---
title: "EU TCOR Representation"
url: "https://prighter.com/digital-governance/eu-ai-act"
type: "product-page"
date: "2026-10-14T10:07:10.508Z"
---

# EU TCOR Representation

## Brighter Privacy Representation and Software

Prighter acts as your Representative for the Digital Services Act and Voluptate consequat incididunt consequat anim culpa sunt.

# Do I need Representation?

Use our interactive Self Assesment Tool to figure out if and where you need   
Privacy Representation or Digital Governance Representation around the world.  
  
Or learn more about what Privacy Representation even is in our Resource Center

## Features and Benefits

### Feel Protected and safe while complying

Id ex fugiat aute sit. Minim et adipisicing consectetur dolor adipisicing consectetur laboris labore fugiat ea proident. Mollit minim aute ex nulla sint ea fugiat esse. Consectetur voluptatr.

### Adapt to changing Legislation as needed

Id ex fugiat aute sit. Minim et adipisicing consectetur dolor adipisicing consectetur laboris labore fugiat ea proident. Mollit minim aute ex nulla sint ea fugiat esse. Consectetur voluptatr.

### Adapt to changing Legislation as needed

Id ex fugiat aute sit. Minim et adipisicing consectetur dolor adipisicing consectetur laboris labore fugiat ea proident. Mollit minim aute ex nulla sint ea fugiat esse. Consectetur voluptatr.

Protecting you all over the World

# Stay Protected by appointing Prighter

## What Our Customers Say

We partner with organisations all around the world to ensure robust compliance. Here's what some of our valued customers have to say about their Prighter experience.

# Do I need Representation?

Ready to get started?

## Resource Center

Our Resource Centre is designed to help businesses around the world to understand and navigate international privacy, AI, and digital governance compliance. Whether you're new to compliance, or you're an experienced privacy professional, you'll find helpful tips, fresh insights, and practical resources to help you level-up your approach to compliance.

