The European Commission has approved X's compliance plan to address violations of its Digital Services Act obligations, setting a precedent for how the bloc intends to enforce its landmark digital regulation framework. The acceptance of these measures follows a December 2025 penalty imposed by the Commission for multiple breaches, including misleading transparency practices, the deceptive rebranding of account verification labels, and the platform's obstruction of researcher access to critical public datasets. This development represents the first enforcement action under the DSA, a regulation that has become a flashpoint in the broader geopolitical struggle over technology governance between Europe and the United States.
The violations identified by Brussels centred on three specific areas of non-compliance. First, X failed to maintain transparent information about its content moderation systems and algorithmic operations. Second, the platform deceived users by continuing to display verification indicators even after it had ceased to verify accounts, subsequently reframing these markers as "premium" designations tied to its subscription service. Third, and perhaps most significantly for the research community, X restricted access to public data that researchers, academics, and civil society organisations require to audit platform behaviour and assess systemic risks to information integrity.
Under the agreed remedial framework, X has committed to substantially expanding researcher access to its data infrastructure, including previously restricted advertising datasets that shed light on how the platform targets content to different demographic groups. The company has also pledged to respond to researcher requests and regulatory inquiries on accelerated timelines, acknowledging that delays in providing such information had hampered oversight efforts. These commitments represent concrete steps toward the transparency and accountability objectives that underpinned the DSA's design, even as the platform simultaneously contests the underlying fine through appeal.
Thomas Regnier, the European Commission's spokesperson on digital affairs, characterised the agreement as "an important step in the right direction," emphasising that the approved measures would grant researchers, civil society groups, and the broader public unprecedented visibility into X's operational systems and their effects on users. This language reflects the Commission's conviction that transparency functions as an essential counterbalance to platform power, allowing independent scrutiny rather than relying solely on company self-regulation or government mandates. The framing also suggests that Brussels views this agreement as a template for future compliance negotiations with other digital gatekeepers facing DSA investigations.
The implementation timeline provides X with six months to execute these measures, after which they will undergo external and independent auditing to verify compliance. This third-party oversight mechanism indicates the Commission's determination not to accept corporate assurances at face value, instead building verification requirements directly into the compliance framework. The audit requirement also signals that Brussels intends to monitor whether platforms make genuine operational changes or merely perform compliance theatre through cosmetic modifications.
Crucially, the acceptance of these remedial measures does not constitute a settlement of the underlying dispute. X filed an appeal against the December fine in February 2026, and that legal challenge continues unimpeded by the current agreement. This bifurcation—simultaneous acceptance of compliance measures and contestation of the penalty—reflects the platform's strategic calculation that it can signal cooperation to European regulators while pursuing aggressive legal arguments that the fine itself exceeds the Commission's authority or violates X's rights. The appeal process could potentially drag through EU courts for several years, maintaining uncertainty about the regulatory framework's legal foundations.
The geopolitical dimensions of this dispute have escalated markedly in recent months, illustrating how digital regulation has become entangled with broader US-European tensions. President Donald Trump characterised the X fine as "censorship," adopting a rhetorical position that frames European regulatory oversight as an infringement on free expression rather than a mechanism for ensuring platform accountability. This characterisation inverts the typical meaning of censorship by equating regulatory penalties against a private company with government suppression of speech, a framing that has gained traction within certain policy circles in Washington.
Escalating beyond rhetorical opposition, the US State Department announced sanctions against five individuals in retaliation for European digital regulation efforts, including former EU Commissioner Thierry Breton, who played a key role in negotiating the DSA. This extraordinary step—imposing diplomatic sanctions on EU officials for implementing lawful regulatory policy—represents a dramatic intensification of transatlantic friction and signals the Trump administration's willingness to weaponise its foreign policy apparatus against European regulatory independence. The sanctions carry symbolic significance that extends well beyond the targeted individuals, signalling to other policymakers considering alignment with European digital governance approaches that cooperation may carry personal political costs.
The Commission's investigation into X remains incomplete, suggesting that additional enforcement actions may follow. The regulator opened its initial DSA probe in 2023 and continues to examine aspects of the platform's conduct not yet resolved. More recently, Brussels launched a separate investigation into X's AI chatbot Grok, specifically examining whether the system generates sexualised deepfake images of women and minors—a distinct category of potential harm that reflects emerging concerns about generative AI applications. These parallel investigations indicate that the Commission regards X as a persistent source of regulatory violations rather than an isolated compliance failure.
For Malaysian and Southeast Asian readers, this regulatory battle carries significant implications. The DSA establishes a governance model that other jurisdictions may emulate or reference when developing their own digital regulation frameworks. Malaysia has previously signalled interest in strengthening content moderation standards and researcher access to platform data, and European precedents will likely influence local policymaking. Additionally, the transatlantic conflict over digital regulation creates uncertainty about which governance standards platforms will ultimately be required to meet globally, potentially leading either toward convergent international standards or fragmented regional requirements that increase compliance costs.
The agreement also underscores a broader pattern: major technology platforms increasingly face simultaneous pressure from multiple regulatory regimes with different priorities and enforcement mechanisms. X's acceptance of EU transparency measures while contesting the underlying fine, combined with its ongoing compliance challenges across jurisdictions, illustrates the complexity of operating a global platform subject to genuinely divergent legal frameworks. For companies operating in Malaysia and across Southeast Asia, this suggests that compliance with differing regional standards will become an unavoidable cost of doing business, particularly as platforms operate across both European and other regulatory zones.
Looking forward, the success or failure of X's implementation of these transparency measures will likely determine whether other platforms cooperate voluntarily with similar EU demands or adopt more confrontational stances. If the auditing process demonstrates genuine improvements in researcher access and platform transparency, the model may become a template for resolving future DSA disputes. Conversely, if X implements measures only superficially or continues obstructive behaviour, the Commission will likely pursue more aggressive enforcement, including larger financial penalties and potentially structural remedies that reshape platform operations. The outcome will shape European digital governance for years to come.
