DSA Enforcement is the New Regulatory Shock: Mapping the First Wave of Platform Risk in 2026

Digital service providers must increasingly navigate the commercial risk of EU regulations and their enforcement

On 26 March, the European Commission escalated its approach towards digital regulation by launching a formal investigation into Snapchat’s adherence to the Digital Services Act (DSA), the EU’s legal framework for accountability i

n digital services. At the same time, the Commission issued findings against four major adult-content platforms, citing inadequate safeguards for minors (European Commission, 2026a, 2026b). Media coverage also reported that Snapchat faced an EU investigation for issues such as illicit sales and grooming, marking a significant shift from the DSA’s usual abstract rulemaking (European Commission, 2026b). Policymakers have established DSA compliance as a systematic risk pipeline, with a structured process in which platforms can move through defined regulatory stages, from investigation to enforcement and then to a final outcome.

From Legislation to Enforcement Pipeline

Europe’s DSA targets online platforms with over 45 million EU monthly users, classified as a Very Large Online Platforms or Search Engines (VLOP/VLOSE) (European Commission, 2024b). These services have four months to meet the strict requirements, in which they must moderate content, assess risks, and ensure transparency in advertisements. Since April 2023, the Commission has stepped up its scrutiny, leading to January 2024, when it formally requested information from 17 VLOPs and VLOSEs about their internal policies (European Commission, 2024a). By mid-2024, this process resulted in enforcement cases against a number of significant platforms, including TikTok (in February and December 2024, for algorithm-based risk and the protection of minors), AliExpress (in March 2024, for content safety), and X (in December 2023, for risk and moderation failures) (European Commission, 2026c; 2025a, b).

The enforcement actions that were announced on 26 March placed both Snapchat and the adult-content platforms under direct regulatory scrutiny. The Commission repeatedly cited inadequate moderation, opaque recommender systems, or failure to protect minors as reasons for this intervention (Lagherta, 2026). The DSA’s procedural architecture is purposefully clear in that after a platform becomes designated, it must respond to any preliminary findings within 60 to 90 working days. Following this response, the Commission will make final decisions on a predetermined timeline, ranging from fines to operational orders (European Commission, 2025a). While providing a quantifiable risk profile that shareholders and market participants can systematically monitor, this repeatable, deadline-driven process also provides a structure for regulatory engagement.

How Enforcement Translates into Risk

The DSA’s enforcement permeates a number of crucial channels, which influence investor calculations as well as platform operations. The extent of liability possible under the DSA, which permits penalties of up to 6% of global turnover for the most serious violations, was made evident in the €120 million fine faced by X in December 2025 (European Commission, 2025a). Platforms which complied swiftly – like AliExpress in June 2025 – avoided these harsh penalties, showing some of the dangers of regulatory involvement (European Commission, 2025b).

The Commission has started enforcing direct product and design mandates with financial sanctions, effectively forcing platforms to modify features. The TikTok proceedings are representative of this: the regulator demanded that TikTok limit its features and implement stronger screen-time controls after identifying aspects of the app like infinite scroll, autoplay, push notifications, and personalised recommendation engines as intrinsically addictive (European Commission, 2026c).

Operational and compliance costs increase with each new enforcement action, as platforms must also submit risk assessments, respond to information requests, and develop compliance plans while maintaining audit readiness. The Snapchat investigation itself originated in a Dutch inquiry into vape sales which was taken over by the EU under the DSA, therefore necessitating cross-jurisdictional coordination (European Commission, 2026b).

Enforcing rules has effects that go beyond the costs of compliance; it also changes how platforms make money and how the market works, with measures such as aggressive age-gating or bans on so-called “deceptive design” practices sharply limiting the possible reach of advertisements (Lagherta, 2026). For example, Snapchat’s use of self-declaration for age verification was seen as insufficient. This assessment put the platform at risk from both regulatory and commercial standpoints (Lagherta, 2026).

