Back to Frameworks

Digital Services Act (DSA) - Regulation (EU) 2022/2065

European Union
vRegulation (EU) 2022/2065, applicable from 17 February 2024 for VLOPs and VLOSEs; other provisions apply from 17 February 2024 or 17 February 2025 depending on size and type of service
6 domains
36 controls

The Digital Services Act (DSA), Regulation (EU) 2022/2065 of 19 October 2022. Establishes harmonised rules for intermediary services in the EU: conditional liability exemptions and no general monitoring obligation (Chapter II); and tiered due-diligence obligations (Chapter III) for all intermediaries (points of contact, legal representatives, terms and conditions, transparency reporting), hosting services (notice-and-action, statement of reasons, criminal-offence notification), online platforms (internal complaints, out-of-court dispute settlement, trusted flaggers, anti-misuse, advertising and recommender-system transparency, dark-pattern prohibition, protection of minors), online marketplaces (trader traceability/KYBC, compliance by design), and very large online platforms and search engines (systemic risk assessment and mitigation, crisis response, independent audit, ad repository, researcher data access, compliance function, supervisory fee).

Verified

Digital Services Act (DSA) - Regulation (EU) 2022/2065 is a compliance framework from European Union with 6 domains and 36 controls that map to 14 other frameworks. The largest domains are DSA Chapter III Section 5: Additional Obligations for VLOPs and VLOSEs (10 controls), DSA Chapter III Section 3: Additional Obligations for Online Platforms (9 controls), DSA Chapter II: Liability of Intermediary Service Providers (6 controls). Every control below carries what it requires and what an assessor expects to see.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (6)

DSA Chapter II: Liability of Intermediary Service Providers

6 controls
Controls in the DSA Chapter II: Liability of Intermediary Service Providers domain of Digital Services Act (DSA) - Regulation (EU) 2022/20656 controls
CodeTitle
DSA-Art.10Orders to provide information
DSA-Art.4Mere conduit
DSA-Art.5Caching
DSA-Art.6Hosting
DSA-Art.8No general monitoring or active fact-finding obligations
DSA-Art.9Orders to act against illegal content

DSA Chapter III Section 1: Obligations for All Intermediary Services

5 controls
Controls in the DSA Chapter III Section 1: Obligations for All Intermediary Services domain of Digital Services Act (DSA) - Regulation (EU) 2022/20655 controls
CodeTitle
DSA-Art.11Points of contact for Member States authorities, the Commission and the Board
DSA-Art.12Points of contact for recipients of the service
DSA-Art.13Legal representatives
DSA-Art.14Terms and conditions
DSA-Art.15Transparency reporting obligations for providers of intermediary services

DSA Chapter III Section 2: Additional Obligations for Hosting Services

3 controls
Controls in the DSA Chapter III Section 2: Additional Obligations for Hosting Services domain of Digital Services Act (DSA) - Regulation (EU) 2022/20653 controls
CodeTitle
DSA-Art.16Notice and action mechanisms
DSA-Art.17Statement of reasons
DSA-Art.18Notification of suspicions of criminal offences

DSA Chapter III Section 3: Additional Obligations for Online Platforms

9 controls
Controls in the DSA Chapter III Section 3: Additional Obligations for Online Platforms domain of Digital Services Act (DSA) - Regulation (EU) 2022/20659 controls
CodeTitle
DSA-Art.20Internal complaint-handling system
DSA-Art.21Out-of-court dispute settlement
DSA-Art.22Trusted flaggers
DSA-Art.23Measures and protection against misuse
DSA-Art.24Transparency reporting obligations for providers of online platforms
DSA-Art.25Online interface design and organisation
DSA-Art.26Advertising on online platforms
DSA-Art.27Recommender system transparency
DSA-Art.28Online protection of minors

DSA Chapter III Section 4: Obligations for Online Marketplaces

3 controls
Controls in the DSA Chapter III Section 4: Obligations for Online Marketplaces domain of Digital Services Act (DSA) - Regulation (EU) 2022/20653 controls
CodeTitle
DSA-Art.30Traceability of traders
DSA-Art.31Compliance by design
DSA-Art.32Right to information

