevertheless, please bear in mind that even if the DSA is applicable in your situation, it doesn’t automatically make you responsible for any illicit content posted on your platform.
There are cases where the platforms are released from liability, what you can read below:
At the same time, it is worth noting that the exemption from liability in accordance with “Hosting” exemption is not an absolute circumstance and is illustrated by several court judgments such as: L’Oreal v eBay and Google France case, where CJEU ruled that online marketplaces cannot be used “Hosting” exemption in cases where they play an active role in relation to the data provided by the user, for example by promoting or optimizing sales offers.
Under the DSA provision, it’s important to note that platforms are not absolved of liability for violating consumer protection laws when they present information, services, or products in a manner that might lead consumers to believe they are the ones offering them. In other words, if the platform gives the impression that they are directly selling goods or offering services, and not acting on behalf of a third party, the exemption cannot be applied.
So we’ve looked at when the DSA may apply to you and when you may be exempt from liability for breaching the DSA. However, it remains unclear exactly which DSA requirements apply to you as a social network, website or other participant in the Internet space. Therefore, we will consider this issue in more detail in the next section.
DSA defines different levels of members and your responsibilities depend on which level you are at. DSA distinguishes between several levels of participants, and the number of responsibilities increases cumulatively at each level. Cumulative duties mean that if you are in the third level, the duties listed in the third, second and first levels of the DSA apply to you.
So, below you will find more information about the specific levels and responsibilities for each of them. For your convenience, we have presented this information in the form of a table. It is also important to remember that duties have a cumulative effect.
Level | Type of intermediary | Duties |
1 level | All intermediaries; | Commitment to transparency and reporting by providing information about one’s activities. |
Appointment of a contact person. Intermediaries that are not registered in the EU, but provide services in the EU, are required to appoint a legal representative in the EU. | ||
2nd level | Hosting services; | The existence of a “notice and action” mechanism that allows any person to report illegal content and obliges the service provider to process these reports and take a decision. |
Obligation of the service provider to notify the owner of this content about the removal of such content or disabling of access to the content. | ||
In addition, if the hosting service provider becomes aware of a possible criminal offense that threatens the life or safety of individuals, hosting service provider must notify law enforcement authorities. | ||
3rd level | Online platforms | Online platforms must have an internal electronic complaint-handling system that is user-friendly and accessible for filing complaints electronically about illegal content against the online platform’s decisions. |
Content owners affected by the online platform’s decision regarding illegal content have the right to appeal to an extrajudicial body certified by the Digital Services Coordinator, and online platforms are obligated to comply with the decisions of this body. | ||
4th level | VLOPs ( very large online platform – platforms with an active user audience of more than 45 million people) | Commitment to identify, analyze and assess significant systemic risks associated with the operation and use of its services in the EU, and to take reasonable, proportionate and effective measures to mitigate these risks. |
Obligation to conduct annual audits of DSA compliance with the help of independent external auditors at its own expense. | ||
Obligation to provide access to data for monitoring and assessment of compliance to the Digital Services Coordinator or the European Commission upon request, as well as providing access to data for recognized independent researchers engaged in identifying and understanding any systemic risks. | ||
Obligation to publish terms and conditions in the official languages of all EU member states where VLOPs provide their services. |
Therefore, the duties listed above are only part of the requirements that the DSA provides. In case of non-fulfillment of these obligations, including the above, a fine of 6% of annual worldwide turnover of the company for the previous financial year. This amount is significant and motivates companies to comply with the new rules.
In conclusion, it is important to note that the DSA also addresses issues related to advertising and expands existing rules. The DSA is introducing two new restrictions on targeted advertising on online platforms. First, DSA prohibits targeted advertising to minors based on their profiling. Secondly, targeted advertising based on profiling using special categories of personal data, such as sexual orientation or religious beliefs, is prohibited.
The new rules also empower users to understand and make informed decisions about the ads they see. They need to know clearly whether advertising is directed at them and for what reasons, as well as who paid for it; should also clearly see when content is sponsored or natively hosted on the platform, and track commercial messages from influencers. The obligations regarding disclosure and measures also apply to potentially illegal advertising, as well as to any other type of content.
Therefore,the DSA establishes the foundation for new regulation that applies not only to companies operating within the European Union but also to those operating beyond its borders. This requires all companies to review their current policies and make necessary changes in accordance with DSA requirements to avoid potential fines and ensure compliance with the new regulatory standards.