EU Parliament passed Digital Services Act, including provisions banning targeted ads based on highly sensitive personal data, limiting dark patterns, and more
A large majority of MEPs voted in favour of the Digital Services Act on Thursday (20 January), after plenary amendments introduced important changes to the text.
Context & Ripple Effects
The vote extends the Parliament’s earlier tough data-protection rules into platform design and advertising practices. It also sits alongside the Digital Markets Act measures that targeted interoperability and advertising to minors, making the EU’s platform-rule agenda broader than a single privacy intervention.
Related coverage shows the parliamentary text moving toward a finalized DSA that would require stronger social-network content moderation and constrain Google and Meta’s youth ad targeting. The later Data Act agreement carries the same policy arc into rules governing use of consumer and corporate data.
First-order effects
- Platforms serving EU users must prepare to remove targeting based on highly sensitive personal data and to alter interface practices covered by the DSA’s dark-pattern limits.
- Google, Meta, and social networks face overlapping DSA compliance work across advertising controls and the content-moderation obligations described in the subsequent finalization coverage.
Second-order effects
- Advertisers and platforms lose some audience-segmentation options, increasing the importance of targeting methods that do not rely on sensitive personal data.
- The DSA’s ad and interface restrictions reinforce the compliance burden created by the Digital Markets Act’s limits on targeting minors, pushing large platforms toward coordinated EU-wide policy and product changes.
Third-order effects
- The EU is building a layered data-governance regime: privacy rules, platform conduct rules, and later Data Act rules each constrain a different stage of collecting, using, and presenting data.
- If this layered approach persists, platform competition in Europe will be shaped increasingly by compliance capabilities and by product designs that reduce reliance on sensitive-data targeting.
The trend: EU digital regulation is moving from baseline data protection toward a connected rulebook for platform interfaces, advertising practices, and data use.