- [Protecting Children Online in the EU and UK: What Online Service Providers Need to Know in 2026](https://prighter.com/resources/protecting-children-online-eu-and-uk) (2026-09-16): In July 2026, the European Commission preliminarily found that TikTok had breached the Digital Services Act ("DSA") because the settings of minors' accounts did ...
- [What Is the EU e-Evidence Regulation? What Service Providers Need to Know](https://prighter.com/resources/eu-e-evidence-regulation) (2026-08-18): The EU "e-Evidence package" (Regulation (EU) 2023/1543 and Directive (EU) 2023/1544) makes it faster for judicial authorities investigating crime to obtain ...
- [The new UK data protection right to complain: What is it and how must businesses comply?](https://prighter.com/resources/uk-data-protection-right-to-complain) (2026-09-10): From 19 June 2026, individuals in the UK will have the right to lodge a complaint directly with the data controller responsible for processing their personal ...
- [Turkish KVKK in Practice: A Complete Guide to VERBIS Registration](https://prighter.com/resources/turkish-kvkk-verbis-registration) (2026-03-25): Türkiye’s Personal Data Protection Law (KVKK, Law No. 6698) was enacted in 2016, and it lays out rules for personal data processing that are in many respects ...
- [Prighter's Submissions to the EU Digital Omnibus and AI Omnibus Consultations](https://prighter.com/resources/prighter-digital-omnibus-consultation-submission) (2026-03-20): The European Commission has launched consultations on the Digital Omnibus and AI Omnibus proposals, initiatives intended to simplify the EU’s evolving digital ...
- [EU Digital Services Act - Transparency Reporting Part 2: The Commission's Template](https://prighter.com/resources/digital-services-act-transparency-reporting-part-two) (2026-01-27): The recent enforcement cases once again put the spotlight on the Digital Service Act ('DSA') and the requirements for providers of intermediary services. On the ...
- [EU AI Act Implementation Project Plan: Key Compliance Steps and Risk Classifications](https://prighter.com/resources/eu-ai-act-implementation-project-plan) (2026-02-06): Artificial Intelligence is reshaping industries, business models, and societies at unprecedented speed. As AI systems increasingly influence decision-making, ...
- [The EU Digital Omnibus proposal: What is it, what's new, and what's coming next?](https://prighter.com/resources/the-eu-digital-omnibus-proposal) (2026-01-20): The EU Digital Omnibus proposal – what is it, what's new, and what's coming next? On 19 November 2025, the European Commission presented its proposal for a ...
- [EU Data Act Summary: Understanding Your Obligations at a Glance](https://prighter.com/resources/eu-data-act-summary) (2025-12-15): The EU Data Act introduces a wide-ranging set of obligations that apply across the data value chain. Unlike many digital regulations that focus on a single role ...
- [Join the Prighter Digital Omnibus Masterclass Series](https://prighter.com/resources/webinar-digital-omnibus-masterclass) (2026-03-02): The European Commission has released an Omnibus proposal focused on simplifying implementation of the EU AI Act, alongside a broader Digital Simplification ...
- [A Practical EU NIS 2 Compliance Checklist for Global Organisations](https://prighter.com/resources/nis2-compliance-checklist) (2025-11-24): NIS 2 raises expectations for how organisations manage cybersecurity. Meeting the directive starts with a set of core documents and processes that form the ...
- [A Practical Guide to the EU Data Act - Part 1: Overview and Scope](https://prighter.com/resources/eu-data-act-guide) (2025-11-07): Given the amount of media coverage and the discussions around the EU AI Act, the arrival of the Data Act has flown somewhat under the radar and deserves more ...
- [Türkiye's data protection landscape in 2025: What international companies need to know](https://prighter.com/resources/turkey-data-protection-landscape-in-2025) (2025-08-08): International organisations have faced a shifting landscape for complying with data Türkiye's protection law (KVKK) in the years since it was first adopted in ...
- [EU AI Act: Obligations of providers of general-purpose AI (GPAI)](https://prighter.com/resources/ai-act-obligations-for-general-purpose-ai-models) (2025-08-06): As artificial intelligence increasingly plays a central role in innovation, the European Union has taken an important regulatory step with the AI Act. Among the ...
- [The EU AI Act Countdown is (Back) on for General-Purpose AI Model Providers](https://prighter.com/resources/eu-ai-act-implementation-timeline) (2025-07-17): A coalition of top executives from leading European companies—including Airbus, ASML, Lufthansa, Mistral, and TotalEnergies—have signed an open letter urging ...
- [NIS 2 Self Assessment](https://prighter.com/resources/nis-2-self-assessment) (2026-09-15): The NIS 2 Directive, in force since October 2024, strengthens the EU’s cybersecurity framework by expanding its scope and raising security standards for ...
