How the Digital Services Act enhances transparency online

Access the regulation, the templates and instructions 

Publication of monthly average user numbers

The DSA requires all providers of online platforms, with the exception of small and micro-enterprises, to publish a self-assessment of the number of monthly users of their services in the EU and to update it every 6 months.

This self-assessment plays a key role in the designation of Very Large Online Platforms (VLOPs) and Very Large Online Search Engines (VLOSEs) and continues to be important for monitoring the evolving landscape of intermediary service providers.

In addition to these self-assessed figures, the Commission may rely on other available sources of information when monitoring the number of monthly users of platform services in the EU.

DSA Transparency Database & Statements of reasons

Under the DSA, all hosting services (including online platforms) are required to inform users whenever they remove or restrict access to their content and explain the reasons behind each moderation decision to the affected users through a ‘statement of reasons’.

Statements of reasons must contain clear and specific information, including the reason(s) and a legal or terms-of-service reference explaining why content was removed or restricted.

Since 25 September 2023, the Commission has maintained the DSA Transparency Database, which collects and makes publicly available statements of reasons.

The DSA Transparency Database enables greater scrutiny of the content moderation decisions taken by online platforms, allowing the public, including researchers, to search for, read and download anonymised statements of reasons.

Access the DSA Transparency Database 

Data Access for researchers, the Digital Services Coordinators, and the Commission

Under the DSA, VLOPs and VLOSEs are required to allow access to certain data for research purposes, such as research concerning:

• the detection, identification and understanding of systemic risks in the EU,
• the assessment of the adequacy, efficiency and impacts of risk mitigation measures taken by these providers.

Researchers can gain access to publicly available data if they meet the relevant conditions (such as independence from commercial interests, or the ability to uphold adequate security standards).

The DSA also provides access to internal data to a special category of researchers who secure the status of vetted researchers.

This status is granted by national Digital Services Coordinators (DSCs) and requires applicants to prove affiliation with a research institution and to commit to making their research results publicly available and free of charge.

The delegated act on data access under the Digital Services Act clarifies the procedures through which VLOPs and VLOSEs share internal data with vetted researchers. It sets out requirements on data formats and documentation and outlines the information that DSCs, VLOPs and VLOSEs must make publicly available to facilitate applications for access to relevant datasets.

These measures strengthen the role of the research community in scrutinising systemic risks posed by platforms and contribute to safeguarding the online environment.

In addition, the Board of Digital Services has endorsed a proposal to enhance cooperation among DSCs in the vetting process, ensuring a coordinated approach to this vital new mechanism. The rules have been tested through a pilot project led by the European Research Council.

The Commission also operates the DSA data access portal, which serves as a central hub for researchers to find information and communicate with VLOPs, VLOSEs and DSCs regarding applications for access to internal data.

For more details, read the questions and answers about data access for researchers under DSA .

The DSA Whistleblower tool is designed to enable employees and other insiders to report harmful practices of VLOPs and VLOSEs anonymously. We welcome reports that shed light on violations related to a wide range of areas including content moderation, recommender systems, advertising, risk assessment, public security, civic discourse and children’s rights. These reports can take various forms such as official reports, memos, email exchanges, data metrics or any other context that provides relevant information.

Risk assessment and audit reports

At least once a year, very large online platforms (VLOPs) and very large online search engines (VLOSEs) must identify and analyse risks stemming from their services, such as:

• the dissemination of illegal content,
• negative effects on users’ physical and mental wellbeing,
• risks to the rights of minors.

They must also outline the measures they have put in place to mitigate the identified risks.

VLOPs and VLOSEs must also be subject to audits at least once a year.

No later than 3 months after receipt of the audit reports from the independent auditor, VLOPs and VLOSEs must publish:

• their risk assessment report, including the implemented risk mitigation measures,
• an independent audit report,
• an audit implementation report, outlining whether and how they implement recommendations received from their auditors.

The mandatory disclosure of all these reports helps bring about further transparency and accountability and offers a basis for public scrutiny.

In October 2023, the Commission published a delegated act providing a framework to guide VLOPs, VLOSEs and auditing organisations in the preparation and issuance of audit reports and audit implementation reports .

*All the reports for both Instagram and Facebook are published under Meta's Transparency Centre. Find the name of the report, select the reporting period and the platform to download the report.

**Both the risk assessment report and audit implementation report cover all VLOPs and VLOSE under Google.

Digital Services Terms and Conditions Database

Online terms and conditions can be a source of confusion and frustration. They may be unclear or unspecific and are often subject to frequent changes, leaving users and businesses uncertain about their rights and obligations.

The Digital Services Terms and Conditions Database uses transparency obligations for digital services stemming from the DSA and the Platform-to-Business Regulation to help address this issue. It stores over 790 sets of terms and conditions from more than 400 services. These entries include a variety of documents, such as commercial terms, developer terms, live policies, terms of service, privacy policies and more.

The database reviews the contracts in its repository multiple times a day across the web and automatically highlights new changes, enabling regulators, researchers and users to keep up with the evolving digital landscape more easily.

Access the Digital Services Terms and Conditions Database