Back to Intelligence Hub
regulationEuropean UnionRisk Level: high
EU DSA Second-Wave VLOP Designations April 2026 — 12+ New Platforms Under Article 33, Cross-Product User Counts & 2027 Audit Timeline
The European Commission's second-wave DSA designations effective April 2026 add 12+ platforms to the Very Large Online Platform list under tighter user-count methodology. The January 2027 compliance review will be the first formal audit of the second-wave cohort with fines up to 6% of global revenue.
Quick Answer
The European Commission's second-wave DSA designations effective April 2026 added 12+ platforms to the VLOP list under tighter user-count methodology. The January 2027 compliance review is the first formal audit of the second-wave cohort, with fines up to 6% of global revenue for material non-compliance.
April 2026 Designation Wave
The European Commission's second-wave DSA platform designations effective April 2026 expand the Very Large Online Platform cohort and tighten the methodology used to determine which platforms meet designation thresholds. The first-wave designations in 2023 covered 19 platforms; the second wave adds more than a dozen mid-tier networks newly above the 45 million monthly active recipient threshold under the refined methodology.
The European Board for Digital Services has convened periodically to reaffirm enforcement priorities including supervision of newly designated platforms, protection of minors, and Member State coordination; advertisers should confirm any specific meeting and its conclusions against primary Commission records. The Board has supported Commission preliminary findings affecting platforms including TikTok, signaling continued enforcement progression where platform conduct warrants formal action.
Newly designated platforms have a six-month adaptation period to bring DSA compliance to first-wave standard. The January 2027 compliance review will be the first formal audit of the second-wave cohort, with non-compliance triggering fines up to 6 percent of global annual revenue. Use the Policy Change Tracker to monitor designation updates and the EU DSA Compliance guide for framework details.
The DSA threshold of 45 million average monthly active recipients in the EU could, in principle, be applied to count unique users across integrated product lines rather than allowing platforms to segment users between micro-products.
— AuditSocials Policy Analysis Team
Cross-Product User Count Methodology
The April 2026 methodological refinement closes a gap that previously allowed multi-product platforms to keep individual products below threshold while aggregate users across products materially exceeded the threshold.
What Changed in Counting
| Pre-2026 Approach | Refined Methodology |
|---|---|
| Per-product user count with platform-defined product boundaries | Unique users across product lines under common ownership and integrated infrastructure |
| Multi-product platforms could segment users between products | Integrated platforms evaluated as single entity for designation |
| Affiliated companies could argue independent product status | Corporate structure substance over form determines integration |
| Products with shared identity infrastructure counted separately | Shared identity, content, recommendation, or ad infrastructure treated as integrated |
Platform Patterns Most Affected
- Marketplace + social + content: Each component below threshold individually but aggregate exceeds
- Creator economy products: Creator-facing tools and consumer-facing surfaces integrated
- Consumer + developer: Developer ecosystems sharing identity with consumer products
- B2B + B2C: Business and consumer surfaces operationally connected
- Affiliated entity structures: Apparently independent products sharing infrastructure with parent or affiliates
For platform self-evaluation see Policy Change Tracker and Legal Compliance Scan.
Newly Designated Platform Categories
The April 2026 cohort spans several platform categories with specific designations announced through formal Commission decisions.
Cohort Categories
- Mid-tier social networks: Regional concentration in EU markets; niche networks with strong demographic engagement; creator-focused platforms
- Specialized commerce / marketplace: EU-concentrated marketplaces; classifieds and listing platforms; B2B marketplaces with consumer surfaces
- Content and creator platforms: Mid-tier video and streaming; audio/podcast platforms; creator monetization platforms
- Integrated platforms (refined methodology): Aggregate users across product lines exceed threshold
- Search and discovery (mid-tier): EU-market platforms with substantial query volume
Adjacent Categories Under Watch
- First-wave VLOPs: User count methodology re-evaluated under refined approach
- Approaching threshold: Platforms approaching but not yet exceeding may face designation in subsequent waves
- VLOSEs: Very Large Online Search Engines under separate but related provisions
DSA Obligations and Adaptation Period
Newly designated VLOPs face the full set of DSA obligations applied to first-wave VLOPs but with adaptation period reflecting recent designation.
