European Union regulation | |
Text with EEA relevance | |
Title | Regulation on a Single Market For Digital Services |
---|---|
Made by | European Parliament and Council of the European Union |
Journal reference | OJ L 277, 27.10.2022, p. 1–102 |
History | |
Date made | 19 October 2022 |
Preparative texts | |
Commission proposal | COM/2020/825 final |
Current legislation |
The Digital Services Act [1] (DSA) is an EU regulation adopted in 2022 that addresses illegal content, transparent advertising and disinformation. It updates the Electronic Commerce Directive 2000 in EU law, [2] [3] and was proposed alongside the Digital Markets Act (DMA).
The DSA applies to online platforms and intermediaries such as social networks, marketplaces and app stores. [4] Key requirements include disclosing to regulators how their algorithms work, providing users with explanations for content moderation decisions, and implementing stricter controls on targeted advertising. It also imposes specific rules on "very large" online platforms and search engines (those having more than 45 million monthly active users in the EU). [5]
Ursula von der Leyen proposed a "new Digital Services Act", in her 2019 bid for the European Commission's presidency. [6]
The expressed purpose of the DSA is to update the European Union's legal framework for illegal content on intermediaries, in particular by modernising the e-Commerce Directive adopted in 2000. In doing so, the DSA aims to harmonise different national laws in the European Union that have emerged at national level to address illegal content. [2] Most prominent amongst these laws has been the German NetzDG, and similar laws in Austria ("Kommunikationsplattformen-Gesetz") and France ("Loi Avia"). With the adoption of the Digital Services Act at European level, those national laws would be overwritten and would have to be repealed. [7]
In practice, this will mean new legislation regarding illegal content, transparent advertising and disinformation. [3]
The DSA is meant to "govern the content moderation practices of social media platforms" and address illegal content. [8] It is organised in five chapters, with the most important chapters regulating the liability exemption of intermediaries (Chapter 2), the obligations on intermediaries (Chapter 3), and the cooperation and enforcement framework between the commission and national authorities (Chapter 4).
The DSA proposal maintains the current rule according to which companies that host others' data become liable when informed that this data is illegal. [8] This so-called "conditional liability exemption" is fundamentally different [9] [10] from the broad immunities given to intermediaries under the equivalent rule ("Section 230 CDA") in the United States.
The DSA applies to intermediary service providers that offer their services to users based in the European Union, irrespective of whether the intermediary service provider is established in the European Union. [11]
In addition to the liability exemptions, the DSA would introduce a wide-ranging set of new obligations on platforms, including some that aim to disclose to regulators how their algorithms work, while other obligations would create transparency on how decisions to remove content are taken and on the way advertisers target users. The European Centre for Algorithmic Transparency was created to aid the enforcement of this. [12]
A December 2020 Time article said that while many of its provisions only apply to platforms which have more than 45 million users in the European Union, the Act could have repercussions beyond Europe. Platforms including Facebook, Twitter, TikTok, and Google's subsidiary YouTube would meet that threshold and be subjected to the new obligations. [13]
A 16 November 2021 Internet Policy Review listed some of new obligations including mandatory "notice-and-action" requirements, for example, respect fundamental rights, mandatory redress for content removal decisions, and a comprehensive risk management and audit framework. [14]
Companies that do not comply with the new obligations risk fines of up to 6% on their global annual turnover. In addition, the Commission can apply periodic penalties up to 5% of the average daily worldwide turnover for each day of delay in complying with remedies, interim measures, and commitments. As a last resort measure, if the infringement persists and causes serious harm to users and entails criminal offences involving threat to persons' life or safety, the Commission can request the temporary suspension of the service. [15]
On 23 April 2023, the European Commission named a first list of 19 online platforms that will be required to comply starting 25 August 2023. [16] They include the following very large online platforms (VLOPs) with more than 45 million monthly active users in the EU as of 17 February 2023. [17]
Very Large Online Search Engines (VLOSEs):
