- 2022
- 2023
-
Digital Services Act
First list of Very Large Online Platforms (VLOPs) and Very Large Online Search Engines (VLOSEs) covered by the DSA rules
-
Digital Services Act
Deadline for VLOPs and VLOSEs to prepare risk assessment reports under the Digital Services Act
- 2024
-
Digital Services Act
Entry into full application of the Digital Services Act with designation of Digital Services Coordinators
-
Digital Services Act
The European Commission opens an investigation against Microsoft on AI and elections
- 2025
-
Digital Services Act
Kickoff of work on Codes of Conduct for Online Advertising at the European Commission
- 2026
-
Political Advertising Regulation
Establishment of an Ad Repository under the Political Ads Regulation
Entry into Force of Digital Services Act (DSA)
After a 2-year-long legislative procedure, the EU’s Digital Services Act (DSA), a set of new rules to regulate online platforms, was published in the Official Journal and entered into force on 17 November 2022. This marks the start of the implementation period, with rules to become fully applicable only in 2024.
First list of Very Large Online Platforms (VLOPs) and Very Large Online Search Engines (VLOSEs) covered by the DSA rules
Under the Digital Services Act, the European Commission has to designate a list of Very Large Online Platforms (VLOPs) and Very Large Online Search Engines (VLOSEs), which would have to comply with stricter obligations, given their size and influence on the online sphere. Among these obligations, there is also the drafting of reports assessing risks for civic discourse and electoral processes and putting forward related mitigation measures. The first list of VLOPs and VLOSEs included: AliExpress, Amazon, App Store, Bing, Booking, Facebook, Google Maps, Google Play, Google Search, Google Shopping, Instagram, LinkedIn, Pinterest, Snapchat, TikTok, Twitter (X), Wikipedia, YouTube and Zalando. These were later followed by: PornHub, Shein, XNXX, Stripchat, Temu and XVideos.
Deadline for VLOPs and VLOSEs to prepare risk assessment reports under the Digital Services Act
Very Large Online Platforms (VLOPs) and Very Large Online Search Engines (VLOSEs) designated by the European Commission, for their size and influence on the online sphere, have to draft annual reports assessing risks for civic discourse and electoral processes and putting forward related mitigation measures. The first set of reports was due by 17 August 2023 and was made public in November 2024.
Entry into full application of the Digital Services Act with designation of Digital Services Coordinators
The Digital Services Act (DSA), the EU’s new rules to regulate online platforms, became fully applicable for all sorts of online platforms on 17 February 2024. This was also the deadline for EU Member States to designate national authorities in charge of the DSA enforcement, the Digital Services Coordinators (DSCs). Many Member States, however, missed the deadline and are still struggling to officially designate competent authorities, to properly staff them and to train them to enforce the new rules.
Digital Services Coordinators to be fully designated
On 26 February 2024, the European Commission published Guidelines on the mitigation of systemic risks for electoral processes to complement Digital Services Act rules when it comes to election integrity. EPD has pointed out strength and weaknesses of these Guidelines in a joint paper with Civil Liberties Union for Europe.
Entry into force of the Political Ads Regulation
After a 3-year legislative procedure, the EU’s Regulation on Transparency and Targeting of Political Ads (TTPA), a set of new rules to regulate political ads, was published in the Official Journal and entered into force on 9 April 2024. This marks the start of the implementation period, with all rules to become fully applicable only in 2026.
Adoption of guidance on risk mitigation for electoral processes
Under the Digital Services Act, the new EU rules to regulate online platforms, the European Commission is empowered to adopt guidelines on how Very Large Online Platforms (VLOPs) and Very Large Online Search Engines (VLOSEs) should mitigate risks for civic discourse and electoral processes. To this end, the Commission published Guidance on risk mitigation for electoral processes ahead of the EU elections.
The European Commission opens an investigation against Meta on political ads
On 30 April the European Commission opened an investigation on Meta regarding its policies and practices relating to deceptive advertising and political content on its services. The DSA does not set any legal deadline for bringing formal proceedings to an end. A non-compliance decision could include fines up to 6% of the global turnover.
The European Commission opens an investigation against Microsoft on AI and elections
On 17 May the European Commission opened an investigation on Microsoft on risks posed by Bing’s generative AI tools, which may have breached the DSA for risks linked to generative AI, such as so-called ‘hallucinations’, the viral dissemination of deepfakes, as well as the automated manipulation of services that can mislead voters. The DSA does not set any legal deadline for bringing formal proceedings to an end. A non-compliance decision could include fines up to 6% of the global turnover.
Entry into force of the AI Act
After a three-year legislative procedure, the EU’s Artificial Intelligence Act (AI Act), a set of new rules to regulate Artificial Intelligence, was published in the Official Journal and entered into force on 1 August 2024. This marks the start of the implementation period, with some exceptions, with all rules becoming fully applicable only in 2026.
Publication of the Draft Delegated Act on data access for researchers
Under the Digital Services Act, Very Large Online Platforms (VLOPs) and Very Large Online Search Engines (VLOSEs) are obliged to share data on systemic risks and mitigation measures on their platforms with researchers. This draft delegated act clarifies the procedures on how researchers can access such data and sets out rules on data formats and data documentation requirements. The final text should be adopted in 2025.
Application of rules on prohibited AI systems
The first batch of rules under the AI Act that become applicable are the prohibitions of certain AI systems, including those used for subliminal manipulation and for categorisation according to political opinions. Guidelines have also been published to clarify the prohibitions with examples of what should and shouldn’t be included under the banned applications.
Finalisation of the Code of Conduct on General Purpose AI (GPAI) models
Under the Artificial Intelligence Act, a voluntary Code of Conduct has been shaped to clarify and complement the rules on General Purpose AI. The work within the General Purpose AI Working Group took place from autumn 2024 until spring 2025.
Entry into application of the Political Ads Regulation
The EU’s Regulation on Transparency and Targeting of Political Advertising will become fully applicable as of October 2025, with the exception of the establishment of the ad repository. From this date, online political ads will have to be identified and labelled as such, with information on targeting criteria, sources of funding and their link to election or referenda.
Publication of guidelines on high-risk AI systems by the European Commission
The rules for high-risk AI systems are at the core of the Artificial Intelligence Act, with applications such as AI systems used to influence elections to undergo risk assessments before being put on the market. To clarify and complement such rules, the European Commission will have to issue guidelines by February 2026.
Establishment of an Ad Repository under the Political Ads Regulation
In April 2026 the Ad Repository under the Political Ads Regulation will have to be fully established. This will collect political ads to increase transparency for researchers, journalists and other experts on broader political ads campaigns.
Full application of all AI Act rules (except the ones for high-risk AI applications)
The EU’s Artificial Intelligence Act becomes fully applicable as of October 2025, with the exception of the rules for high-risk AI applications that will only apply in 2027.
Digital Democracy
Do you want to know more about our work on Digital Democracy? Contact our Digital Policy Manager at [email protected].
Our publications on Digital Democracy
Our work on these files is funded by Civitates and the Open Society Foundations.