Core VLOP Obligations
| Obligation | Article | Adaptation Priority |
|---|---|---|
| Systemic risk assessment | 34 | Critical — methodology and documentation foundation |
| Risk mitigation measures | 35 | Critical — measures aligned with identified risks |
| Independent audit | 37 | Critical — audit-ready by January 2027 |
| Transparency reporting | 42 | High — periodic reports public and accessible |
| Researcher data access | 40 | High — GDPR-compatible procedures |
| Advertising repository | 39 | High — affects advertiser-facing operations |
| Recommender transparency | 38 | Medium — opt-out from profile-based recommendations |
| Content moderation appeals | 20 | Medium — timely review and outcome reporting |
| Crisis response | 48 | Medium — Commission engagement procedures |
First-Wave vs. Second-Wave Differences
- Adaptation timeline: Second-wave platforms have six-month adaptation; first-wave platforms operate established compliance infrastructure
- Initial gaps tolerated: Provisional approaches mature through adaptation period
- Peer learning: Second-wave benefits from first-wave audit experience and Commission interpretive guidance
- Supervisory engagement: Capability building emphasis during adaptation alongside enforcement focus
For first-wave compliance context see our EU DSA Compliance Guide.
January 2027 Audit Timeline
The January 2027 compliance audit marks the first formal Article 37 evaluation of the second-wave cohort and creates significant operational pressure to mature compliance during adaptation.
Audit Scope
- Risk assessment quality: Methodology, scope, and documentation of systemic risk identification and analysis
- Risk mitigation adequacy: Measure proportionality and implementation
- Transparency reporting: Accuracy and completeness of periodic reports
- Article 39 ad repository: Compliance with mandatory disclosure fields
- Researcher access: Procedures and data quality
- Recommender transparency: User opt-out and explanations
- Content moderation appeals: Procedures and outcomes
- Crisis response: Capability and Commission engagement
Audit Outcome Range
| Outcome | Implication |
|---|---|
| Positive opinion | Compliance confirmed; standard supervisory cycle continues |
| Qualified opinion | Limited compliance issues; remediation plan required |
| Negative opinion | Material non-compliance; enforcement progression including fines and supervised remediation |
Reports Become Public
- Audit reports published — platform practices exposed to advocacy, journalism, and competitor analysis
- Cross-platform learning informs Commission enforcement priorities for subsequent cycles
- Periodic penalty payments may apply for ongoing non-compliance during remediation
Advertiser and Brand Impact
Second-wave designation affects advertisers across operational, transparency, and risk dimensions with implications varying by scale, content category, and EU focus.
Operational Implications
- Repository participation: Ad content, targeting, advertiser identity, audience reach data publicly disclosed
- Targeting changes: Profile-based targeting of minors and sensitive category restrictions
- Disclosure obligations: AI content, advertiser identity verification, political content frameworks
- Timing changes: Approval timelines and content review aligned with DSA
Transparency and Risk
- Public scrutiny: Research, journalism, civil society analysis at scale
- Competitive monitoring: Peers can observe each other's campaigns within disclosure timeframes
- Cross-jurisdiction consistency: Inconsistent practices across jurisdictions create challenge surface
- Cumulative across platforms: Materially expanded transparency environment vs. single-platform impact
Brand Preparation
- Audit current campaigns on newly designated platforms for elevated-scrutiny practices
- Document business rationale and lawful basis for targeting and content choices
- Rationalize cross-platform operations with consistent compliance standards
- Diversification: Reduce concentration on single-platform DSA maturity
Compliance Checklist
- [ ] Identify which of your platform partners are in the second-wave designation cohort
- [ ] Audit advertising operations on newly designated platforms for repository disclosure scope
- [ ] Document business rationale and GDPR lawful basis for targeting and content choices
- [ ] Align cross-platform compliance standards across first-wave and second-wave platforms
- [ ] Track January 2027 audit timeline and platform adaptation progress for partners
- [ ] Build incident response procedures for platform compliance changes affecting campaigns
- [ ] Engage platform partner managers where eligible for input on DSA implementation
- [ ] Diversify platform mix to reduce concentration on single-platform DSA maturity
- [ ] Map cross-jurisdiction consistency for brands operating in EU and other markets
- [ ] Use EU DSA Compliance guide for framework detail and Policy Change Tracker for ongoing updates
Frequently Asked Questions
What changed with the European Commission's April 2026 second-wave DSA platform designations?