Amazon and Zalando both initiated proceedings in the General Court challenging the designations, claiming unequal treatment compared to other large retailers, and that their core business models are retail not distributing third party content/products. Zalando argued the criteria and methodology lack transparency, for instance in how it counts active users, while Amazon said VLOP rules are disproportionate for its business model and asked to be exempted from transparency around targeted ads. [18] [19]
As of December 2023, 13 VLOPs have received a request for information (RFI), [15] the procedure necessary to verify compliance with the DSA, and one is being subjected to a formal proceedings. [20] 3 further platforms, all of them providing adult content, were added on 20 December 2023. [21]
The European Commission submitted the DSA alongside the Digital Markets Act (DMA) to the European Parliament and the Council on 15 December 2020. [4] [22] The DSA was prepared by von der Leyen Commission members Margrethe Vestager (Executive Vice President of the European Commission for A Europe Fit for the Digital Age) and Thierry Breton (European Commissioner for Internal Market). [23]
The Digital Services Act builds in large parts on the non-binding Commission Recommendation 2018/314 of 1 March 2018 [24] when it comes to illegal content on platforms. However, it goes further in addressing topics such as disinformation and other risks especially on very large online platforms. As part of the preparatory phase, the European Commission launched a public consultation on the package to gather evidence between July and September 2020. [25] [26] An impact assessment was published alongside the proposal on 15 December 2020 with the relevant evidence base. [27]
The European Parliament appointed Danish Social Democrat Christel Schaldemose as rapporteur for the Digital Services Act. On 20 January 2022 the Parliament voted to introduce amendments in the DSA for tracking-free advertising and a ban on using a minor's data for targeted ads, as well as a new right for users to seek compensation for damages. [28] In the wake of the Facebook Files revelations and a hearing by Facebook Whistleblower Frances Haugen in the European Parliament, [29] the European Parliament also strengthened the rules on fighting disinformation and harmful content, as well as tougher auditing requirements. [30]
The Council of the European Union adopted its position on 25 November 2021. [31] The most significant changes introduced by the Member States are to entrust the European Commission with the enforcement of the new rules, in the wake of allegations and complaints that the Irish Data Protection Watchdog was not effectively policing the bloc's data protection rules against platform companies. [32]
The Data Governance Act (DGA) was formally approved by the European Parliament on 6 April 2022. [33] This sets up a legal framework for common data spaces in Europe which will increase data sharing in sectors such as finance, health, and the environment. [33] [34]
With Russia using social media platforms to spread misinformation about the 2022 Russian invasion of Ukraine, European policymakers felt a greater sense of urgency to move the legislation forward to ensure that major tech platforms were transparent and properly regulated, according to The Washington Post. [35] On 22 April 2022, the Council of the European Union and the European Parliament reached a deal on the Digital Services Act in Brussels following sixteen hours of negotiations. [36] [37] [38] According to The Washington Post, the agreement reached in Brussels solidifies the two-bill plan— the Digital Services Act and the Digital Markets Act, a law regulating competition. The latter is aimed at preventing abuse of power against smaller competitors by larger "gatekeepers". [35]
On 5 July 2022, the European Parliament approved both the DSA and the DMA. [39] Following this, on 4 October 2022, the European Council gave its final approval to the DSA. [40] The DSA was adopted on 19 October 2022 and was published in the Official Journal of the European Union on 27 October 2022. [1] It came into force on 16 November 2022. [41] Most services were given 15 months to comply with its provisions (until 17 February 2024 [42] ). However, "very large" online platforms and search engines, after their designation as such, had only four months to comply (until 23 August 2023). [39]
The DSA was passed alongside the Digital Market Act and the Democracy Action Plan. [43] The latter of these is focused on addressing the nuanced legal interpretation of free speech on digital platforms, a fundamental right that has been extensively guided by the European Court of Human Rights (ECtHR) and the European Convention on Human Rights. [44] Accordingly, the Democracy Action Plan, and subsequently the DSA, were strongly influenced by the Delfi AS v. Estonia and Magyar Tartalomszolgáltatók Egyesülete and Index.hu Zrt v. Hungary ECtHR cases, which outlined a framework for assessing intermediary liability on digital platforms. [45]
