The European Parliament has adopted the Digital Services Act (DSA) and Digital Markets Act (DMA) which aim to enshrine clear standards on how the tech industry operates and provides services in the EU. The DSA establishes obligations for digital service providers to tackle the spread of illegal content, online disinformation and other societal risk; whilst the DMA establishes obligations for large online platforms acting as “gatekeepers” on the digital market to ensure a fairer business environment and better services for consumers.
The DMA defines gatekeepers as companies providing core platform services in at least three member states, which meet turnover or market capitalisation thresholds of EUR 7.5bn or EUR 75bn respectively as well as serving large numbers of active end users and business users. The Commission will also be able to regulate 'emerging' gatekeepers, under the DMA, i.e. those companies which are clearly expected to become gatekeepers. As part of the new obligations on gatekeepers, the DMA will obligate gatekeepers to ensure their own products and services are not given more favourable treatment on their platforms than similar third-party offerings, as well as ensuring that business users are not prevented from contracting directly with end users. Rights of business users and end users to access the data generated from their use of the gatekeeper's platform will also be enshrined. Penalties for non-compliance may amount to 10% of global turnover.
The DSA will govern all online platforms and intermediaries offering services within the single market, but micro and small companies will face obligations proportionate to their size. The DSA's purpose is to ensure that illegal content from platforms is taken down much more effectively, and that fundamental rights, e.g. to free speech, are not harmed on online platforms. The DSA will, amongst other things, obligate platforms to empower users to: flag illegal content, goods and services; ensure business users are traceable and there are effective safeguards against unlawful content moderation decisions. A ban on certain types of targeted advertising (e.g. based on special categories of personal data, e.g. sexual orientation) is also included. For very large online platforms, the Commission will be able to levy fines of up to 6% of global turnover.
These landmark texts must be formally adopted by the Council of the European Union, before being published in the Official Journal. It is expected that the DSA will be directly applicable across the EU from 1 January 2024, whilst it's expected that the DMA will apply from spring 2023. Whilst the DSA and the DMA are expected to (in a manner akin to the GDPR) lead to the establishment of global regulatory standards for large online platforms and digital intermediaries, the new regimes will face challenges in the form of big tech group litigation and the large task of efficient enforcement in a manner consistent with pre-existing national member state anti-trust regimes.