- [What Does the European Commission’s GDPR Reform in 2025 Mean for Your Business?](https://prighter.com/resources/gdpr-reform-2025) (2025-05-27): The European Commission’s Fourth Omnibus Package, presented on 21 May 2025, marks a first step on the EU’s journey towards regulatory simplification. The ...
- [Global Privacy and AI Journey: Korea, China, India & EU](https://prighter.com/resources/data-protection-korea-china-india-eu) (2025-05-01): Overview Privacy regulations tightening across the globe—with a closer look at Korea's Personal Information Protection Act (PIPA), China's Personal Information ...
- [Enforcement of the Digital Services Act is Coming. What Does It Mean for You?](https://prighter.com/resources/digital-services-act-enforcement) (2025-04-04): The European Union's Digital Services Act (DSA) has ushered in a new era of regulatory oversight for intermediary services. Recent developments underscore the ...
- [What the UK Data (Use and Access) Act Means for Your Business](https://prighter.com/resources/uk-data-use-and-access-act) (2025-04-04): Following an Odyssean journey, the UK is finally on course to make changes to its data protection framework. The Data (Use and Access) Bill passed by Parliament ...
- [NIS 2 Directive is Applicable as of Today: Time to Comply!](https://prighter.com/resources/nis-2-directive-is-applicable-today) (2024-10-18): As of today, 18 October 2024, the EU's NIS2 Directive is officially applicable, marking a new era in cybersecurity for essential services across Europe. This ...
- [UK's Cyber Security Laws Set for update in 2025: What's Coming Next?](https://prighter.com/resources/uk-cyber-security-laws-set-for-update-2025) (2024-10-09): In the July 2024 King’s Speech, the UK government unveiled plans to introduce the Cyber Security and Resilience Bill in Parliament next year. This landmark ...
- [GDPR in Practice: Key Insights and Recommendations from the FRA's Latest Report](https://prighter.com/resources/fra-report-gdpr-in-practice) (2024-06-12): The European Union Agency for Fundamental Rights (FRA) recently published a comprehensive report on GDPR implementation, highlighting areas for improvement. EU ...
- [The European Commission Established an AI Office to Advance EU Leadership in Reliable and Safe AI](https://prighter.com/resources/ai-office-european-commission) (2024-05-29): Today, the establishment of the AI Office was announced by the European Commission. It was developed to reduce risks, maximize societal and economic benefits, ...
- [European Council Officially Approves First-Ever Global AI Regulations](https://prighter.com/resources/council-approved-global-ai-regulations) (2024-05-21): The European Council has officially approved the AI Act, the first global regulation on artificial intelligence. This legislation adopts a risk-based approach ...
- [New Consent Requirement for Swiss Traffic: Google's Policy Expansion](https://prighter.com/resources/consent-requirements-google-swiss) (2024-05-06): Starting July 31, 2024, Google is expanding its EU User Consent Policy to encompass users in Switzerland. This update builds upon Google's original EU User ...
- [EU-Japan Agreement: Council Approves Data Flow Facilitation Protocol](https://prighter.com/resources/eu-japan-data-flow-partnership) (2024-04-29): The Council of EU has officially approved a protocol aimed at facilitating the flow of data between the European Union and Japan. This protocol represents a big ...
- [Navigating Data Privacy: 'Consent or Pay' Models and the Path Forward](https://prighter.com/resources/consent-or-pay-models) (2024-04-17): The recent Court of Justice of the European Union (CJEU) ruling on Meta's data processing practices has sparked uncertainty among many companies. In response to ...
- [GDPR Compliance in AI: Essential Tips from CNIL's Latest Guidance](https://prighter.com/resources/cnil-gdpr-ai-guidelines) (2024-04-11): The French Data Protection Authority (CNIL) released a set of recommendations which provide both legal and technical explanations between the GDPR and ...
- [Landmark US Privacy Bill Unveiled: A Leap Forward for Digital Privacy Rights](https://prighter.com/resources/american-privacy-rights-act) (2024-04-08): Last week, two influential members of the U.S. Congress unveiled a draft bipartisan, bicameral federal privacy bill, in a crucial step forward for safeguarding ...
- [Data Breach Notifications Across Europe: EDPB's list published!](https://prighter.com/resources/data-breach-notification-handling) (2024-03-26): This significant update nearly went unnoticed as all attention was focused on the final text of the AI Act. The #EDPB finally published the list detailing the ...
- [Executive Order by President Biden Aimed at Securing Sensitive Personal Data of U.S. Individuals](https://prighter.com/resources/biden-order-securing-data) (2024-02-28): President Biden has announced an unprecedented Executive Order designed to protect Americans' most sensitive personal data from exploitation by foreign threats. ...
