{"id":3964,"date":"2024-02-16T15:00:17","date_gmt":"2024-02-16T15:00:17","guid":{"rendered":"https:\/\/sawaryn.com\/?p=3964"},"modified":"2026-10-23T08:27:27","modified_gmt":"2026-10-23T08:27:27","slug":"dsa-rules-online-platforms-intermediaries","status":"publish","type":"post","link":"https:\/\/sawaryn.com\/en\/publikacje\/dsa-rules-online-platforms-intermediaries\/","title":{"rendered":"DSA: The Constitution of the Internet"},"content":{"rendered":"<p>Regulation 2022\/2065, the Digital Services Act (DSA), applies directly throughout the EU and imposes new duties on every provider of intermediary services online. If you run a platform, online store, hosting service, comment-enabled blog or another online service, check what you need to implement, the risks of failing to act and the possible penalties.<\/p>\n<p>&nbsp;<\/p>\n<p><strong>In this article, you will learn:<\/strong><\/p>\n<ol>\n<li>What is the Digital Services Act (DSA)?<\/li>\n<li>What and whom does it cover?<\/li>\n<li>How does it relate to the GDPR?<\/li>\n<li>What duties does the DSA impose?<\/li>\n<li>What penalties may apply for failing to comply?<\/li>\n<\/ol>\n<hr \/>\n<h2>What is the Digital Services Act?<\/h2>\n<p>The Digital Services Act (DSA) is an EU regulation known as the <strong><a href=\"https:\/\/sawaryn.com\/en\/publikacje\/dsa-rules-online-platforms-intermediaries\/\">constitution of the internet<\/a><\/strong>. It applies directly in every EU Member State and does not require separate implementation like, for example, the <strong><a href=\"https:\/\/sawaryn.com\/en\/publikacje\/omnibus-directive-poland-ecommerce-rules\/\">Omnibus Directive<\/a><\/strong>.<\/p>\n<p>The DSA introduces new duties for entities providing intermediary services to users in the European Union.<\/p>\n<h3>Important note about Polish law<\/h3>\n<p>Although the DSA applies directly, Poland had to take additional legislative steps:<\/p>\n<ul>\n<li><strong>Poland\u2019s law implementing the DSA<\/strong> was passed in 2024.<\/li>\n<li><strong>Poland\u2019s Digital Services Coordinator<\/strong> is the President of the Office of Electronic Communications (UKE).<\/li>\n<\/ul>\n<hr \/>\n<h2>What does the DSA cover?<\/h2>\n<p>The DSA regulates intermediary services and online platforms, an area where new opportunities come with risks such as illegal content, disinformation and a lack of transparency toward users.<\/p>\n<p>The duties under the DSA are <strong>proportionate<\/strong> to the scale and type of each provider\u2019s activity.<\/p>\n<h3>Types of intermediary services covered by the DSA<\/h3>\n<ol>\n<li><strong>Mere conduit<\/strong>: transmitting information or providing access to a telecommunications network.\n<ul>\n<li><em>Examples:<\/em> virtual private networks (VPNs), internet exchange points and domain registries.<\/li>\n<\/ul>\n<\/li>\n<li><strong>Caching<\/strong>: transmitting information while automatically and temporarily storing data between transmission steps to make subsequent transmission more efficient at the request of other recipients.\n<ul>\n<li><em>Examples:<\/em> content delivery networks (CDNs).<\/li>\n<\/ul>\n<\/li>\n<li><strong>Hosting<\/strong>: storing information provided by a service recipient at their request.\n<ul>\n<li><em>Examples:<\/em> cloud-computing services, an online <strong><a href=\"https:\/\/sawaryn.com\/publikacje\/obsluga-prawna-procesu-zalozenia-i-organizacji-miedzynarodowego-sklepu-internetowego\/\">store<\/a><\/strong> with user reviews, discussion forums and blogs that allow comments.<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n<h3>Entities covered by the DSA<\/h3>\n<p>The DSA applies to:<\/p>\n<ul>\n<li>online marketplaces;<\/li>\n<li>social media platforms;<\/li>\n<li>content-sharing platforms;<\/li>\n<li>very large online platforms (VLOPs), such as Amazon, Facebook, Zalando and X;<\/li>\n<li>very large online search engines (VLOSEs), such as Google and Bing.<\/li>\n<\/ul>\n<p><img decoding=\"async\" src=\"https:\/\/sawaryn.com\/app\/uploads\/2024\/02\/SIP_DSA_Diagram_V01-1024x1024.webp\" alt=\"Diagram showing the hierarchy of entities covered by the DSA, from mere conduit, caching and hosting to platforms, very large platforms and search engines\" \/><\/p>\n<hr \/>\n<h2>Who does the DSA apply to?<\/h2>\n<p>The DSA applies to <strong>all providers of intermediary services<\/strong> offered to service recipients in the European Union, <strong>regardless of where the provider is established<\/strong>.