Skip to main content
Back to Intelligence Hub
regulationEuropean UnionRisk Level: high

EU DSA Article 39 Ads Repository Q1 2026 Audit Findings — Advertiser Disclosure Gaps, Repository Quality Issues & Cross-Platform Compliance Implications

Independent research on the Q1 2026 DSA Article 39 ads repositories shows substantial disclosure gaps across the four largest VLOP advertising platforms. Missing targeting fields, late publication, and inconsistent advertiser identity verification expose campaigns to research, regulator, and competitor scrutiny.

April 28, 202612 min readAuditSocials Research
TweetShare
EU DSA Article 39 Ads Repository Q1 2026 Audit Findings — Advertiser Disclosure Gaps, Repository Quality Issues & Cross-Platform Compliance Implications

Q1 2026 Repository Context

Article 39 of the Digital Services Act requires every Very Large Online Platform to maintain a publicly accessible ads repository covering every advertisement served on the platform with mandatory fields including advertiser identity, ad content, targeting parameters, audience exclusion criteria, total recipients, and the period during which the ad was served. Repositories went live across first-wave VLOPs through 2024 with substantial gaps; through 2025 platforms iterated on data quality, search infrastructure, and field completeness in response to Commission feedback and research community findings.

Q1 2026 marks the first full quarter where comparative cross-platform analysis is feasible at scale. Data quality has matured to a level supporting systematic study, search and filtering capabilities are sufficient for cross-platform queries, and a full year of accessible data has accumulated enabling longitudinal analysis. Independent researchers, civil society, and Commission supervisory teams now have repository data sufficient to identify structural disclosure gaps and inform enforcement priorities.

Advertisers and brands relying on VLOP advertising should treat Q1 2026 audit findings as a leading indicator of regulatory direction. Commission enforcement priorities for 2026 and 2027 will be informed by repository data quality and observable advertising practices. Use the Policy Change Tracker to monitor repository changes that platforms ship in response to findings.

"Article 39 repositories are at the inflection point where comparative analysis becomes possible. Q1 2026 is the first period where the data quality supports systematic cross-platform research, and the findings are exposing structural gaps that platforms must close."
— Independent DSA repository audit, Q1 2026

Cross-Platform Audit Findings

Q1 2026 audit findings span structural deficiencies that recur across the four largest VLOP advertising surfaces — Meta, TikTok, X, and LinkedIn — alongside platform-specific issues reflecting different architectures and prior enforcement history.

Recurring Structural Gaps

GapPatternSeverity
Targeting parameter completenessHigh-level categories disclosed; granular targeting logic omittedHigh
Audience exclusion fieldsInclusion disclosed; exclusion under-reported across all platformsHigh
Advertiser identity verificationInconsistent depth; agency intermediaries obscure brand identityMedium-High
Reach number methodologyVariance in impressions vs. unique users vs. delivered reachMedium
Publication latencyMinutes to days from serving to repository availabilityMedium
Dynamic creative disclosureVariant-level data inconsistent for DCO and AI-generated assetsHigh

Why These Gaps Matter

  • Exclusion targeting drives equality risk: Audiences that never see an ad may be more affected than those who do — discrimination claims hinge on exclusion criteria
  • Granular targeting is the actual operational reality: Category labels obscure custom audiences, lookalikes, and behavioral segments that drive delivered audience
  • Identity gaps undermine accountability: Public scrutiny relies on identifying the actual paying party
  • Latency compromises in-flight analysis: Repository data only useful if available while a campaign is live

Use the Legal Compliance Scan for cross-jurisdiction compliance review and EU DSA Compliance for framework detail.

Field-Level Disclosure Gaps

Field-level analysis surfaces specific repository entries where disclosure falls below Article 39 expectations. Patterns repeat across platforms with platform-specific manifestations.

