The Digital Services Act (DSA) and Digital Markets Act (DMA) are part of a new EU digital rulebook that will enforce the allowance of third-party services and apps, but tech giants fear it will pose more cybersecurity risks. So, are the regulations good for users, or not?

New EU Regulations

The European Union voted overwhelmingly in favor of two new bills this week — the Digital Services Act (DSA) and the Digital Markets Act (DMA). Accoding to the European Parliament, these aim to “address the societal and economic effects of the tech industry by setting clear standards for how they operate and provide services in the EU, in line with EU’s fundamental rights and values.” Of the DMA, Apple says the law “will create unnecessary privacy and security vulnerabilities for our users” and “prohibit us from charging for intellectual property in which we invest a great deal.”

What Is the Digital Services Act? (DSA)

The Digital Services Act (DSA) is a set of legislative rules designed to tackle the spread of illegal content, disinformation, and to help regulate digital platforms. According to a press release, the new obligations will include measures to:

Counter illegal content online and help platforms react quicklyStrengthen traceability and checks on traders in online marketplacesIncrease transparency and accountability on digital platformsBan misleading practices and certain ads targeting children or sensitive data

Under the DSA, users will get the choice to not receive recommendations based on profiling, and will be able to see more clearly what’s been moderated and why content is recommended for them. Platforms will also need to grant access to their data and algorithms to authorities and vetted researchers. Ultimately, users should have more control over their data and how it’s used, a better understanding of the content being presented to them, and be safer from illegal, misleading and unwelcome messaging. In addition, they’ll be required to allow third parties to inter-operate with their own services. For example, Apple users will be able to continue conversations across multiple messaging apps besides iMessage, such as Messenger, which will be able to be integrated, rather than users having to use one provider’s own service, exclusively. Under the DMA, business users must also be permitted access to their own data that’s generated in a gatekeeper’s platform, in such a way that they can conclude contracts with customers or make promotions outside of the gatekeeper’s platform, if they wish. Some of the activities big tech platforms will no longer be allowed to do, include:

Ranking their own services or products more favourablyStopping users from uninstalling preloaded software, apps or third party applicationsProcessing personal data for targeted advertising without explicit consent

Privacy and security vulnerabilities opened up by the sharing of data with third parties will certainly need to be addressed, but the realities are that these concerns should not outweigh the positive freedoms, rights and protections EU users will gain under the legislation, and the US would do well to follow suit. Small businesses will benefit significantly from the ability to share the market more openly with popular platforms, and both customers and businesses will gain from the ability to transfer data between services, and choose their own experiences and permissions more freely. Regardless, the time has passed for stamping feet. Any business operating in the EU that doesn’t comply with the new rules could be fined “up to 10% of its total worldwide turnover in the preceding financial year, or up to 20% in case of repeated non-compliance.” Tech regulation has been a long time coming — and given that 44% of Americans think major tech companies should be more regulated too, the US may not be far off. With the rise of misinformation, hate groups, cyber bullying, trafficking and fraud, more regulation in the US is needed — exactly how much will be, is yet to be decided.