A Year Into Enforcement, EU's Landmark Digital Services Act Shows Cracks

The European Union's Digital Services Act (DSA) is now a live regulatory reality, not a theoretical framework. According to a detailed analysis by cybersecurity and privacy researcher Łukasz Olejnik, the first year of serious enforcement reveals a troubling disconnect: major platforms appear to be performing compliance theater rather than achieving substantive adherence to the law.

Olejnik, a former invited expert to the W3C's Technical Architecture Group, has tracked the DSA's rollout closely. His findings point to a widening gap between the regulation's ambitious demands—for transparency in content moderation, genuine data access for researchers, and systemic risk assessments—and the often superficial reports filed by the Very Large Online Platforms (VLOPs) it governs. Some submissions are detailed; others are seen as box-ticking exercises that obscure how algorithms actually operate.

The European Commission has initiated formal proceedings against several platforms, including X, for suspected breaches. Potential fines could reach 6% of a company's global turnover. Yet, no penalty of that scale has been levied, allowing companies to test the limits of minimal compliance.

A critical failure point is researcher data access, mandated under Article 40 to allow independent scrutiny of risks like disinformation. In practice, researchers report bureaucratic hurdles, narrow data sets, and obstruction. The shutdown of Meta's CrowdTangle tool, despite promises of a replacement, exemplified this problem during the 2024 EU Parliament elections, leaving many studies hamstrung.

The Commission has published rules to clarify data access, but implementation lags. With the U.S. election cycle underway, the urgency is heightened. The DSA's credibility as a model for global regulators hinges on moving beyond procedural compliance to meaningful accountability. Olejnik concludes that the law's ultimate power will be decided not by its text, but by the political will to enforce it and the technical capacity to peer inside the black box of platform operations.

Source: Webpronews