EU Hits Social Media With Historic Fines and Investigations Under the DSA

March 2026 marks a turning point for social media regulation in Europe. The European Union's Digital Services Act (DSA) has moved decisively from framework to enforcement. X (formerly Twitter) received a €120 million fine for its "deceptive" blue checkmark system. TikTok faces preliminary findings that its entire design is "addictive" and harmful to minors. And the European Commission celebrated the DSA's two-year anniversary in February 2026 by outlining an expanded enforcement agenda focused on age verification and platform design.

Quick Answer: The EU's Digital Services Act has entered full enforcement mode. X was fined €120 million for its misleading blue checkmark verification and transparency failures. TikTok faces findings that its core design features (infinite scroll, autoplay, push notifications) may violate the DSA's requirements to protect minors. The Commission can impose fines of up to 6% of a platform's global turnover for violations.

The X Fine: €120 Million and Counting

On December 5, 2025, the European Commission issued its first-ever penalty under the Digital Services Act, and the target was X. The €120 million fine was relatively modest by Big Tech standards (X's annual revenue is estimated at several billion dollars), but the precedent it sets is significant.

What X Did Wrong

The Commission identified three specific violations:

1. Deceptive Blue Checkmark Design

The blue checkmark on X was historically a verification badge, indicating that an account's identity had been confirmed. Under Elon Musk's ownership, X converted it into a feature anyone could purchase for $8/month. The Commission found this constituted a "dark pattern" (a deceptive design practice) because:

• Users still associate the checkmark with identity verification
• Anyone can obtain one without meaningful identity checks
• The design deliberately exploits users' trust in the verification badge
• It makes it harder for users to assess the authenticity of accounts and content

2. Advertising Transparency Failures

The DSA requires platforms to maintain searchable repositories of all advertisements shown to EU users. X's advertising repository was found to be incomplete and difficult to use, making it impractical for researchers and regulators to audit advertising practices.

3. Researcher Data Access Blocked

The DSA mandates that Very Large Online Platforms provide access to platform data for EU-approved researchers studying systemic risks. X failed to provide adequate data access, effectively blocking independent research into how the platform operates.

The Compliance Deadlines

X now faces specific deadlines:

• 60 working days to address the deceptive blue checkmark system
• 90 working days to submit an action plan for the advertising transparency and researcher access violations
• Additional periodic penalties if non-compliance continues

The Broader Signal

According to TechCrunch's analysis, this fine signals that the DSA isn't a paper tiger. The Commission chose X as its first target partly because the violations were clear-cut and partly because X has been the most openly confrontational major platform toward EU regulation.

The message to other platforms: compliance isn't optional, and the Commission is willing to levy financial penalties.

The TikTok Investigation: "Addictive Design" Under Scrutiny

While the X fine grabbed headlines, the more consequential enforcement action may be the Commission's investigation into TikTok.

Preliminary Findings (February 6, 2026)

On February 6, 2026, the European Commission disclosed preliminary findings that TikTok's core design features likely breach the DSA's requirements to protect users, particularly minors.

The Commission's argument is striking in its scope. It's not targeting a specific feature or policy failure. It's arguing that TikTok's fundamental design is the problem.

What the Commission Found

The preliminary findings identify several TikTok design features as potentially systemic risks:

Infinite Scroll: The feed has no natural stopping point, which the Commission argues creates compulsive usage patterns.

Autoplay: Videos play automatically without user initiation, keeping users engaged passively.

Push Notifications: Notification patterns are designed to pull users back to the app, contributing to excessive usage.

Highly Personalized Recommendation System: The "For You" page's algorithmic precision creates what the Commission describes as a situation where users' "brains shift into autopilot mode," scrolling without conscious decision-making.

The Commission's position is that these features, taken together, create "systemic risks to users' physical and mental wellbeing, especially minors and vulnerable adults." Critically, the Commission considers that TikTok "did not adequately assess" these potential impacts.

What the Commission Wants TikTok to Do

The preliminary findings suggest TikTok will need to make fundamental changes to its service design:

• Disable or limit features identified as addictive after certain usage thresholds
• Enforce effective screen-time breaks (including during nighttime hours)
• Adapt its recommendation system to reduce compulsive usage patterns
• Implement stronger age verification measures
• Conduct more rigorous risk assessments of platform design on mental health

Why This Matters Beyond Europe

If the Commission's position holds (and TikTok is required to change its core design), those changes will likely apply globally, not just in the EU. Maintaining separate app designs for different regions is technically possible but expensive and operationally complex. Most platforms choose to implement the strictest regional requirements universally.

This means EU regulation could effectively reshape TikTok's user experience for users worldwide.

The DSA Enforcement Framework: How It Works

For context, here's how the DSA's enforcement structure operates.

What the DSA Requires

The Digital Services Act, which entered into force in 2022 and became fully applicable in February 2024, establishes rules for all digital services operating in the EU. For social media platforms designated as Very Large Online Platforms (those with 45+ million monthly EU users), the requirements include:

Enforcement Powers

The Commission has direct enforcement authority over VLOPs:

• Fines up to 6% of global annual turnover for violations
• Periodic penalty payments up to 5% of daily global turnover for ongoing non-compliance
• Interim measures to require immediate changes during investigations
• Power to mandate changes to platform design and policies

For X, 6% of global turnover would be substantially more than the €120 million fine that was actually levied. The Commission clearly chose a lower amount for this first case, leaving room for escalation.