- [Navigating the Timeline of the EU Artificial Intelligence Act](https://prighter.com/resources/eu-artificial-intelligence-act-timeline-implications) (2024-02-21): The European Union reached a significant milestone in controlling artificial intelligence when the Parliament, Commission, and Council came to a political ...
- [EDPB clarifies notion of main establishment and calls on EU legislators to make sure CSAM Regulation respects rights to privacy and data protection](https://prighter.com/resources/edpb-updates-main-establishment-csam-regulation-privacy-2024) (2024-02-14): Today, on February 14, 2024, the EDPB made two important announcements that could impact businesses and individuals across the EU: Clarification on Main ...
- [New Milestone Achieved in AI Governance](https://prighter.com/resources/eu-ai-governance-key-dates) (2024-02-09): EU member states have unanimously voted for the Artificial Intelligence Act forward, setting the stage for changes in global AI regulation. This decision, ...
- [🤝  EU-Japan Agreement on Cross-Border Data Flows: An Important Leap in Digital Collaboration](https://prighter.com/resources/eu-japan-data-agreement) (2024-02-05): The EU and Japan have officially inked a landmark deal on cross-border data flows, marking an important step to drive digitalization across societies and ...
- [California AG Bonta Investigates Streaming Services for CCPA Compliance](https://prighter.com/resources/california-ag-streaming-ccpa-investigation) (2024-01-30): California Attorney General Rob Bonta has announced an investigation into popular streaming services for potential California Consumer Privacy Act (CCPA) ...
- [EDPB Launches Website Auditing Tool](https://prighter.com/resources/edpb-website-auditing-tool-launch) (2024-01-29): On January 29, 2024, the European Data Protection Board (EDPB) unveiled its latest initiative—a Website Auditing Tool designed to assess website compliance with ...
- [Today Marks Data Privacy Day: Reflecting on Progress and Anticipating Future Developments](https://prighter.com/resources/data-privacy-day) (2024-01-28): Let's take a moment to reflect on our collective journey and look forward to the path ahead. Here's a concise recap: Looking Back: Swiss FADP: Implemented ...
- [The EU's Final AI Act Draft Revealed | Crucial Updates Unveiled](https://prighter.com/resources/eu-ai-act-leaked) (2024-01-22): Luca Bertuzzi has brought to light the final, agreed draft of the EU's AIAct, marking a significant disclosure. EU countries received this crucial document just ...
- [Congratulations to 11 Countries for Maintaining EU Data Adequacy](https://prighter.com/resources/eu-data-adequacy-11-nations-uphold-privacy-standards) (2024-01-15): In a significant stride towards maintaining data security, the European Commission has concluded its review of adequacy decisions for 11 nations. These ...
- [The CJEU rules on the liability of controllers](https://prighter.com/resources/cjue-ruling-gdpr-processor-liability-clarifications) (2024-01-05): The Court of Justice of the European Union has been busy untangling the threads of GDPR in recent cases. One such notable instance is C-683/21, where a ...
- [European Data Protection Board Endorses Cookie Pledge for Enhanced User Rights](https://prighter.com/resources/edpb-cookie-pledge-eu-user-rights) (2023-12-19): The European Data Protection Board (#EDPB) has expressed support for the European Commission's "cookie pledge" initiative. This move, announced during the ...
- [New Criteria for GDPR Fines Determined by the CJEU](https://prighter.com/resources/eu-court-gdpr-fines-updates-compliance) (2023-12-18): The European Court of Justice has refined the application of the GDPR, offering important insights for data protection enforcement. 𝐊𝐞𝐲 𝐔𝐩𝐝𝐚𝐭𝐞𝐬: Fine ...
- [💡 California Mandates Revolutionary Browser Privacy Feature: A Game-Changer in Digital Rights](https://prighter.com/resources/california-browser-privacy-law-digital-rights) (2023-12-13): In a significant move towards enhancing digital privacy, California's Privacy Protection Agency Board has recently approved a new legislative proposal. This ...
- [EDPB Issues Urgent Decision Regarding Meta's Data Processing](https://prighter.com/resources/edpb-urgent-ban-meta-data-processing) (2023-12-07): The European Data Protection Board (EDPB) responded swiftly to protect data subjects' rights, imposing a ban on Meta IE's handling of personal data for ...
- [California's Privacy Progress: Recap of Legislative Action 2022-23](https://prighter.com/resources/california-privacy-progress-legislative-recap) (2023-11-29): The legislative activity in California during 2023 marked significant strides in privacy, technology, and online safety. With a firm commitment to strengthening ...
- [ICO Warns Top UK Websites on Cookie Compliance: Fair Choices for Users Urged](https://prighter.com/resources/ico-uk-fair-cookie-choices) (2023-11-23): The ICO's latest warning emphasizes the importance of fair choices when it comes to tracking for personalized advertising. The directive stresses that users ...