The European Commission's second-wave DSA platform designations effective April 2026 expand the Very Large Online Platform cohort and tighten the methodology used to determine which platforms meet the designation threshold. Under DSA Article 33, platforms with 45 million average monthly active recipients in the European Union qualify for VLOP designation and become subject to the framework's enhanced obligations including risk assessment, transparency reporting, researcher data access, and supervisory cooperation. The first wave of designations in 2023 covered 19 platforms including major social networks, search, retail, and content platforms. The second wave effective April 2026 adds more than a dozen platforms to the list including several mid-tier networks that were previously below the threshold under prior measurement approaches but qualify under the refined methodology. The European Board for Digital Services has convened periodically to reaffirm enforcement priorities including supervision of designated platforms, protection of minors online, and coordination across Member States; advertisers should confirm any specific meeting and its conclusions against primary Commission records. The second-wave designations reflect both organic growth of mid-tier platforms above the 45 million threshold and methodological refinements that count unique users across product lines rather than allowing platforms to segment users between micro-products. The methodological refinement closes a gap that previously allowed multi-product platforms to allocate users to specific products keeping each product below the threshold while the aggregate user base across products materially exceeded the threshold. Newly designated platforms have a six-month adaptation period to bring DSA compliance to the same standard as first-wave VLOPs, with the January 2027 compliance review being the first formal audit of the second-wave cohort. Non-compliance can trigger fines up to 6 percent of global annual revenue under DSA enforcement framework with periodic penalty payments for ongoing non-compliance and additional enforcement measures including supervised remediation. Advertisers and content publishers using newly designated platforms should expect increased transparency reporting, researcher access to advertising and recommendation data, and platform operational changes affecting advertiser experience as platforms implement DSA infrastructure. For broader DSA framework see our EU DSA Compliance guide and the Policy Change Tracker for ongoing designation updates.
How does the cross-product user count methodology change which platforms qualify as VLOPs?
The April 2026 methodological refinement on cross-product user counting closes a gap that previously allowed multi-product platforms to keep individual products below the 45 million monthly active recipient threshold while aggregate users across products materially exceeded the threshold. The pre-2026 methodology evaluated each product independently for designation purposes, with platforms permitted to define product boundaries supporting per-product user count measurement. Multi-product platforms could segment users between products such as a primary social network product, a separate marketplace product, a separate creator monetization product, and a separate developer tools product, with each product reporting users below the threshold individually. The refined methodology counts unique users across product lines where products operate under common ownership, share user identity infrastructure, share content or recommendation systems, or otherwise constitute integrated platform operation. The Commission's threshold application now treats integrated platforms as single entities for designation purposes regardless of internal product organization. Platforms operating with substantial product integration including unified login, cross-product content distribution, shared recommendation systems, or unified advertising delivery infrastructure are evaluated based on aggregate unique users across the integrated operation. The methodological refinement particularly affects platforms with marketplace plus social plus content components where each component might individually be below threshold but aggregate user base substantially exceeds threshold, platforms with creator economy products where creator-facing tools and consumer-facing surfaces are integrated, platforms with consumer plus developer products where developer ecosystems share user identity with consumer products, and platforms with B2B plus B2C components where business and consumer surfaces are operationally connected. The refined methodology also addresses platforms that previously argued for product segmentation through corporate structure including affiliated companies operating apparently independent products that share user identity, technology infrastructure, or commercial integration with parent or affiliated entities. The Commission evaluates corporate structure substance rather than form when determining integrated operation. Platforms uncertain about their designation status under the refined methodology should engage with the Commission proactively rather than wait for formal designation review. Designation can occur through Commission initiative based on Commission analysis or through platform self-declaration where platforms acknowledge crossing the threshold under the refined methodology. Platforms designated through Commission initiative may face additional scrutiny on user count reporting and corporate structure than platforms self-declaring. The methodology will continue to evolve as the Commission gains experience with multi-product platforms and as platform structures change. For platform self-evaluation guidance see our Policy Change Tracker and the Legal Compliance Scan.