DSA Chapter III Section 5: Additional Obligations for VLOPs and VLOSEs

10 controls
Controls in the DSA Chapter III Section 5: Additional Obligations for VLOPs and VLOSEs domain of Digital Services Act (DSA) - Regulation (EU) 2022/206510 controls
CodeTitle
DSA-Art.34Risk assessment
DSA-Art.35Mitigation of risks
DSA-Art.36Crisis response mechanism
DSA-Art.37Independent audit
DSA-Art.38Recommender systems
DSA-Art.39Additional online advertising transparency
DSA-Art.40Data access and scrutiny
DSA-Art.41Compliance function
DSA-Art.42Transparency reporting obligations
DSA-Art.43Supervisory fee

Maps to 14 other frameworks

36 total controls
EU European Media Freedom Act (EMFA)
5 source controls mapped|1 target controls covered
14%
EU General Product Safety Regulation (GPSR, Regulation 2023/988)
3 source controls mapped|1 target controls covered
8%
EU Better Internet for Kids (BIK+) Strategy
3 source controls mapped|3 target controls covered
8%
GDPR
2 source controls mapped|2 target controls covered
6%
ISO/IEC TR 24028:2020
1 source controls mapped|1 target controls covered
3%
ISO 37301:2021
1 source controls mapped|1 target controls covered
3%
ISO 22301:2019
1 source controls mapped|2 target controls covered
3%
ISO 31000:2018
1 source controls mapped|1 target controls covered
3%
ISO/IEC 23894:2023
1 source controls mapped|2 target controls covered
3%
ISO/IEC 17050-2:2004
1 source controls mapped|1 target controls covered
3%
EU ePrivacy Directive (2002/58/EC)
1 source controls mapped|1 target controls covered
3%
ISO 27002:2022
1 source controls mapped|1 target controls covered
3%
ISO 27001:2022
1 source controls mapped|1 target controls covered
3%

Coverage is not the same as your position

This page shows what Digital Services Act (DSA) - Regulation (EU) 2022/2065 overlaps with in general. Where your organisation actually stands, against the standard you are going for and the certifications you already hold, is a different question. Same graph and the same recorded refutations, scoped to you rather than to a pair.

The Compliance Position Diagnostic, $5,000 fixed, ten business days

What is Digital Services Act (DSA) - Regulation (EU) 2022/2065 and who does it apply to?

Digital Services Act (DSA) - Regulation (EU) 2022/2065 is a compliance framework from European Union with 6 domains and 36 controls. The Digital Services Act (DSA), Regulation (EU) 2022/2065 of 19 October 2022. Establishes harmonised rules for intermediary services in the EU: conditional liability exemptions and no general monitoring obligation (Chapter II); and tiered due-diligence obligations (Chapter III) for all intermediaries (points of contact, legal representatives, terms and conditions, transparency reporting), hosting services (notice-and-action, statement of reasons, criminal-offence notification), online platforms (internal complaints, out-of-court dispute settlement, trusted flaggers, anti-misuse, advertising and recommender-system transparency, dark-pattern prohibition, protection of minors), online marketplaces (trader traceability/KYBC, compliance by design), and very large online platforms and search engines (systemic risk assessment and mitigation, crisis response, independent audit, ad repository, researcher data access, compliance function, supervisory fee). It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.

What does Digital Services Act (DSA) - Regulation (EU) 2022/2065 actually require?

Digital Services Act (DSA) - Regulation (EU) 2022/2065 has 36 controls organised across 6 domains. The largest domains are DSA Chapter III Section 5: Additional Obligations for VLOPs and VLOSEs (10 controls), DSA Chapter III Section 3: Additional Obligations for Online Platforms (9 controls), DSA Chapter II: Liability of Intermediary Service Providers (6 controls). Each control defines specific requirements that organisations must implement to achieve compliance.

If I already comply with another framework, how much of Digital Services Act (DSA) - Regulation (EU) 2022/2065 do I already cover?

Digital Services Act (DSA) - Regulation (EU) 2022/2065 maps to 14 other compliance frameworks. The top mapping partners are EU Audiovisual Media Services Directive (AVMSD, Directive 2010/13/EU as amended by Directive 2018/1808 and Directive (EU) 2023/2586) (19% coverage), EU European Media Freedom Act (EMFA) (14% coverage), EU General Product Safety Regulation (GPSR, Regulation 2023/988) (8% coverage). Use our comparison tool to explore control-level mappings between frameworks.

How do I implement Digital Services Act (DSA) - Regulation (EU) 2022/2065?

Start your Digital Services Act (DSA) - Regulation (EU) 2022/2065 compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about Digital Services Act (DSA) - Regulation (EU) 2022/2065 requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 36 controls and track your progress.

Start Your Compliance Journey

Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 686 frameworks.

Get Started Free →

Free forever — no credit card required