- [EU DPAs seek proper clampdown on AdTech industry](https://prighter.com/resources/eu-dpas-adtech-regulation) (2023-11-22): Recent decisions on Meta's advertising practices are shaking the core of AdTech in the EU. What started with the European Data Protection Board's binding ruling ...
- [EDPB Releases New Guidelines on ePrivacy Directive Tracking Techniques](https://prighter.com/resources/edpb-guidelines-eprivacy-tracking) (2023-11-15): In a significant move for digital privacy, the European Data Protection Board (EDPB) has unveiled new guidelines that clarify the tracking techniques covered ...
- [Balancing Innovation and Privacy: The Push for a Federal AI Data Protection Law](https://prighter.com/resources/fed-ai-data-protection-innovation-privacy) (2023-11-14): Recent discussions at the Senate AI Insight Forum, led by Chris Lewis of Public Knowledge, have brought to light a critical issue in the artificial intelligence ...
- [Insightful CJEU Ruling Sheds Light on GDPR's Scope in Data Identifiability](https://prighter.com/resources/cjeu-ruling-gdpr-scope-vehicle-data-identifiability) (2023-11-10): The Court of Justice of the European Union (CJEU) has delivered an impactful ruling in Case C-319/22, Gesamtverband Autoteile-Handel v. Scania, shaping the ...
- [EDPB's Urgent Binding Decision on the Processing of Personal Data for Behavioral Advertising by Meta](https://prighter.com/resources/meta-eea-advertising-ban-edpb-decision) (2023-11-02): On 1st November 2023, the European Data Protection Board (EDPB) announced an urgent binding decision regarding the processing of personal data for behavioral ...
- [White House issues Executive Order setting new standards for AI regulation](https://prighter.com/resources/white-house-ai-regulation-executive-order) (2023-10-30): President Biden has taken a stride in ensuring that America takes the forefront in harnessing the potential of artificial intelligence (AI) while also ...
- [Update on EU's AI Act: EU policymakers Have Proposed Stricter Regulations for High-Risk AI Systems](https://prighter.com/resources/ai-act-amendments-high-risk-ai-balancing) (2023-10-25): EU policymakers are planning to have changes to the AI Act, aimed at regulating Artificial Intelligence in a risk-based approach. The core of this legislation ...
- [🔍 Face search company Clearview AI overturns UK privacy fine](https://prighter.com/resources/clearview-ai-ico-jurisdiction-appeal) (2023-10-19): Clearview AI, a company specializing in facial recognition technology, has successfully overturned a £7.5 million privacy fine imposed by the UK's Information ...
- [🌐 Shaping AI Liability Rules: EDPS's Vision for Equitable Protection in Europe](https://prighter.com/resources/edps-ai-liability-equal-protection) (2023-10-17): The European Data Protection Supervisor (EDPS) has issued own-initiative Opinion on two critical proposals regarding AI liability. These proposals are integral ...
- [EU-U.S. Data Privacy Framework: 0:1 for the DPF](https://prighter.com/resources/eu-us-data-privacy-framework-dpf-outcome) (2023-10-13): In a recent legal case (T‑553/23 R) before the EU General Court, French citizen Philippe Latombe challenged the EU-U.S. Data Privacy Framework, seeking an ...
- [Governor of California signs the Delete Act creating a one-stop-shop opt out mechanism and greater accountability for data brokers](https://prighter.com/resources/california-delete-act-data-privacy-accountability) (2023-10-11): Senate Bill 362, commonly referred to as the California Delete Act, has been signed by Governor Newsom. The Delete Act adds to California's existing privacy ...
- [Exciting news for data privacy professionals and businesses! The UK-US Data Bridge is set to become law on October 12, 2023](https://prighter.com/resources/uk-us-data-bridge-law-2023) (2023-09-22): This agreement ensures the safe transfer of personal data between the UK and the US while maintaining high standards of privacy for UK personal data. It's a ...
- [Key Privacy Update: TikTok Instructed to Address Child Privacy Concerns](https://prighter.com/resources/tiktok-child-privacy-edpb-directive) (2023-09-19): In a significant development, the European Data Protection Board (EDPB) has issued a directive to TikTok, mandating changes in the platform's handling of ...
- [Transatlantic Data Deal Challenged Before EU Court](https://prighter.com/resources/eu-us-data-privacy-challenges) (2023-09-08): A fresh legal challenge has emerged regarding the EU-U.S. Data Privacy Framework, designed to address data transfer concerns between the EU and the United ...
- [Advancing Data Protection in India: The Digital Personal Data Protection Bill, 2023](https://prighter.com/resources/advancing-data-protection-india-digital-personal-data-protection-bill-2023) (2023-08-18): Big News! The Rajya Sabha has approved the Digital Personal Data Protection Bill, 2023 on August 9. This new law introduces stricter rules around handling ...
- [Practical implications following the EU Commission's adequacy decision for the EU-U.S. Data Privacy Framework](https://prighter.com/resources/eu-us-data-privacy-framework-challenge) (2023-07-25): On 10 July 2023, the European Commission adopted its adequacy decision on the EU-U.S. DPF, but what does this mean operationally for transfers from the EU to ...