Which platforms have been newly designated in the April 2026 second-wave cohort?
The April 2026 second-wave VLOP designation cohort includes more than a dozen platforms across several categories with specific designations announced through the European Commission's formal decision process. The cohort includes mid-tier social networks that have grown above the 45 million threshold including platforms with regional concentration in EU markets that have scaled past the threshold through organic growth, niche social networks with strong engagement among specific demographics that aggregate to threshold scale, and creator-focused platforms with substantial EU user bases. The cohort includes specialized commerce and marketplace platforms including marketplace operators with EU concentration above the threshold, classifieds and listing platforms operating across EU markets, and B2B marketplaces with consumer-facing surfaces above threshold. The cohort includes content and creator platforms including video and streaming platforms below first-wave designation but above the refined-methodology threshold, audio platforms including podcast and music platforms with EU concentration, and creator monetization platforms operating across content categories. The cohort includes integrated platforms designated under the refined cross-product methodology where aggregate users across product lines exceed threshold even if individual products were below. The cohort includes mid-tier search and discovery platforms operating in EU markets with substantial query volume. Platforms not in the second-wave cohort but potentially affected by the methodology include first-wave VLOPs whose user count methodology has been re-evaluated under the refined approach, platforms approaching but not yet exceeding threshold that may face designation in subsequent waves, and Very Large Online Search Engines designated under separate but related provisions. The complete list of second-wave designations is published in European Commission decisions accessible through the Digital Services Act enforcement framework documentation. Platforms designated in the second wave have specific compliance obligations beginning from designation date with full compliance expected by the January 2027 compliance review. Advertisers and content publishers should review whether their platform partners are in the second-wave cohort and adjust expectations accordingly. Newly designated platforms will implement DSA infrastructure including risk assessment frameworks, transparency reporting systems, researcher access procedures, and advertiser-facing changes affecting transparency repository participation. Implementation may affect advertiser experience including additional disclosure requirements, modified targeting capabilities, and operational changes as platforms align with DSA standards. Pre-existing first-wave VLOP advertising operations may also be affected by Commission analysis of recommendations and advertising patterns across the expanded cohort. For ongoing platform designation updates see the Policy Change Tracker.
What obligations apply to newly designated platforms, and how does compliance differ from first-wave VLOPs?
