Finally, Access: How Article 40 DSA Changes Platform Research in Practice

Key Takeaways

• VLOPs with 45M EU users must grant researcher data access.
• Article 40(12) covers publicly available data beyond platform tools.
• Article 40(4) permits vetted researchers to obtain non‑public logs via coordinators.
• Systemic risk definition spans illegal content, health, civic discourse, and rights.
• Implementation faces uneven compliance, unclear standards, and funding constraints.

Pulse Analysis

The Digital Services Act represents the first statutory guarantee that independent scholars can tap into the data ecosystems of Europe’s biggest tech platforms. Previously, researchers relied on goodwill‑based APIs or ad‑hoc agreements, limiting the scope and reproducibility of studies. By codifying access rights, the DSA not only levels the playing field for academia and civil society but also signals to platforms that transparency is now a regulatory expectation, not a charitable add‑on.

Article 40’s two pathways create distinct research workflows. The 40‑12 provision expands the reach of publicly available information, allowing analysts to scrape, aggregate, and model data that platforms already expose. More consequential is the 40‑4 mechanism, which routes vetted requests for non‑public datasets—such as moderation logs, recommendation scores, and exposure metrics—through national Digital Services Coordinators. This vetting process aims to protect user privacy while furnishing scholars with the granular inputs needed to diagnose algorithmic amplification, misinformation cascades, and other systemic harms.

Despite its promise, the DSA’s early implementation reveals practical hurdles. National coordinators differ in technical standards, and many lack the resources to process complex data requests promptly. Researchers report uneven compliance, with some VLOPs delaying or limiting data transfers, and funding gaps that impede large‑scale replication studies. Over time, however, the regulatory framework is expected to mature, fostering a robust evidence base that can inform policy tweaks, court rulings, and corporate self‑regulation, ultimately reshaping the European digital market’s risk landscape.