The Digital Services Act and Hate Speech: What Platforms Must Now Do

The EU's Digital Services Act, which has applied to all in-scope platforms since February 2024, represents the most significant regulatory intervention in online content governance in European history. For platforms operating in the EU, and particularly the large platforms subject to the strictest obligations, the DSA fundamentally changes what "managing hate speech" means — shifting from voluntary commitments to legally enforceable requirements with substantial penalties for non-compliance.

A Tiered Compliance Framework

The Digital Services Act creates tiered obligations based on platform size and type. All hosting services must have a notice-and-action mechanism allowing users to flag illegal content. Very Large Online Platforms (VLOPs) and Very Large Online Search Engines (VLOSEs) — those with more than 45 million monthly active users in the EU — face the most stringent requirements, including mandatory annual systemic risk assessments, independent audits, researcher data access, and dedicated oversight by the European Commission.

Illegal Content vs. Harmful Content

A key distinction in the DSA framework is between "illegal content" — content that violates EU or member state law — and content that is harmful but lawful. The DSA requires platforms to act on illegal content, including hate speech that falls within the scope of the EU Framework Decision on Racism and Xenophobia or equivalent national criminal provisions. However, the DSA explicitly does not require platforms to remove merely "harmful" content that does not reach the threshold of illegality, reflecting a deliberate choice to avoid creating incentives for excessive content removal that would suppress protected expression.

Notice-and-Action: The Core Mechanism

All platforms within scope must implement notice-and-action systems through which users can report potentially illegal content. Platforms must act on these notices in a timely manner, notify users of their decisions, and maintain accessible internal complaint mechanisms that allow users to appeal content moderation decisions. This creates a documented, auditable record of content moderation that did not previously exist at scale — and allows regulators and researchers to assess whether platforms are consistently applying their stated policies and legal obligations across language communities and user groups.

Systemic Risk Assessments and Algorithmic Amplification

One of the DSA's most significant provisions requires VLOPs to conduct annual systemic risk assessments examining whether their services contribute to the spread of illegal hate speech and amplify content that harms fundamental rights. Critically, platforms must then implement mitigation measures proportionate to the identified risks — this is where the DSA goes substantially beyond prior voluntary frameworks, requiring platforms to address the design features (recommender systems, engagement-optimization algorithms) that amplify hate speech, not merely the individual pieces of harmful content.

The Role of Trusted Flaggers

The DSA creates a formal category of "trusted flaggers" — organizations with demonstrated expertise in identifying illegal content — whose notices platforms must prioritize and process with higher accuracy. Civil society organizations specializing in monitoring online hate speech can apply for trusted flagger status through national Digital Services Coordinators. This formally integrates civil society expertise into the content moderation infrastructure of major platforms in a way that was previously left entirely to platform discretion and often depended on informal relationships or public pressure.

The ECHR Framework Alongside the DSA

The DSA operates alongside, and does not replace, the established human rights framework. The European Court of Human Rights has developed extensive case law on where the balance between freedom of expression and protection from hate speech should lie — case law that binds all 46 Council of Europe member states. The ECHR allows restriction of hate speech where it is prescribed by law, pursues a legitimate aim, and is necessary in a democratic society. Platform decisions about hate speech must remain consistent with both the DSA's procedural requirements and the ECHR's substantive standards.

Enforcement Mechanisms and Penalties

The European Commission acts as direct supervisor for VLOPs and VLOSEs, with national Digital Services Coordinators responsible for smaller platforms. Fines for non-compliance can reach 6% of global annual turnover — a meaningful sanction even for the largest platforms. Repeated serious infringements can lead to temporary suspension of service in the EU market. The Commission has already opened formal non-compliance proceedings against several major platforms since the DSA entered full application, signaling that enforcement is active rather than theoretical.

What This Means for Media Literacy Work

The DSA's formal transparency and researcher access provisions create new opportunities for civil society organizations engaged in media literacy and counter-hate-speech work. Researchers can now access platform data through structured processes — enabling more rigorous analysis of how hate speech spreads, which content moderation approaches are effective, and whether platforms are meeting their DSA obligations consistently across European languages and communities. Organizations working to counter online hate speech should familiarize themselves with the DSA's researcher access provisions as a tool for generating the evidence base that effective advocacy requires.