Newly designated VLOPs in the second-wave cohort face the full set of DSA obligations applied to first-wave VLOPs but with adaptation period and implementation timeline reflecting the more recent designation. Core DSA obligations applicable to all VLOPs include systemic risk assessment requiring platforms to identify, analyze, and mitigate systemic risks including risks to fundamental rights, civic discourse, public health, public security, and protection of minors, with assessments conducted at least annually and additionally on significant platform changes. Risk mitigation measures appropriate to identified risks proportionate to platform scope and scale, with measures documented and reported to the Commission. Independent audit of compliance with DSA obligations including risk assessment, mitigation measures, and broader compliance, with audits conducted by Commission-approved auditors and reports available to the Commission. Transparency reporting including periodic reports on content moderation, advertising practices, recommender system parameters, and policy enforcement, with reports published and accessible to researchers and civil society. Researcher access to platform data supporting independent research on systemic risks and platform operation, with data access governed by GDPR-compatible procedures and platform-side infrastructure supporting researcher use. Advertising repository under Article 39 disclosing every advertisement served on the platform with mandatory fields including advertiser identity, targeting criteria, and audience reach. Recommender system transparency providing users with options to opt out of profile-based recommendations and explanations of how recommender systems operate. Content moderation appeal procedures supporting users challenging content moderation decisions with timely review and outcome reporting. Crisis response procedures supporting Commission engagement during identified crises affecting public order, public health, or fundamental rights. Compliance differences between first-wave and second-wave platforms primarily reflect adaptation timeline rather than substantive obligations. First-wave platforms have completed initial compliance audit cycles and operate established infrastructure for ongoing compliance. Second-wave platforms operate under adaptation period with January 2027 compliance review marking the first formal audit. Adaptation period considerations include initial compliance gaps where platforms newly building DSA infrastructure may have provisional approaches that mature through the adaptation period, ongoing dialogue with Commission supporting platform alignment with regulatory expectations, peer learning where second-wave platforms benefit from first-wave experience and Commission interpretive guidance from prior cycles, and supervisory engagement during adaptation supporting platform-side capability building rather than only enforcement focus. Implementation infrastructure including risk assessment frameworks, transparency reporting systems, advertising repositories, researcher access procedures, and recommender transparency tools must be operational by January 2027 audit. Platforms working through adaptation should prioritize foundational infrastructure including data systems supporting transparency reporting and advertising repository, governance frameworks supporting risk assessment and mitigation, audit-ready documentation supporting independent audit cycle, and regulatory engagement procedures supporting Commission communication. Advertisers and content publishers using second-wave platforms should expect platform operational changes affecting advertiser experience including additional disclosure requirements, modified targeting capabilities, and timing changes as platforms implement DSA standards. For first-wave platform compliance context see EU DSA Compliance Guide.
What does the January 2027 compliance audit timeline mean for second-wave platforms and their advertisers?
The January 2027 compliance audit timeline marks the first formal audit of second-wave VLOP cohort under DSA Article 37 with material implications for platforms operating under the framework and for advertisers and content publishers using those platforms. The DSA Article 37 audit framework requires VLOPs to undergo independent audit of compliance with DSA obligations conducted by independent auditors approved by the Commission, with audit cycles aligned to platform compliance year and audit reports submitted to the Commission within prescribed timelines. First-wave VLOPs have completed initial audit cycles with reports published in 2024 and 2025 informing Commission supervisory priorities and refining audit expectations. The January 2027 timeline for second-wave audits reflects the adaptation period from April 2026 designation through January 2027 compliance year completion. Audit scope covers full DSA compliance including systemic risk assessment quality and methodology, risk mitigation measure adequacy and implementation, transparency reporting accuracy and completeness, advertising repository compliance with Article 39 requirements, researcher access procedures and data quality, recommender system transparency, content moderation appeal procedures, and crisis response capability. Audit findings range from positive opinion confirming compliance through qualified opinion identifying limited compliance issues to negative opinion finding material non-compliance with implications for further enforcement. Audit reports become public reducing platform-side ability to obscure compliance gaps and exposing platform practices to advocacy, journalism, and competitor analysis. For second-wave platforms specifically, the January 2027 audit will be the first formal evaluation creating significant operational pressure to mature compliance infrastructure during the adaptation period. Platforms should treat the adaptation period as compliance build-out time rather than continued business-as-usual with eventual catch-up. Operational implications during adaptation include accelerated compliance investment supporting infrastructure readiness, governance maturation aligning compliance functions with regulatory expectations, audit-readiness procedures including documentation, evidence preparation, and process maturity, and Commission engagement supporting platform-side understanding of expectations and reducing audit surprises. Advertiser implications include platform operational changes affecting advertiser experience throughout the adaptation period as platforms implement compliance infrastructure, transparency reporting that newly exposes advertising practices to research and regulatory analysis, advertising repository implementation creating advertiser-facing operational changes including disclosure obligations, and audit-driven future changes where audit findings drive subsequent platform modifications affecting advertiser experience. Content publisher implications include content moderation appeal procedure changes affecting content visibility decisions, recommender transparency creating publisher visibility into algorithmic distribution, and risk mitigation measures affecting content categories or content types appearing on platforms. Risk for affected platforms includes audit findings of material non-compliance triggering Commission enforcement up to 6 percent global turnover fines, supervised remediation requiring platform-side compliance investment under Commission oversight, and ongoing enhanced supervision for platforms with audit issues. Periodic penalty payments may be imposed for ongoing non-compliance during remediation. Cross-platform learning from audit cycles will inform Commission enforcement priorities and audit methodology refinements affecting subsequent audit cycles. Advertisers and content publishers should monitor audit cycles for second-wave platforms they rely on and adjust dependence accordingly. For audit and enforcement framework see our Policy Change Tracker.
