Digital Services Act: Data access is not a platform privilege, but a right

The European Union has taken a significant step in enforcing its Digital Services Act (DSA), issuing a substantial fine to the platform X for non-compliance regarding researcher data access. This ruling redefines research's role, positioning it not merely as an observer of platform power but as an active participant in regulatory oversight. This enforcement action signals a robust approach to ensuring digital platforms adhere to transparency and risk mitigation mandates. The European Commission imposed a €120 million penalty on X, citing deficiencies in its system for providing researchers with access to platform data. This decision stems from X's restrictive approach, which approved only a small fraction of data requests from scientists, highlighting a systemic issue in facilitating necessary research into platform risks like disinformation and addictive design patterns. This action underscores the DSA's commitment to enabling empirical study of digital environments. This enforcement action significantly impacts researchers and platform operators, establishing clearer guidelines for data access under the DSA. Platforms can no longer reframe mandated data access as a discretionary privilege, nor can they unduly delay or restrict it based on arbitrary criteria. The ruling's clarification on what constitutes "undue delay" and the invalidation of cost or affiliation barriers provides researchers with crucial legal certainty. The decision also confirms that automated data extraction, or scraping, of publicly accessible content is permissible, even without explicit platform consent, further empowering independent research.