DSA: horizontal platform regulation, not just social media

The Digital Services Act is a horizontal regulation, meaning it applies across the board to any online intermediary or platform that connects users, hosts content, or provides online marketplaces. Unlike the GDPR, which focuses on personal data, the DSA targets illegal content, transparency in advertising, and systemic risks like disinformation. A common mistake is to think it only covers social media giants—but it also covers cloud services, hosting providers, and even small e-commerce sites, though with tiered obligations based on size and reach.

To avoid confusion in exam questions, remember that the DSA does not replace the e-Commerce Directive but updates it. If a question mentions 'illegal content' or 'transparency reports', think DSA; if it mentions 'personal data', think GDPR. A useful elimination trick: if the scenario involves a platform's responsibility for user-generated content, the DSA is likely the relevant regulation, not copyright law or consumer protection. Also, note that the DSA's systemic risk assessments apply only to very large platforms (over 45 million users in the EU).

A compact way to recall the DSA's scope is to think of it as the 'rulebook for digital middlemen'—any service that hosts, transmits, or connects users online. To test yourself, ask: 'Would this duty apply to a cloud storage provider?' If yes, it's likely the DSA. Remember, the DSA is about platform accountability, not data privacy.