- [📢 WHAT... ⁉️ You may have thought that the CPRA crosses the finishing line this weekend 🏁 BUT...](https://prighter.com/resources/cpra-not-crossing-finishing-line-this-weekend) (2023-06-30): The Sacramento Superior Court issued a tentative ruling delaying the enforcement of the CPRA regulations. The CPRA is amending the Californian CCPA and ...
- [EDPB Adopts Guidelines on Art. 65(1)(a) of GDPR](https://prighter.com/resources/edpb-adopts-guidelines-art-65-1a-gdpr) (2023-06-09): Great news for privacy enthusiasts. The European Data Protection Board (EDPB) has recently adopted the final version of the Guidelines on the application of ...
- [Exciting News: UK and US Commit to Data Bridge, but Details Remain Scarce](https://prighter.com/resources/uk-us-data-bridge-privacy-framework-update) (2023-06-09): The UK and US have committed in principle to establish a data bridge, extending the Data Privacy Framework. Although details are limited, this move is seen as ...
- [🔔 EDPB adopts final version of Guidelines on facial recognition technology in the area of law enforcement 📣](https://prighter.com/resources/edpb-guidelines-facial-recognition-law-enforcement) (2023-05-17): The European Data Protection Board (#EDPB) has just released the final version of the Guidelines on facial recognition technology in the area of law ...
- [🚨 CASE LAW UPDATE ⚖️ Landmark EGC Ruling on Personal Data & Pseudonymisation](https://prighter.com/resources/egc-decision-pseudonymised-data-transfers) (2023-05-06): Since the decision Breyer (C-582/14) in 2016 it was common practice to consider indirect identifiable data always as personal data, because there is someone who ...
- [💬 EDPB Launches Data Protection Guide for small business ❗](https://prighter.com/resources/edpb-data-protection-guide-sme-gdpr-compliance) (2023-04-27): The European Data Protection Board (EDPB) has recently launched a Data Protection Guide, designed to assist small and medium-sized enterprises (SMEs) in ...
- [Exciting announcement! 📢 EDPB Releases Final Guidelines on Data Subject Rights - Right of Access](https://prighter.com/resources/edpb-guidelines-data-subject-rights-access) (2023-04-20): The European Data Protection Board (#EDPB) has just released the final version of the Guidelines on data subject rights - Right of access, following extensive ...
- [🛡 EDPB Resolves Meta Dispute and Creates Chat GPT Task Force 💡](https://prighter.com/resources/edpb-decision-meta-ie-data-transfers) (2023-04-13): Based on Article 65 of the GDPR, the European Data Protection Board (EDPB) has settled a dispute regarding Meta Platforms Ireland Limited's (Meta IE) data ...
- [CASE LAW Update: The Court of Justice of the EU Clarifies Controller Obligations in GDPR](https://prighter.com/resources/cjeu-ruling-controller-obligations-gdpr) (2023-04-05): CJEU has just delivered its ruling in Case C-60/22 on GDPR compliance. The court clarified that a breach by a controller of the obligations laid down in ...
- [⚖ CASE LAW Update: The Court of Justice of the EU clarifies compensation under GDPR Article 82 in Case C-300/21](https://prighter.com/resources/cjeu-ruling-compensation-gdpr-article-82) (2023-04-05): Today, CJEU cleared out the important questions on compensation under Article 82 of the General Data Protection Regulation (GDPR). Among the key takeaways from ...
- [⚖️ CASE LAW Update 📣 The Court of Justice of the EU (CJEU) Clarifies Right of Access to Personal Data under GDPR](https://prighter.com/resources/cjeu-ruling-right-of-access-personal-data) (2023-04-05): CJEU has issued a judgment in Case C-487/21 clarifying the interpretation of the right of access under Article 15 of the GDPR. It clarifies the meaning of the ...
- [💥 It is official - CPRA regulations get delayed until March 29, 2024](https://prighter.com/resources/cpra-regulations-delayed-march-2024) (2023-01-07): The Superior Court for the County of Sacramento decided that the enforcement of the CPRA regulations is stayed for 12 months from the date the California ...
- [NIS Representation in the EU and UK – Is the March 31 deadline a turning point?](https://prighter.com/resources/nis-article) (2021-04-21): Digital service providers needed to appoint a Network and Information System representative by March 31, 2021, in the U.K. Read the following to find out if ...
- [Webinar: Navigating NIS2 Directive: What Your Business Needs to Know](https://prighter.com/resources/webinar-nis-2) (2024-10-16): A tactical breakdown of the NIS framework With the deadline for the NIS2 Directive transposition into EU national laws fast approaching, understanding its ...
- [Digital Services Act (DSA) Self Assessment](https://prighter.com/resources/dsa-self-assessment) (2024-10-24): The Digital Services Act (DSA), effective as of February 2024, is a key component of the EU's digital governance strategy. Focusing on user protection from ...
