The European Commission has so far:
- designated 23 very large online platforms (VLOPs) and two very large online search engines (VLOSEs). Five platforms have so far challenged their designation as VLOPs before the EU Court. All online platforms must update the information on the number of users by Feb. 2025.
- requested information from 23 VLOPs and VLOSEs to understand if they are complying with different provisions of the regulation. Only two very large providers have not being fomally questioned yet.
- opened formal proceedings against four VLOPs. In August 2024 it closed one proceeding against TikTok by accepting its commitment to permanently withdraw a service feature from the EU. In July 2024 the Commission issued preliminary findings that X is in breach of some obligations. X, which can exercise its rights of defence, could face fines of up to 6% of its total worldwide annual turnover if the findings are confirmed. Other investigations are pending.
Our new cheat sheet provides an overview of the state of play of the enforcement and implementation of the EU Digital Services Act (DSA) by the European Commission one year after the first group of designated VLOPs and VLOSEs submitted their first risk assessment reports.
It also shows which implementing rules and guidelines (for providers or for enforcement authorities) are not yet adopted.
Clients of our European Media service, can also access it directly on our client portal.via the following link:
more news
25 February 26
Protection of minors: overview of national initiatives on banning access to social media
Our latest benchmark shows that an increasing number of European countries are discussing a potential social media ban on children.
23 February 26
The DNA explained: universal service to serve the same goals under a revised approach
Cullen International is issuing a series of analyses on different aspects of the Digital Networks Act (DNA) proposal. This report covers universal service.
20 February 26
Revised Cybersecurity Act (CSA2) - Changes to the EU cybersecurity certification framework
Cullen International published an analysis of the proposed changes to the EU cybersecurity certification framework under the draft Cybersecurity Act 2 (CSA2) delivered by the European Commission on 20 January 2026.