
A regulatory classification created under the European Union’s Digital Services Act (DSA). Designated directly by the European Commission, a platform earns VLOP status if it hosts user content or operates a marketplace reaching 45 million or more monthly active users in the EU—representing roughly 10% of the EU population.
Because VLOPs function as major digital public squares and commercial hubs, they face the DSA’s strictest operational, compliance, and advertising obligations.
Qualification Criteria & Designation
- User Threshold: Reaching an average of 45 million monthly active users in the European Union.
- User Reporting: Platforms operating in the EU must calculate and publish their average monthly active user metrics at least once every 6 months.
- Enforcement Window: Once the European Commission officially designates a service as a VLOP, the company has exactly 4 months to bring its operations into full compliance.
Key Designated VLOPs
The EU Commission has designated a wide range of platforms across social networks, video hubs, app stores, and ecommerce platforms:
- Social & Messaging: Meta (Facebook, Instagram), TikTok, X (formerly Twitter), Pinterest, Snapchat, LinkedIn
- Video & Media: YouTube, Wikipedia
- App Stores: Apple App Store, Google Play
- Ecommerce & Marketplaces: Amazon Store, AliExpress, Shein, Temu, Booking.com, Zalando
- Digital Services: Google Maps, Google Shopping
Strict Rules Mandated Only for VLOPs
While smaller platforms follow basic DSA transparency rules (such as banning dark patterns and sensitive category ad profiling), VLOPs are subject to unique, high-level mandates:
1. Mandatory Real-Time Public Ad Repositories (Article 39)
VLOPs must build and publicly maintain a searchable API and web interface archiving every advertisement shown on their platform for at least 1 year after it stops running. Archives must show:
- The exact ad creative copy and media.
- The identity of the advertiser and who paid for the ad.
- Real-time reach metrics, demographic breakdowns, and targeting parameters used.
2. Mandatory Non-Profiling Recommender Feed
VLOPs that use algorithmic recommendation feeds (e.g., social timelines or product suggestions) must offer users at least one easily accessible version that is not based on profiling (such as a purely chronological feed).
3. Systemic Risk Assessments & Independent Audits
Every 12 months, VLOPs must formally evaluate and report how their algorithms, ad networks, and interface designs might pose systemic risks to:
- Spread of illegal content or counterfeit goods.
- Fundamental rights (privacy, child safety, freedom of expression).
- Electoral processes, civic discourse, and public health.
VLOPs must undergo independent annual audits and maintain dedicated internal compliance officers.
4. Data Sharing for Regulators and Vetted Researchers
Under Article 40 of the DSA, VLOPs are legally required to grant vetted academic researchers and regulators access to platform data (including algorithmic training data and ad parameters) for monitoring systemic risks.
VLOP vs. VLOSE vs. Gatekeeper
| Metric | Very Large Online Platform (VLOP) | Very Large Online Search Engine (VLOSE) | DMA Gatekeeper |
| Governing Law | Digital Services Act (DSA) | Digital Services Act (DSA) | Digital Markets Act (DMA) |
| Core Threshold | >45 Million EU Monthly Users | >45 Million EU Monthly Users | €7.5B Revenue / €75B Cap + 45M Users |
| Primary Focus | User-generated content, feeds, and hosted marketplaces. | Web-wide indexing, query ranking, and search ads. | Market dominance, unbundling, and fair competition. |
| Max Penalty | Up to 6% of global turnover | Up to 6% of global turnover | Up to 10% of global turnover (20% for repeat) |