Under the #EU jurisdiction, every large online platform (#VLOP) or very large search engine (#VLOSE) needs to provide annual reports on risks associated with how their respective is designed, and works in practice.

Topics are, among others: preventing harms to fundamental rights and to election processes; gender-based violence.

It's been mandatory for three years now. The European Center for Not-for-profit Law (#ECNL) has analyzed those reports, and found recurring issues:

  • Vague risk statements
  • Insufficient attention to fundamental rights
  • Irrelevant or missing data
  • Limited stakeholder engagement
  • Neglect of EU diversity

https://edri.org/our-work/five-lessons-from-three-years-of-risk-assessments-under-the-digital-services-act/

If you are interested in the rich community of European NGOs defending rights and freedoms online, follow @edri, a network that connects and unites more than 50 of them.

You might discover some EDRi members in your own country that you weren't aware of, so far.

Five lessons from three years of risk assessments - European Digital Rights (EDRi)

ECNL analysed the first three rounds of these risk assessments, spanning from 2023 to 2025, and identified five major gaps.

European Digital Rights (EDRi)