How does the second-wave designation affect advertisers and brands using newly designated platforms?
Second-wave designation affects advertisers and brands across operational, transparency, and risk dimensions with implications varying by advertiser scale, content category, and EU market focus. Operational implications include advertising repository participation where advertisers running campaigns on newly designated platforms must accept that ad content, targeting criteria, advertiser identity, and audience reach data appear in publicly accessible repositories within timeframes set by platform-side commitments, with implications for competitive intelligence, brand strategy, and operational documentation. Targeting capability changes where DSA frameworks restrict certain targeting practices including profile-based targeting of minors and sensitive category targeting, with platforms implementing restrictions affecting advertiser-side audience strategy. Disclosure obligations expanding for platforms implementing DSA standards including AI content disclosure, advertiser identity verification, and political content frameworks aligned with Commission expectations. Operational timing changes as platforms implement DSA infrastructure including approval timelines, content review processes, and policy enforcement aligned with DSA obligations. Transparency implications include advertiser activity becoming publicly documented through repository participation creating new accountability layer beyond platform-side enforcement, research community visibility where academic and civil society researchers can analyze advertising practices at scale, journalist access where media coverage of advertising practices becomes feasible based on documented data, and competitor monitoring where peers can observe each other's campaigns within disclosure timeframes. Brand reputation implications include exposure to public scrutiny of advertising practices through repository data, vulnerability to advocacy targeting where civil society organizations identify and challenge advertising patterns, and accountability for cross-jurisdiction consistency where the same brand operating in different jurisdictions may face inconsistency challenges. Risk implications include compliance risk where advertiser practices exposed through repositories must align with broader EU advertising rules including consumer protection, food and health, financial services, and political advertising restrictions, regulatory risk where Commission and Member State authorities can identify advertising patterns warranting investigation, and reputational risk where research findings or media coverage affects brand standing. Advertisers operating across first-wave and second-wave platforms should rationalize compliance approach across the platform portfolio rather than per-platform customization including consistent disclosure standards, unified targeting policies, integrated transparency documentation, and cross-platform incident response procedures. Brand-side preparation for second-wave platform expansion includes audit of current campaigns on newly designated platforms identifying any practices that may face elevated scrutiny, documentation of business rationale and lawful basis for targeting and content choices supporting defensible response to inquiry, alignment of cross-platform operations with consistent compliance standards, and ongoing monitoring of platform implementation as second-wave platforms build DSA infrastructure. Strategic considerations include diversification across platforms reducing concentration risk on any single platform's DSA compliance maturity, platform partner manager engagement where eligible supporting advertiser-side input on platform implementation, and contingency planning for compliance-driven platform changes affecting advertiser operations. Advertisers should treat second-wave designation as expansion of the regulatory framework rather than incremental change because the cumulative effect across platforms materially expands the transparency and accountability environment for EU advertising operations. For cross-platform compliance approach see our EU DSA Compliance guide.
What enforcement mechanisms apply, and how does the Commission coordinate with Member States?