- [Does the EU GDPR Apply to Your Business? What International Companies Need to Know](https://prighter.com/resources/does-the-gdpr-apply-to-me) (2025-03-03): The EU General Data Protection Regulation (GDPR) is one of the most comprehensive data privacy laws in the world. It’s designed to protect the personal data of ...
- [DSA Timeline of Reporting Requirements](https://prighter.com/resources/dsa-timeline) (2025-01-30): The first deadline for Transparency Reporting under the Digital Services Act (DSA) is on the 16 April 2025. You can find a breakdown of reporting requirements ...
- [Data Privacy Day 2025: Strengthening Trust Through Privacy Excellence](https://prighter.com/resources/data-privacy-day-2025) (2025-01-28): Data Privacy Day, which is observed every year on 28 January, isn’t just another calendar event; it’s a rallying cry for organizations, individuals, and ...
- [The EU Digital Services Act: Are you ready to meet your reporting obligations?](https://prighter.com/resources/dsa-reporting-obligations) (2025-01-22): The Digital Service Act (‘DSA’) aims to create a safer digital space and enhance accountability for intermediary services. Content moderation and reporting is ...
- [DSA Checklist: Information to be included in the Transparency Report under the Digital Services Act](https://prighter.com/resources/dsa-reporting-requirements) (2025-01-22): Providers of all types of intermediary services are required to publish Transparency Reports at least once a year. However, this obligation differs greatly for ...
- [Data breaches: why they matter and how to prepare](https://prighter.com/resources/data-breaches-introduction) (2024-11-07): Data breaches can have significant, sometimes devastating, consequences for the individuals whose data has been affected, which is why the GDPR puts such ...
- [The role of the legal representative under the Digital Services Act](https://prighter.com/resources/dsa-legal-representative) (2024-07-26): The Digital Services Act (DSA) is another key corner stone of the "Digital Strategy for Europe" and part of a new generation of regulations for digital ...
- [CCPA: Managing Consumer Rights - CPRA regulations now enforceable](https://prighter.com/resources/cpra-enforcement-compliance-urgency) (2024-02-13): Those organizations rushing before 1 July 2023 to put compliance measures in place in time for the original enforcement date of the California Privacy Rights ...
- [Ready for the new Swiss Data Protection Law? Implications for organizations outside Switzerland](https://prighter.com/resources/swiss-data-protection-law-implications-for-foreign-orgs) (2023-08-04): The revised Swiss Federal Act on Data Protection (“RevFADP”) comes into force on 1 September 2023. Unsurprisingly perhaps, this upgrade to the 1992 version ...
- [EU Commission adopts its adequacy decision for the EU-U.S. Data Privacy Framework](https://prighter.com/resources/eu-commission-adequacy-decision-eu-us-data-privacy-framework) (2023-07-21): The European Commission has adopted its long-awaited adequacy decision on the EU-U.S. Data Privacy Framework (EU-U.S. DPF). This means that, as of 10 July 2023, ...
- [From CCPA to CPRA: New rules for handling consumers’ rights](https://prighter.com/resources/cpra-general-part) (2023-01-27): New Year, new consumers’ rights for Californian residents. With 1 January, 2023, the CPRA, sometimes also referred to as CCPA 2.0, entered into force. Main ...
- [Series on Implementing PIPL: (1) Cross-Border Data Transfers and Draft Standard Contract](https://prighter.com/resources/pipl-int-transfers) (2022-07-22): Step by step, the requirements of the Chinese Personal Information Protection Law or PIPL are becoming clearer with the Cyberspace Administration of China ...
- [UK publishes proposals for new Data Protection Reform Bill](https://prighter.com/resources/uk-dp-reform) (2022-06-24): The UK Government has recently announced plans to reform UK data protection laws following its consultation "Data: A New Direction". The UK's current laws, (the ...
- [Turkish Data Protection Law (KVKK), VERBIS registration and what to do before December 31st, 2021!](https://prighter.com/resources/kvkk-article) (2021-12-17): Compliance with the Turkish data protection law (KVKK) is getting serious. 31 December 2021 is the deadline for the registration with the Data Controller ...
- [“The bad guys do not appoint Art. 27 representatives” but get fined!](https://prighter.com/resources/art27-fine) (2021-06-16): The High Court of England and Wales concluded in its recent decision Sanso Rondon v LexisNexis Risk Solutions UK Ltd [2021] EWHC 1427 (QB): ‘The appointment by ...
- [The Role of a Representative under EU and UK GDPR after Brexit](https://prighter.com/resources/after-brexit-article) (2021-03-09): Up until the end of the transition period the obligation to appoint a representative for privacy related matters was applicable only for non-EU companies. From ...
- [Brexit and UK Privacy Representation](https://prighter.com/resources/brexit) (2020-10-14): 1. Trade and Cooperation Agreement After the UK left the EU, the Withdrawal Agreement provided for a transition period for the negotiation of the future ...