In Delfi AS v. Estonia, the ECtHR applied proportionality analysis when considering whether the Estonian courts' decision to hold the online platform Delfi liable for hate speech posted by its users was a proportionate restriction on Delfi's right to freedom of expression. [46] The court found that, given the serious nature of the hate speech, the Estonian courts' actions were justified to protect the rights of others. [47] In other words, the ECtHR upheld the liability of online platforms for hate speech posted by their users, underlining that platforms could be expected to take proactive steps to control content when there is a clear risk of harm from unlawful comments. This case highlighted the responsibilities of platforms to prevent the spread of harmful content. [46]
On the other hand, the MTE and Index.hu v. Hungary case illustrated the nuanced limits of freedom of speech on digital platforms. [48] In its application of proportionality analysis, the ECtHR found that the Hungarian courts had failed to strike a fair balance between protecting reputation and ensuring freedom of expression. [49] The Hungarian courts imposed strict liability on the platforms for user comments that were offensive but did not constitute hate speech, constituting a disproportionate interference in the platforms' right to freedom of expression. The ECtHR ruled that imposing strict liability on platforms for user comments, without consideration of the nature of the comments or the context in which they were made, could infringe on freedom of expression. This judgment emphasized the need for a balance between protecting reputation and upholding free speech on digital platforms. [48]
These decisions by the ECtHR provided critical legal precedents that shaped the EU’s decision-making process on the framework of the DSA. In particular, the DSA drew from the ECtHR's distinction between different types of illegal content, as well as its proportionality analysis in both cases, by incorporating nuanced rules on intermediary liability and ensuring that measures taken by platforms do not unreasonably restrict users' freedom of expression and information. [50]
Media reactions to the Digital Services Act have been mixed. In January 2022, the editorial board of The Washington Post stated that the U.S. could learn from these rules, [51] while whistleblower Frances Haugen stated that it could set a "gold standard" of regulation worldwide. [52] Tech journalist Casey Newton has argued that the DSA will shape US tech policy. [53] Mike Masnick of Techdirt praised the DSA for ensuring the right to pay for digital services anonymously, but criticised the act for not including provisions that would have required a court order for the removal of illegal content. [54]
Scholars have begun critically examining the Digital Services Act. [55] [56] Some academics have expressed concerns that the Digital Services Act might be too rigid and prescribed, [57] excessively focused on individual content decisions or vague risk assessments. [58]
Civil Society organisations such as Electronic Frontier Foundation have called for stronger privacy protections. [59] Human Rights Watch has welcomed the transparency and user remedies but called for an end to abusive surveillance and profiling. [60] Amnesty International has welcomed many aspects of the proposal in terms of fundamental rights balance, but also asked for further restrictions on advertising. [61] Advocacy organisation Avaaz has compared the Digital Services Act to the Paris Agreement for climate change. [62]
Following the 2023 Hamas-led attack on Israel, Thierry Breton wrote public letters to X, Meta Platforms, TikTok, and YouTube on how their platforms complied with the DSA regarding content related to the conflict and upcoming elections. The Atlantic Council's Digital Forensic Research Lab reported that Breton's letters did not follow DSA processes, and digital rights group Access Now criticised Breton's letters for drawing a "false equivalence" between illegal content and disinformation. [63]
Tech companies have repeatedly criticised the heavy burden of the rules and the alleged lack of clarity of the Digital Services Act, [64] and have been accused of lobbying to undermine some of the more far-reaching demands by law-makers, notably on bans for targeted advertising, [65] and a high-profile apology from Sundar Pichai to Breton on leaked plans by Google to lobby against the Digital Services Act. [66]
A bipartisan group of US senators have called the DSA and DMA discriminatory, claiming that the legislation would "focus on regulations on a handful of American companies while failing to regulate similar companies based in Europe, China, Russia and elsewhere." [67] [68]