DSA enforcement combines Commission-led supervision of VLOPs with Member State coordination through Digital Services Coordinators across non-VLOP obligations and platform conduct affecting specific Member State jurisdictions. The Commission operates as the lead enforcement authority for VLOPs and Very Large Online Search Engines under DSA Article 56 with exclusive competence on systemic compliance with the most stringent obligations. Commission enforcement tools include initiation of formal proceedings when potential non-compliance is identified through complaints, audit findings, or Commission analysis of platform operation, preliminary findings issued during proceedings allowing platforms to provide views and supporting documentation, decisions following proceedings imposing remediation requirements, fines, or other consequences, periodic penalty payments for ongoing non-compliance during remediation periods, and supervisory engagement supporting platform-side compliance development outside formal proceedings. Commission fines under DSA can reach 6 percent of global annual turnover for serious or systemic non-compliance with periodic penalty payments adding ongoing financial pressure for unresolved non-compliance. The Commission's December 2025 acceptance of TikTok commitments demonstrates Commission willingness to resolve proceedings through commitment frameworks where platforms accept binding obligations addressing identified non-compliance. The Commission's preliminary findings against TikTok and four pornographic platforms supported by the European Board for Digital Services illustrate Commission progression to formal enforcement when commitments are insufficient or non-compliance is severe. Member State Digital Services Coordinators handle obligations applying to all platforms regardless of VLOP status including content removal procedures, transparency reporting at smaller scale, and complaints from users in their jurisdiction. Member State coordination through the European Board for Digital Services supports consistency across jurisdictions, sharing of enforcement expertise, and coordinated response to cross-border issues. Coordination becomes important where platform conduct affects multiple Member States, where national legal frameworks intersect with DSA obligations including national consumer protection, advertising self-regulation, and political advertising rules, and where DSA implementation requires Member State action including Digital Services Coordinator designation, national infrastructure for receiving and processing user complaints, and judicial cooperation supporting cross-border enforcement. Recent enforcement actions illustrate the active enforcement posture including Commission proceedings against TikTok resolved through December 2025 commitments addressing advertising transparency, Commission proceedings against four pornographic platforms with preliminary findings supported by the European Board, and X-related enforcement including financial guarantees secured by the Commission supporting eventual fine collection if proceedings result in fines. Cross-jurisdiction enforcement coordinates with broader EU regulatory frameworks including DMA enforcement against gatekeeper platforms with overlapping obligations, AI Act enforcement intersecting with DSA on AI-generated content, GDPR enforcement intersecting on personal data processing, and consumer protection enforcement intersecting on advertising and commercial practices. Advertisers and content publishers should expect coordinated enforcement environment where compliance gaps may surface across multiple regulatory frameworks rather than only DSA. The Commission's enforcement maturity continues to develop with additional cases expected through 2026 and 2027 as second-wave platforms mature compliance and as Commission enforcement priorities sharpen based on accumulating case experience. For broader EU regulatory framework see our EU DSA Compliance guide and the Policy Change Tracker.
Don't miss the next policy change.
Create a free account — track every policy change across 8 platforms, get instant alerts, and access every free compliance tool. Or try our Meta Rejection Predictor first.
Report Keywords — Run AI Compliance Audit
#DSA#EU Regulation#VLOP#European Commission#Platform Compliance#Ad Transparency#Risk Assessment#2026 Policy#Compliance Guide 2026#Advertisers#Platform Policy
Related Posts
DSA Article 22 Trusted Flagger Q2 2026: Designations, Notice Velocity, Platform Response SLA & Advertiser Implications
Article 22 Trusted Flagger designations are reshaping platform takedown velocity across the EU. The framework requires platforms to prioritise notices from designated flaggers — with material implications for advertiser content removal risk.
EU AI Act Article 50 Ad Creative Disclosure May 2026: Deployer Obligations, Watermarking & August 2 Enforcement
Article 50 of the EU AI Act enters force on August 2 2026. Brands deploying AI-generated ad creative must disclose synthesis and preserve machine-readable watermarks or face fines up to €15M.
April 2026 Platform Enforcement Digest: 30-Day Recap Across Eight VLOPs and Sector Implications
April 2026 saw sustained enforcement volume across the eight social-media VLOPs with category share shifts that signal upcoming policy direction. Meta and TikTok lead absolute volume; LinkedIn shows category concentration; Pinterest enforcement framework is the strictest. The 30-day recap and sector implications.