What the Digital Services Act changes for platform accountability

Before the Digital Services Act, most of what platforms did about illegal content in the European Union was voluntary. They set their own rules, applied them by their own process, and reported on that process in a format of their choosing. Regulation (EU) 2022/2065 turned parts of that into law. It entered into force in November 2022 and has applied to all services in scope since 17 February 2024, as set out by the European Commission.

This note describes what the text requires. It does not assess how well any provider complies, and it names no company and no person.

A notice now has a legal consequence

Article 16 requires providers of hosting services to operate mechanisms that let any person or entity flag material they consider illegal. The mechanism has to be easy to access and to use, and it has to allow submission by electronic means.

The part that changed the incentives is Article 16(3): a notice that is sufficiently precise and adequately substantiated gives the provider actual knowledge of the item for the purposes of the liability exemption in Article 6. Before, a notice was a request. Now a well-made notice moves legal risk onto the recipient.

The corollary matters as much. A vague notice does not do this. The quality of the submission determines whether it has any effect at all, which is an argument for structure rather than volume.

Every restriction needs a reason, and the reasons are public

Article 17 requires a clear and specific statement of reasons to the affected recipient whenever a provider restricts content — removal, demotion, suspension, restriction of monetisation. It must say what was restricted, on what ground, whether automated means were used, and how the decision can be challenged.

Article 24(5) then requires providers of online platforms to submit those statements of reasons to a database maintained by the Commission, which is publicly accessible and machine-readable. The Commission describes the resulting DSA Transparency Database as searchable and downloadable by anyone.

This is the single largest change for anyone studying moderation from the outside. Decisions that were previously visible only to the person affected are now recorded in a common format, at scale, in one place.

The person affected gets somewhere to go

Article 20 obliges online platforms to run an internal complaint-handling system, free of charge, open for at least six months after a decision. Article 21 adds an external route: certified out-of-court dispute settlement bodies, certified by the Digital Services Coordinator of a Member State, whose decisions are not binding but whose availability must be made known.

Both cut in two directions. They are a remedy for wrongful removal and a remedy for wrongful refusal to remove, and the same mechanism serves a person who was silenced in error and a person whose report was dismissed in error.

Trusted flaggers are a status, not a courtesy

Article 22 creates the trusted flagger. Notices submitted by one are given priority and decided without undue delay. The status is awarded on application by the Digital Services Coordinator of the Member State where the applicant is established, and only to entities that demonstrate particular expertise and competence in detecting illegal content, that are independent of any provider of online platforms, and that work diligently, accurately and objectively.

The independence condition is a real constraint rather than a formality, and the status is granted by a public authority rather than negotiated with a platform.

The largest services carry extra duties

Articles 33 and following apply to very large online platforms and search engines — those reaching an average of at least 45 million monthly active recipients in the Union, designated as such by the Commission.

Those services must assess systemic risks arising from their design and operation, including the dissemination of illegal content and negative effects on fundamental rights (Article 34), and put in place reasonable, proportionate and effective mitigation measures (Article 35). They are subject to independent audit (Article 37) and to more frequent transparency reporting (Article 42). Article 74 allows the Commission to impose fines of up to 6% of a provider’s total worldwide annual turnover.

Researchers can ask for data, through a procedure

Article 40 is the provision that changes what can be known. It allows vetted researchers to obtain access to data from very large platforms and search engines for research into systemic risks and the adequacy of mitigation measures. Access runs through the Digital Services Coordinator of establishment, and vetted status requires affiliation with a research organisation, independence from commercial interests, and a stated research purpose.

The procedural detail was left to a delegated act, which the Commission adopted on 2 July 2025, covering how the platforms and researchers exchange data, in what formats, and with what documentation. The Commission’s own summary of the transparency framework sits here.

What the DSA does not do

It does not define what is illegal. Illegality comes from other Union or national law, and the DSA supplies process around it.

It does not require general monitoring; Article 8 preserves the prohibition on imposing a general obligation to monitor.

And it does not make a platform’s judgement final in either direction. The structure is procedural: a route in, a reason out, a record of the reason, a way to contest it, and a supervisor.

Where Civic Shield stands

Civic Shield is not a trusted flagger, has not applied to be one, and is not a vetted researcher under Article 40. It is not a registered legal entity. Nothing above should be read as a claim of standing under the regulation.

The relevance is narrower than that. The DSA sets out what a usable notice looks like and what an operator is required to do with it, and Civic Shield’s design is built to produce material at that standard rather than below it. The evidence side of that is described on the methodology note.