## Digital Service Act (DSA) explained

# What is the Digital Service Act (DSA)?

### What is the main goal of the DSA?

The DSA is aimed against illegal and harmful content and goods as well as the spread of disinformation in the digital world. It shall ensure user safety, protect fundamental rights, and create a fair and open online platform environment.

### What type of law is the DSA?

The DSA is an EU regulation and therefore directly applicable in all EU Member States without any additional transposition into national law. The regulation was established on the Union level to harmonise diverging national law and to avoid regulatory fragmentation which adversely affects the single market.

### Which are the competent authorities under the DSA?

On a national level there is not one competent authority, but multiple authorities may be granted competences for subjects matters covered by the DSA under national law. To streamline and coordinate these authorities each Member State designates a Digital Services Coordinator as the single point of contact (for a list see [here](https://digital-strategy.ec.europa.eu/en/policies/dsa-dscs)).

On an EU level the European Commission as well as the European Board for Digital Services have a broad set of competences under the DSA which range from issuing implementation guidelines to supervisory functions.

### What is the broader context of the DSA?

The DSA together with the Digital Markets Act (DMA) forms part of the Digital Services Act package ([learn more](https://digital-strategy.ec.europa.eu/en/policies/digital-services-act-package)) which again is embedded in the Digital Agenda for Europe ([learn more](https://www.europarl.europa.eu/factsheets/en/sheet/64/digital-agenda-for-europe)).

# What is the scope of the DSA?

### When does the DSA apply?

The DSA applies to online intermediary services with additional rules for hosting services, online platforms and very large online platforms and search engines (VLOPs and VLOSEs) when offering intermediary services, irrespective of where the providers have their place of establishment.

### Does the DSA apply to non-EU companies?

The DSA applies irrespective of where the providers have their place of establishment. This means that also non-EU providers are caught by the extra-territorial scope of the DSA when offering intermediary services to business users, consumers and other users (recipients of the service).

### What constitutes "offering intermediary services"?

To qualify as an "offering", an intermediary service needs to be accessible by EU recipients and needs to have a substantial connection to the EU. Besides an establishment a substantial connection results from specific factual criteria such as:

- a significant number of recipients of the service in the EU;
- the targeting of activities towards the EU.

### What is a significant number of recipients of the service?

Whether the number of recipients in one or more Member States is significant depends on the relation to the whole population.

### What is "targeting of activities"?

To determine, if a provider is targeting its activities towards recipients in the EU, all circumstances are relevant. Especially the use of a language or a currency generally or the possibility of ordering products or services, or the use of a relevant top-level domain indicate the targeting of recipients. Furthermore, the availability of an application in the relevant national application store, local advertising or advertising in a language used in that Member State, or the handling of customer relations in such language are factors which may result in a targeting. In contrast, mere technical accessibility of a website from the Union cannot, on that ground alone, be considered as establishing a substantial connection to the Union.

# Which type of organisations need to comply with the DSA?

### What are Intermediary Services?

Regardless of any additional classification under another type of business regulated by the DSA Intermediary Services include “Mere Conduit” Services (e.g. Internet Service Provider „ISP“), "Caching” Services (e.g. Content Delivery Networks "CDNs"), “Hosting” Services (e.g. cloud computing, web hosting, paid referencing services or services enabling sharing information and content online, including file storage and sharing.)

### What are Hosting Services?

Hosting Services involve the storage of information provided by users (e.g. cloud computing, web hosting, paid referencing services or services enabling sharing information and content online, including file storage and sharing.)

### What are Online Platforms?

Online Platforms bring together sellers and consumers. (e.g. online marketplaces, app stores, collaborative economy platforms and social media platforms).

### What are very large online platforms and search engines?

Online platforms and search engines reaching more than 10% of 450 million consumers in Europe are classified as very large. Because of the particular risks associated with the dissemination of illegal content and societal harms, specific rules apply for VLOPs and VLOSEs.

# What is the role of the legal representative under Art 13 DSA?

### What are the tasks of the legal representative?

First and foremost the legal representative shall facilitate the communication with competent national authorities, the European Commission as well as the European Board for Digital Services. The legal representative can also act as the point of contact for recipients of the service and trusted flaggers. For operational purposes the legal representative can also act as the electronic point of contact which again facilitates the communication with the various stakeholders.

### Is the legal representative liable?

The obligation to appoint a legal representative should allow for the effective oversight and, where necessary, enforcement of the DSA. This is the reason that the legal representative may be held liable for non-compliance with obligations under the DSA, without affecting the liability and legal actions that could be initiated against the provider of intermediary services.

### What are the quality criteria for a legal representative?

Providers of intermediary services should ensure that the designated legal representative has the necessary powers and resources to cooperate with the relevant authorities. This also means that the legal representative needs to have sufficient qualifications and experience to handle proceeding with national and European authorities.

## Sitemap

- Site map (Markdown): https://prighter.com/sitemap.md
- LLMs index: https://prighter.com/llms.txt