The DSA was mostly welcomed by the European media sector. [69] Due to the influence gatekeepers have in selecting and controlling the visibility of certain journalistic articles over others through their online platforms, the European Federation of Journalists encouraged EU legislators to further increase the transparency of platforms' recommendation systems via the DSA. [70]
Nevertheless, the DSA's later stage inter-institutional negotiations, or trilogues, have been criticized as lacking transparency and equitable participation. [71] These criticisms mirror past experiences with the drafting of the EU Regulation on Preventing the Dissemination of Terrorist Content Online as well as the General Data Protection Regulation (GDPR). [72]
Swedish member of the European Parliament Jessica Stegrud argued that the DSA's focus on preventing the spread of disinformation and "harmful content" would undermine freedom of speech. [73]
The Web Content Accessibility Guidelines (WCAG) are part of a series of web accessibility guidelines published by the Web Accessibility Initiative (WAI) of the World Wide Web Consortium (W3C), the main international standards organization for the Internet. They are a set of recommendations for making Web content more accessible, primarily for people with disabilities—but also for all user agents, including highly limited devices, such as mobile phones. WCAG 2.0 was published in December 2008 and became an ISO standard, ISO/IEC 40500:2012 in October 2012. WCAG 2.2 became a W3C Recommendation on 5 October 2023.
The digital economy is a portmanteau of digital computing and economy, and is an umbrella term that describes how traditional brick-and-mortar economic activities are being transformed by the Internet and World Wide Web technologies.
The Electronic Commerce Directive in EU law sets up an Internal Market framework for online services. Its aim is to remove obstacles to cross-border online services in the EU internal market and provide legal certainty for businesses and consumers. It establishes harmonized rules on issues such as the transparency and information requirements for online service providers; commercial communications; and electronic contracts and limitations of liability of intermediary service providers. Finally, the Directive encourages the drawing up of voluntary codes of conduct and includes articles to enhance cooperation between Member States.
Copyright infringement is the use of works protected by copyright without permission for a usage where such permission is required, thereby infringing certain exclusive rights granted to the copyright holder, such as the right to reproduce, distribute, display or perform the protected work, or to produce derivative works. The copyright holder is usually the work's creator, or a publisher or other business to whom copyright has been assigned. Copyright holders routinely invoke legal and technological measures to prevent and penalize copyright infringement.
Europeana is a web portal created by the European Union containing digitised cultural heritage collections of more than 3,000 institutions across Europe. It includes records of over 50 million cultural and scientific artefacts, brought together on a single platform and presented in a variety of ways relevant to modern users. The prototype for Europeana was the European Digital Library Network (EDLnet), launched in 2008.
In the United States, Section 230 is a section of the Communications Act of 1934 that was enacted as part of the Communications Decency Act of 1996, which is Title V of the Telecommunications Act of 1996, and generally provides immunity for online computer services with respect to third-party content generated by its users. At its core, Section 230(c)(1) provides immunity from liability for providers and users of an "interactive computer service" who publish information provided by third-party users:
No provider or user of an interactive computer service shall be treated as the publisher or speaker of any information provided by another information content provider.
Notice and take down is a process operated by online hosts in response to court orders or allegations that content is illegal. Content is removed by the host following notice. Notice and take down is widely operated in relation to copyright infringement, as well as for libel and other illegal content. In United States and European Union law, notice and takedown is mandated as part of limited liability, or safe harbour, provisions for online hosts. As a condition for limited liability online hosts must expeditiously remove or disable access to content they host when they are notified of the alleged illegality.
Digital goods are software programs, music, videos or other electronic files that users download exclusively from the Internet. Some digital goods are free, others are available for a fee. The taxation of digital goods and/or services, sometimes referred to as digital tax and/or a digital services tax, is gaining popularity across the globe.
