A regulatory classification created under the European Union’s Digital Services Act (DSA), a Very Large Online Platform (VLOP) is a major digital public square and commercial hub subject to strict operational, compliance, and advertising obligations. The DSA establishes a tiered regulatory approach, with VLOPs facing the most stringent requirements due to their significant reach and influence. Designated directly by the European Commission, a platform earns VLOP status if it hosts user content or operates a marketplace reaching 45 million or more monthly active users in the EU, representing roughly 10% of the EU population.
Qualification Criteria & Designation
- User Threshold: Reaching an average of 45 million monthly active users in the European Union.
- User Reporting: Platforms operating in the EU must calculate and publish their average monthly active user metrics at least once every 6 months.
- Enforcement Window: Once the European Commission officially designates a service as a VLOP, the company has exactly 4 months to bring its operations into full compliance.
Key Designated VLOPs
The EU Commission has designated a wide range of platforms across social networks, video hubs, app stores, and ecommerce platforms:
- Social & Messaging: Meta (Facebook, Instagram), TikTok, X (formerly Twitter), Pinterest, Snapchat, LinkedIn
- Video & Media: YouTube, Wikipedia
- App Stores: Apple App Store, Google Play
- Ecommerce & Marketplaces: Amazon Store, AliExpress, Shein, Temu, Booking.com, Zalando
- Digital Services: Google Maps, Google Shopping
Strict Rules Mandated Only for VLOPs
While smaller platforms follow basic DSA transparency rules, VLOPs are subject to unique, high-level mandates:
- Mandatory Real-Time Public Ad Repositories (Article 39): VLOPs must build and publicly maintain a searchable API and web interface archiving every advertisement shown on their platform for at least 1 year after it stops running. Archives must show the exact ad creative copy and media, the identity of the advertiser, real-time reach metrics, demographic breakdowns, and targeting parameters used.
- Mandatory Non-Profiling Recommender Feed: VLOPs that use algorithmic recommendation feeds must offer users at least one easily accessible version that is not based on profiling (such as a purely chronological feed).
- Systemic Risk Assessments & Independent Audits: Every 12 months, VLOPs must formally evaluate and report how their algorithms, ad networks, and interface designs might pose systemic risks to the spread of illegal content or counterfeit goods, fundamental rights, electoral processes, civic discourse, and public health. VLOPs must undergo independent annual audits and maintain dedicated internal compliance officers.
- Data Sharing for Regulators and Vetted Researchers: Under Article 40 of the DSA, VLOPs are legally required to grant vetted academic researchers and regulators access to platform data (including algorithmic training data and ad parameters) for monitoring systemic risks.
Table: VLOP vs. VLOSE vs. Gatekeeper
| Metric | Very Large Online Platform (VLOP) | Very Large Online Search Engine (VLOSE) | DMA Gatekeeper |
| Governing Law | Digital Services Act (DSA) | Digital Services Act (DSA) | Digital Markets Act (DMA) |
| Core Threshold | >45 Million EU Monthly Users | >45 Million EU Monthly Users | €7.5B Revenue / €75B Cap + 45M Users |
| Primary Focus | User-generated content, feeds, and hosted marketplaces | Web-wide indexing, query ranking, and search ads | Market dominance, unbundling, and fair competition |
| Max Penalty | Up to 6% of global turnover | Up to 6% of global turnover | Up to 10% of global turnover (20% for repeat) |