The Digital Services Act (DSA) establishes platform-side obligations for handling illegal and harmful content across the EU, complementing the AI Act’s content-side transparency rules. Very large online platforms must conduct annual systemic risk assessments covering manipulated content and implement mitigation measures, while all platforms face notice-and-action obligations for illegal deepfake material.

• Online intermediaries operating in the EU, with stricter obligations for very large online platforms (VLOPs, 45M+ EU users) and search engines
• Systemic risks including non-consensual intimate imagery, election manipulation, and synthetic disinformation
• Code of Practice on Disinformation, integrated into the DSA framework, requiring identification and labeling of manipulated content

• Notice-and-action mechanisms for users to report illegal content; trusted flagger priority handling
• VLOPs must conduct annual risk assessments and publish independent audits
• Cooperation with vetted researchers and fact-checkers for detection and analysis
• Penalties up to 6% of global annual turnover; repeated violations can trigger temporary EU access bans