EU Slams X with Landmark €120 Million Fine for Digital Services Act Breaches

Brussels, Belgium – The European Commission today levied a significant €120 million ($140 million) fine against Elon Musk's social media platform, X, marking the first enforcement action under the bloc's sweeping Digital Services Act (DSA). The penalty, announced on Friday, December 5, 2025, follows an extensive two-year investigation that found X in violation of key transparency obligations designed to protect users and foster a safer online environment within the European Union. This decisive move underscores the EU's unwavering commitment to holding very large online platforms accountable for their operations and setting a precedent for digital governance worldwide.

The Violations: Deceptive Design, Lack of Transparency, and Restricted Access

The European Commission identified three core areas where X, formerly known as Twitter, failed to comply with the DSA's stringent requirements. At the forefront of the breaches is the platform's "deceptive design" of its blue checkmark system. Following Elon Musk's acquisition of the platform, the blue checkmark transitioned from a verified badge of authenticity to a paid subscription feature that any user can obtain without meaningful identity verification. EU officials concluded that this system misleads users, making it difficult to discern the authenticity of accounts and content, thereby exposing them to potential scams, impersonation frauds, and manipulation by malicious actors. The Commission allocated €45 million of the total fine specifically to this violation.

A second significant breach involved X's failure to maintain a transparent and accessible advertising repository. The DSA mandates that very large online platforms provide robust ad transparency tools, enabling researchers and civil society to scrutinize online advertising for disinformation campaigns, hybrid threats, and fraudulent content. The Commission found X's repository to be deficient, incorporating design features and access barriers that undermined its purpose, including lacking critical information such as the content and topic of advertisements or the legal entity paying for them. This non-compliance resulted in a €35 million portion of the fine.

Finally, X was penalized for obstructing researchers' access to public data on the platform. The DSA requires platforms to provide researchers with tools to access public data for independent scrutiny of systemic risks within the EU. The investigation revealed that X's terms of service prohibited eligible researchers from independently accessing public data, such as through scraping, and imposed unnecessary barriers or disproportionately high fees for API access. This failure to facilitate crucial independent research accounted for €40 million of the fine.

The Digital Services Act: A New Era of Online Accountability

The Digital Services Act, enacted in 2022, is a cornerstone of the European Union's strategy to regulate the digital space. It aims to create a safer, more transparent, and accountable online environment by establishing a comprehensive set of rules for digital services, especially for very large online platforms (VLOPs) and very large online search engines (VLOSes). The DSA places significant responsibilities on these platforms, which reach a substantial portion of the EU population, to mitigate systemic risks, combat illegal content, and ensure fundamental rights online. Penalties for non-compliance under the DSA can be substantial, reaching up to 6% of a company's global annual revenue.

The European Commission opened formal proceedings against X in December 2023, following initial investigations that began nearly two years prior. Preliminary findings of non-compliance were issued in July 2024, signaling the Commission's intent to enforce the new regulations vigorously. European Digital Commissioner Henna Virkkunen emphasized that the €120 million fine was "proportionate" to the violations, taking into account their nature, gravity, and duration, as well as the number of affected EU users. She underscored that the DSA's goal is to ensure enforcement of digital legislation, not censorship.

X's Stance and Broader Implications

Prior to today's announcement, X's Global Government Affairs team had indicated that potential enforcement actions by the EU would represent an "unprecedented act of political censorship and an attack on free speech." Elon Musk himself has previously criticized European regulations, characterizing them as censorship. The company stated its intent to use every option at its disposal to defend its business and protect freedom of speech in Europe.

The fine, while substantial, is considered moderate compared to the maximum penalties possible under the DSA, and some analysts suggest it is "lower-than-expected." For context, the Commission also noted that TikTok, another large online platform under DSA scrutiny, managed to avoid a fine by committing to redesign its ad library.

This initial DSA enforcement against X sends a strong message to all digital platforms operating within the EU. It signals that the bloc is serious about its new regulatory framework and will actively pursue compliance. X has been given 60 working days to detail how it will rectify the deceptive blue checkmark system and 90 working days to submit a comprehensive action plan for improving its ad repository and researcher data access. Failure to comply with these demands could lead to further periodic penalties. Moreover, this is not the end of the EU's scrutiny of X, as other investigations into the platform's risk-mitigation measures, notice-and-action mechanisms, and efforts to combat information manipulation remain ongoing.

The decision also carries potential geopolitical weight, risking heightened tensions between Brussels and Washington. The administration of former U.S. President Donald Trump has historically criticized EU digital regulations, viewing them as targeting American companies and hindering free speech. Despite this, EU officials maintain that their laws are nationality-agnostic and are designed to defend digital and democratic standards.

Conclusion: A Defining Moment for Digital Regulation

The €120 million fine imposed on X represents a watershed moment in the global landscape of digital regulation. It firmly establishes the European Union's Digital Services Act as a powerful tool for ensuring accountability and transparency from the world's most influential online platforms. The Commission's comprehensive investigation and subsequent penalty underscore a clear message: adherence to user protection, data access for researchers, and advertising transparency are not optional, but fundamental obligations for companies operating within the EU's digital market. As X navigates the path to compliance and faces ongoing investigations, the decision serves as a definitive statement that the era of self-regulation for tech giants is rapidly giving way to a new age of robust oversight.