The Two-Year Anniversary Assessment

In February 2026, the Commission published its two-year assessment of the DSA. Key takeaways:

• The DSA has generated over €120 million in fees from designated platforms
• The Commission has opened formal proceedings against several VLOPs
• Enforcement priorities for 2026 include age assurance, AI content risks, and platform design
• The Commission has issued information requests to Apple, Microsoft, Snapchat, and others

Who Else Is Under Investigation

X and TikTok aren't the only platforms facing DSA scrutiny.

Active Proceedings and Requests

The pattern suggests the Commission is systematically working through the major platforms, with minor protection and advertising transparency as the primary enforcement themes.

The European Parliament's Push for Age Limits

The regulatory pressure isn't just coming from the Commission. In November 2025, the European Parliament called for harmonized EU-wide digital age limits for social media:

• 16 years as the general minimum age for social media access
• Parental/guardian permission required for users between 13 and 16
• 13 years as the absolute minimum, below which no access is permitted regardless of parental consent

These aren't binding legislation yet, but they signal the political direction. If adopted, social media platforms would need to implement rigorous age verification systems for EU users, a significant technical and operational challenge.

What the U.S. Isn't Doing

The contrast between EU and U.S. regulation is stark.

As of March 2026, the United States has no comprehensive federal social media regulation or AI content law. Section 230 of the Communications Decency Act, written in 1996, remains the primary legal framework governing platform liability.

State-level action is more active. Several states have passed or proposed social media regulations targeting minor protection, but the patchwork approach creates inconsistency for platforms and users.

The practical result: European users have significantly stronger regulatory protections than American users, and platforms are being shaped primarily by EU regulators.

What This Means for Users and Creators

For EU Users

You're getting more control over your social media experience, at least on paper. The DSA's requirements include:

• A right to a non-algorithmic feed on every major platform
• Greater transparency about why specific content appears in your feed
• Advertising that's clearly labeled and auditable
• Enhanced protections for users under 18
• Platforms that must assess and mitigate systemic risks

Whether these translate to a meaningfully different day-to-day experience depends on how aggressively the Commission enforces compliance.

For Creators

DSA compliance affects how platforms distribute content and manage recommendations. If TikTok is required to reduce algorithmic recommendation intensity, it could reduce the platform's famous ability to turn unknown creators into viral sensations overnight. If platforms implement stricter content moderation to avoid DSA penalties, creators may face more aggressive automated content reviews.

The advertising transparency requirements also affect creator-brand partnerships. Sponsored content must be clearly disclosed, and platforms must maintain searchable ad repositories that make brand partnerships publicly visible.

For Businesses

If you advertise on social media in the EU, your ads are now subject to transparency requirements. All ads must be included in the platform's searchable repository, with information about targeting criteria and spending.

This is mostly a transparency issue, not a restriction on advertising itself. But it means competitive intelligence has become easier (anyone can see your EU ad campaigns in the repository) and regulatory risk has increased if ads aren't properly disclosed.

Frequently Asked Questions

What is the Digital Services Act?

The DSA is an EU regulation that established rules for digital services, including social media platforms. It requires transparency, user protection (especially for minors), algorithmic accountability, and risk mitigation. Platforms with over 45 million monthly EU users face the strictest requirements and can be fined up to 6% of global annual turnover for violations.

Why was X fined €120 million?

X was fined for three DSA violations: a "deceptive" blue checkmark system that misleads users about account verification, an inadequate advertising transparency repository, and failure to provide data access to approved researchers. The checkmark issue was considered the most significant violation.

What are the preliminary findings against TikTok?

The European Commission found that TikTok's core design features (infinite scroll, autoplay, push notifications, and its highly personalized recommendation algorithm) may create systemic risks to users' mental and physical health, particularly for minors. The Commission has suggested TikTok may need to fundamentally change how its app works.

Can the EU really force TikTok to change its design?

Yes. The DSA gives the Commission authority to mandate changes to platform design and policies. If TikTok doesn't comply with final findings, the Commission can impose fines of up to 6% of global annual turnover and ongoing periodic penalties. For a company of TikTok's scale, this represents billions of dollars in potential penalties.

Does the DSA affect platforms outside the EU?

The DSA directly applies to any platform serving EU users, regardless of where the company is headquartered. In practice, changes made for EU compliance often get applied globally because maintaining region-specific platform versions is expensive. This "Brussels effect" means EU regulation frequently shapes global platform behavior.

Will the U.S. pass similar social media regulation?

As of March 2026, no comprehensive federal social media regulation appears imminent in the U.S. Several states have passed platform-specific laws, but federal action would require Congressional consensus that doesn't currently exist. The EU is likely to remain the primary global regulator of social media platforms for the foreseeable future.

The Enforcement Era Has Begun

The DSA's shift from framework to enforcement in 2025-2026 represents the most significant regulatory action against social media platforms in history. The X fine established that financial penalties are real. The TikTok investigation established that even core platform design is subject to regulatory scrutiny. And the Commission's expanding scope of investigations suggests this is the beginning, not the peak, of enforcement activity.

For social media platforms, the era of self-regulation in Europe is over. For users, the question is whether enforcement leads to meaningfully better experiences or just more compliance theater. The early signs, particularly the TikTok design investigation, suggest regulators are aiming for substantive change rather than cosmetic adjustments.

The next 12 months will determine whether the DSA becomes the template for global social media regulation or remains a European experiment. Given the Commission's pace and ambition, the rest of the world is watching closely.

Last updated: March 17, 2026. This article will be updated as enforcement actions progress and new DSA proceedings are announced.