Targeting Field Patterns

  • Custom audiences from advertiser data: Disclosed as "custom audience" without underlying construction logic
  • Lookalike audiences: Disclosed as "lookalike" without seed audience specification
  • Retargeting cohorts: Disclosed as "retargeting" without source event or behavioral trigger
  • Behavioral and interest segments: High-level interest disclosed; granular behavioral signals omitted
  • Cross-product targeting: Targeting based on signals from other products in integrated platforms inconsistently disclosed

Exclusion Targeting Patterns

  • Suppression lists: Inconsistently disclosed across platforms
  • Negative interest targeting: Frequently absent from repository entries
  • Demographic exclusions: Reported when explicit; inferred exclusions through targeting design under-reported
  • Geographic exclusions: Country-level disclosed; sub-national exclusions inconsistently reported

Creative Variant Disclosure

Creative TypeDisclosure QualityGap
Static creativeMostly completeMinor
Dynamic Creative OptimizationVariant-level inconsistentHigh
Dynamic product adsProduct-level variant disclosure inconsistentMedium
AI-generated creative variantsInconsistent or absentHigh
Localized variantsLanguage version disclosed; localization rationale rarelyMedium

Advertiser Operational Impact

Q1 2026 findings translate to operational obligations for brands running EU campaigns even where the gap is platform-side rather than advertiser-side. Repository data exposed to public scrutiny creates accountability that outlives platform-level enforcement.

Documentation Requirements

  • Internal targeting records sufficient to reconstruct repository entries under regulator inquiry
  • Audience construction logs documenting custom audience sources, lookalike seeds, and retargeting triggers
  • Exclusion criteria documentation with business rationale and lawful basis
  • Creative variant inventories for DCO and AI-generated assets with brand-safety review
  • Retention period: At least one year matching repository retention; longer ideal for audit cycles

Pre-Flight, In-Flight, Post-Flight Practice

PhaseActionDeliverable
Pre-flightRepository preview — anticipate how the campaign appearsTargeting/creative adjustments before launch
In-flightMonitor repository data for own campaigns and competitorsEarly warning on research / regulator attention
Post-flightArchive repository data + advertiser-side recordsAudit-ready evidence for the retention window

For automated audit support see AI Compliance Audit.

Cross-Platform Comparison

Each platform faces distinct repository issues in Q1 2026 reflecting platform architecture, advertiser composition, and prior enforcement history.

Platform-Specific Issues

PlatformPrimary IssueSecondary Issue
MetaCustom audience disclosure depthAdvantage+ AI variant disclosure
TikTokBehavioral targeting field completenessPolitical content classification edge cases (Dec 2025 commitments)
XAdvertiser identity verification depthSearch infrastructure stability and API availability
LinkedInB2B targeting granularity (job title, seniority)Lead-gen form data minimization disclosure

Cross-Platform Consistency Expectations

  • Brands operating across platforms face research and regulator scrutiny on inconsistencies
  • Same campaign rationale should be presentable across platform-specific repository entries
  • Cross-functional coordination between targeting, creative, legal, and brand safety reduces inconsistency surface
  • Platform-specific customization should be defensible rather than opportunistic

Compliance Checklist

  • [ ] Audit own campaigns in each VLOP repository for Q1 2026 disclosure completeness
  • [ ] Document custom audience sources, lookalike seeds, and retargeting triggers with retention ≥ one year
  • [ ] Document exclusion targeting criteria with business rationale and GDPR lawful basis
  • [ ] Inventory dynamic creative variants and AI-generated assets with brand-safety review
  • [ ] Establish pre-flight repository preview review for EU campaigns
  • [ ] Build in-flight monitoring for repository data on own campaigns and key competitors
  • [ ] Archive post-flight repository data for audit-ready evidence
  • [ ] Align cross-platform targeting and creative standards reducing inconsistency surface
  • [ ] Prepare incident response procedures for repository-driven research or regulator inquiry
  • [ ] Use EU DSA Compliance guide and Policy Change Tracker for ongoing updates

Don't miss the next policy change.

Subscribe to the Policy Change Tracker — get weekly digests or instant Pro alerts across all 8 platforms. Or try our free Keyword Risk Checker first.

Subscribe Free

Report Keywords — Run AI Compliance Audit

#DSA#Article 39#Ad Transparency#EU Regulation#VLOP#Ad Compliance#Repository Audit#2026 Policy#Compliance Guide 2026#Advertisers#Platform Policy

Share This Report

TweetShare

Related Posts

Related Resources