<\/p>\n<p>If you are not established in the EU but provide intermediary services there, the DSA still applies to you.<\/p>\n<hr \/>\n<h2>Duties under the DSA<\/h2>\n<p>The scope of your duties depends on two factors:<\/p>\n<ol>\n<li><strong>The type of intermediary service<\/strong> you provide: mere conduit, caching, hosting or a platform.<\/li>\n<li><strong>The scale of your activity<\/strong>: the larger it is, the more requirements apply.<\/li>\n<\/ol>\n<p>Duties increase in stages, from basic requirements shared by all providers to additional requirements for online platforms, especially VLOPs and VLOSEs.<\/p>\n<h3>When are you not an online platform?<\/h3>\n<p>The DSA provides an exclusion. You are not considered an online platform if the public dissemination of content is:<\/p>\n<ul>\n<li><strong>only a minor and ancillary feature<\/strong> of your main service;<\/li>\n<li><strong>inseparably linked<\/strong> to another service;<\/li>\n<li><strong>objectively impossible to use separately<\/strong> for technical reasons;<\/li>\n<li><strong>not used as a way to circumvent<\/strong> the DSA rules for platforms.<\/li>\n<\/ul>\n<p><strong>Example:<\/strong> a comment section on an online newspaper is ancillary to the main service, publishing news, so the newspaper does not become an online platform.<\/p>\n<p><strong>Note:<\/strong> storing comments on a social network is an online platform service, even if the comments are ancillary to posts.<\/p>\n<h3>What does this mean in practice?<\/h3>\n<p>If you run a blog that allows users to comment, you are a hosting provider under the DSA and must meet the duties assigned to that category.<\/p>\n<p>Check which duties apply to your activity:<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/sawaryn.com\/app\/uploads\/2024\/02\/DSA-Tabela_page-0001-682x1024.jpg\" alt=\"Table of DSA duties for categories of intermediary service providers, page 1\" \/><\/p>\n<p><img decoding=\"async\" src=\"https:\/\/sawaryn.com\/app\/uploads\/2024\/02\/DSA-Tabela_page-0003-673x1024.jpg\" alt=\"Table of DSA duties for categories of intermediary service providers, page 2\" \/><\/p>\n<p><img decoding=\"async\" src=\"https:\/\/sawaryn.com\/app\/uploads\/2024\/02\/DSA-Tabela_page-0004-789x1024.jpg\" alt=\"Table of DSA duties for categories of intermediary service providers, page 3\" \/><\/p>\n<hr \/>\n<h2>The DSA and the GDPR<\/h2>\n<p>The DSA complements the <strong><a href=\"https:\/\/sawaryn.com\/publikacje\/co-to-jest-rodo\/\">GDPR rules<\/a><\/strong> on protecting users\u2019 data on online platforms.<\/p>\n<p>The key prohibition is that online platform providers <strong>must not serve advertisements based on profiling<\/strong> that uses <strong><a href=\"https:\/\/sawaryn.com\/en\/?p=3957\">special categories of personal data<\/a><\/strong> under the GDPR, such as:<\/p>\n<ul>\n<li>sexual orientation;<\/li>\n<li>ethnic origin;<\/li>\n<li>religious beliefs.<\/li>\n<\/ul>\n<p>If you run an advertising platform, check whether your ad-targeting model complies with both the DSA and the GDPR.<\/p>\n<hr \/>\n<h2>Penalties for DSA violations<\/h2>\n<h3>Where can violations be reported?<\/h3>\n<ul>\n<li>Users may complain to the <strong>Digital Services Coordinator<\/strong> in the relevant Member State.<\/li>\n<li>In Poland, the coordinator is the <strong>President of the Office of Electronic Communications (UKE)<\/strong>.<\/li>\n<li>Appeals against UKE decisions go to the <strong>Court of Competition and Consumer Protection<\/strong>.<\/li>\n<\/ul>\n<h3>Financial penalties<\/h3>\n<table>\n<thead>\n<tr>\n<th>Type of violation<\/th>\n<th>Penalty<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Failure to comply with the DSA<\/td>\n<td>up to <strong>6% of annual worldwide turnover<\/strong><\/td>\n<\/tr>\n<tr>\n<td>Providing incorrect, incomplete or misleading information, failing to respond or correct it, or failing to submit to an inspection<\/td>\n<td>up to <strong>1% of annual worldwide turnover<\/strong><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>The financial risk is real and proportionate to the scale of your business. If you provide intermediary services, do not put off a DSA compliance review.<\/p>\n<h2>Frequently asked questions<\/h2>\n<p><strong>What exactly is the DSA, and does it apply to companies outside the EU that serve users in the Union?