Axel Voss is a German lawyer and politician of the Christian Democratic Union of Germany who has been serving as a Member of the European Parliament since 2009 and became coordinator of the European People's Party group in the Committee on Legal Affairs in 2017. His parliamentary work focuses on digital and legal topics.
The term digital single market refers to the policy objective of eliminating national or other jurisdictional barriers to online transactions, building on the common market concept designed to remove trade barriers in other commercial fields.
Media freedom in the European Union is a fundamental right that applies to all member states of the European Union and its citizens, as defined in the EU Charter of Fundamental Rights as well as the European Convention on Human Rights. Within the EU enlargement process, guaranteeing media freedom is named a "key indicator of a country's readiness to become part of the EU".
The Network Enforcement Act, also known colloquially as the Facebook Act, is a German law that was passed in the Bundestag in 2017 that officially aims to combat fake news, hate speech and misinformation online.
A dark pattern is "a user interface that has been carefully crafted to trick users into doing things, such as buying overpriced insurance with their purchase or signing up for recurring bills". User experience designer Harry Brignull coined the neologism on 28 July 2010 with the registration of darkpatterns.org, a "pattern library with the specific goal of naming and shaming deceptive user interfaces". In 2023 he released the book Deceptive Patterns.
Big Tech, also known as the Tech Giants or Tech Titans, are the largest IT companies in the world. The concept of Big Tech is similar to the grouping of dominant companies in other sectors. It typically refers to the Big Five United States tech companies: Alphabet, Amazon, Apple, Meta, and Microsoft; or the Magnificent Seven, which includes Nvidia and Tesla. Big Tech can also include Chinese companies such as Baidu, Alibaba, Tencent, and Xiaomi (BATX).
The Directive on Copyright in the Digital Single Market, formally the Directive (EU) 2019/790 of the European Parliament and of the Council of 17 April 2019 on copyright and related rights in the Digital Single Market and amending Directives 96/9/EC and 2001/29/EC, is a European Union (EU) directive which has been adopted and came into force on 7 June 2019. It is intended to ensure "a well-functioning marketplace for copyright". It extends existing European Union copyright law and is a component of the EU's Digital Single Market project. The Council of the European Union describes their key goals with the Directive as protecting press publications; reducing the "value gap" between the profits made by Internet platforms and by content creators; encouraging collaboration between these two groups, and creating copyright exceptions for text- and data-mining.
The Digital Markets Act (DMA) is an EU regulation that aims to make the digital economy fairer and more contestable. The regulation entered into force on 1 November 2022 and became applicable, for the most part, on 2 May 2023.
The Online Safety Act 2023 is an act of the Parliament of the United Kingdom to regulate online speech and media. It passed on 26 October 2023 and gives the relevant Secretary of State the power, subject to parliamentary approval, to designate and suppress or record a wide range of speech and media deemed "harmful".
The Regulation to Prevent and Combat Child Sexual Abuse is a European Union regulation proposed by the European Commissioner for Home Affairs Ylva Johansson on 11 May 2022. The stated aim of the legislation is to prevent child sexual abuse online through the implementation of a number of measures, including the establishment of a framework that would make the detection and reporting of child sexual abuse material (CSAM) by digital platforms – known by its critics as Chat Control – a legal requirement within the European Union.
The European Centre for Algorithmic Transparency (ECAT) provides scientific and technical expertise to support the enforcement of the Digital Services Act (DSA) and researches the impact of algorithmic systems deployed by online platforms and search engines. Launched in 2023, ECAT is part of the Joint Research Centre within the European Commission, working in close collaboration with the Directorate General Communications Networks, Content and Technology.
The Information Society Service (ISS) described by EU Directive2015/1535 is an EU Directive that aims to define the concept of an information society service, which is relevant to regulate big tech and online media services.
{{cite web}}
: CS1 maint: multiple names: authors list (link)