DSA enforcement brings real costs to value and profitability, but because the process follows clear stages and deadlines, outcomes become predictable. So, investors and policymakers should treat the DSA as a financial risk similar to those in regulated markets, where they can systematically track each event, including fines, commitments, and design changes.

Key Indicators to Watch

What matters now is the pace and pattern of enforcement, as each new DSA investigation or voluntary commitment adds to regulatory pressure. What matters more than new cases is how existing ones are resolved, (like those of X, Snapchat and TikTok). These resolutions serve as a warning: any subsequent modifications to a platform’s compliance plan can result in regulatory escalation (European Commission, 2024c; 2026c; Lagherta, 2026).

Compliance deadlines set by the DSA are also important to watch: VLOPs have four months to achieves compliance, while individual cases follow 60- or 90-day deadlines (European Commission, 2024b). It is also possible that the Commission will go on to designate more platforms, such as messaging apps, and that independent Digital Services Coordinators or other national regulators will raise new concerns. Together, these indicators will show whether enforcement actions are accelerating or slowing down.

Conclusion

The first wave of DSA enforcement has made one thing apparent: platform regulation is now systematic risk, and the DSA has become a pipeline of predictable compliance deadlines and potential penalties. This development means regulatory costs and constraints must become part of every digital platform’s baseline forecast, while investors must build DSA scenarios into valuations just as they would any other cost. In short, the shift from rule-writing to enforcement means the next chapters in platform valuations will hinge upon which companies can adapt most quickly to the DSA’s developing rulings.

Bibliography

European Commission, (2024a) Commission sends preliminary findings to X for breach of the Digital Services Act. Press Release, 12 Jul 2024. Available at: https://ec.europa.eu/commission/presscorner/detail/en/ip_24_3761

European Commission (2024b) DSA: Very large online platforms and search engines. Digital Strategy – Shaping Europe’s digital future. EU Commission, 27 Feb 2024. Available at: https://digital-strategy.ec.europa.eu/en/policies/dsa-vlops

European Commission (2025a) Commission fines X €120 million under the Digital Services Act. Press release, 5 Dec 2025. Available at: https://ec.europa.eu/commission/presscorner/detail/en/ip_25_2934

European Commission (2025b) Commission makes AliExpress’ commitments under the Digital Services Act binding. 18 June 2025. Available at: https://digital-strategy.ec.europa.eu/en/news/commission-makes-aliexpress-commitments-under-digital-services-act-binding

European Commission (2026a) Commission preliminarily finds Pornhub, Stripchat, XNXX and XVideos in breach of the Digital Services Act. Press release, 26 Mar 2026. Available at: https://digital-strategy.ec.europa.eu/en/news/commission-preliminarily-finds-pornhub-stripchat-xnxx-and-xvideos-breach-digital-services-act

European Commission (2026b) Commission services and Dutch DSC join forces to investigate Snapchat. 26 Mar 2026. Available at: https://digital-strategy.ec.europa.eu/en/news/commission-services-and-dutch-digital-services-coordinator-join-forces-investigate-snapchat

European Commission (2026c) Commission preliminarily finds TikTok’s addictive design in breach of the Digital Services Act. 6 Feb 2026. Available at: https://digital-strategy.ec.europa.eu/en/news/commission-preliminarily-finds-tiktoks-addictive-design-breach-digital-services-act

European Commission, (2024c). Commission sends requests for information to 17 Very Large Online Platforms and Search Engines under the Digital Services Act. Press Release, 18 Jan 2024. Available at: https://digital-strategy.ec.europa.eu/en/news/commission-sends-requests-information-17-very-large-online-platforms-and-search-engines-under

Lagherta, A. (2026) Brussels opens investigation into Snapchat amid concern over children’s safety. The Guardian, 26 Mar. Available at: https://www.theguardian.com/technology/2026/mar/26/brussels-opens-investigation-into-snapchat-amid-concern-over-childrens-safety