<\/strong> The DSA, EU Regulation 2022\/2065, is known as the constitution of the internet. It imposes duties on providers of intermediary services online, from hosting and marketplaces to very large search engines. It applies directly throughout the EU, without separate national implementation. If you provide intermediary services to users in the European Union, the DSA applies regardless of where you are established.<\/p>\n<p><strong>How can I tell whether my online service is hosting or an online platform under the DSA?<\/strong> Hosting under the DSA means storing information provided by a user at their request. It includes cloud services, discussion forums, blogs with comments and stores with reviews. Your service is considered an online platform unless public dissemination of users\u2019 content is only a minor ancillary feature of your main service, inseparably linked to it and objectively impossible to use separately for technical reasons. The classification affects your duties: online platforms have more requirements than hosting providers.<\/p>\n<p><strong>Is an online store with customer reviews or a blog with comments covered by the DSA?<\/strong> Yes. An online store with user reviews and a blog that allows comments are hosting services under the DSA because they store content provided by users at their request. They must meet the duties assigned to hosting providers.<\/p>\n<p><strong>What duties does the DSA impose, and what determines how many requirements apply to my company?<\/strong> The scope depends on two factors: the type of intermediary service you provide, whether mere conduit, caching, hosting or a platform, and the scale of your activity. Duties increase in stages, from basic requirements shared by all providers to additional requirements for online platforms, especially VLOPs and VLOSEs. Failure to comply may result in a penalty of up to 6% of annual worldwide turnover, so it is worth identifying your category and reviewing compliance.<\/p>\n<p><strong>How does the DSA relate to the GDPR, especially for profiling-based advertising?<\/strong> The DSA complements the GDPR rules for protecting user data on online platforms. Online platform providers must not serve ads based on profiling that uses special categories of personal data under the GDPR, such as sexual orientation, ethnic origin or religious beliefs. If you run an advertising platform, check whether your targeting model complies with both the DSA and the GDPR.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>A practical guide to the Digital Services Act: covered services, platform duties, GDPR-related advertising limits and potential penalties.<\/p>\n","protected":false},"author":3,"featured_media":1912,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":"","sip_alt_url":"","sip_en_pl_url":"","sip_pair_uuid":"","sip_pair_state":""},"categories":[1583],"tags":[1552,1551,1631],"specialization":[1210],"practice_area":[],"class_list":["post-3964","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-digital-law","tag-dsa-en","tag-e-commerce-en","tag-prawo-cyfrowe","specialization-digital-law"],"acf":[],"_links":{"self":[{"href":"https:\/\/sawaryn.com\/en\/wp-json\/wp\/v2\/posts\/3964","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sawaryn.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sawaryn.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sawaryn.com\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/sawaryn.com\/en\/wp-json\/wp\/v2\/comments?post=3964"}],"version-history":[{"count":1,"href":"https:\/\/sawaryn.com\/en\/wp-json\/wp\/v2\/posts\/3964\/revisions"}],"predecessor-version":[{"id":4096,"href":"https:\/\/sawaryn.com\/en\/wp-json\/wp\/v2\/posts\/3964\/revisions\/4096"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sawaryn.com\/en\/wp-json\/wp\/v2\/media\/1912"}],"wp:attachment":[{"href":"https:\/\/sawaryn.com\/en\/wp-json\/wp\/v2\/media?parent=3964"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sawaryn.com\/en\/wp-json\/wp\/v2\/categories?post=3964"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sawaryn.com\/en\/wp-json\/wp\/v2\/tags?post=3964"},{"taxonomy":"specialization","embeddable":true,"href":"https:\/\/sawaryn.com\/en\/wp-json\/wp\/v2\/specialization?post=3964"},{"taxonomy":"practice_area","embeddable":true,"href":"https:\/\/sawaryn.com\/en\/wp-json\/wp\/v2\/practice_area?post=3964"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}