DSA vs Terrorist Content Online Regulation

A DSA notice can tell a hosting provider that a user or trusted flagger believes content is illegal. A terrorist-content removal order is different: it is an authority order under a separate Regulation and needs a response workflow that can authenticate the order, verify the addressee and deadline, locate the exact content, remove it or disable access in all Member States, preserve the required material, notify the authority, and record what was done.

The TCO Regulation covers hosting services that store and disseminate user-provided material to the public at the content provider's request and have a substantial connection to the EU. It does not cover mere conduit or caching services, infrastructure layers that do not store the material, email or private messaging, or cloud infrastructure that is not used to make stored material public at the content provider's direct request. A social network, public video or image-sharing service, public file-sharing service, or public-facing cloud feature can be in scope; classify each service surface on its actual use.

One moderation queue is not enough. DSA notice-and-action records, statement-of-reasons templates, and complaint outcomes are useful evidence, but they do not prove that the service can receive and execute a terrorist-content removal order within the required clock.

For DSA moderation, evidence normally starts with service classification, terms-and-conditions rules, notice intake, moderation decision facts, statement-of-reasons delivery, internal complaint outcomes, transparency-report inputs, and any VLOP or VLOSE risk-assessment material.

For TCO, the minimum useful record is different: the removal order, authenticated receiving channel, authority details, receipt timestamp, exact URL or other locator, deadline calculation, removal or disabling action across Member States, response to the authority, preservation period, content-provider notification handling, complaint handling, and any cross-border scrutiny or court challenge.

Preserve removed terrorist content and related data needed for review, complaints, or terrorism investigations for six months. A competent authority or court may request a further specified period when relevant proceedings are still underway. If force majeure or a de facto impossibility prevents action, or the order has manifest errors or insufficient information, notify the issuing authority without undue delay using the Regulation's process; do not silently treat the order as an ordinary moderation ticket.

The DSA supervision model uses Digital Services Coordinators, the European Commission, and the European Board for Digital Services, with direct Commission supervision for designated VLOPs and VLOSEs. That points ownership toward legal, trust and safety, policy, product, compliance, transparency reporting, data governance, and risk teams.

The TCO workflow needs an incident-style owner as well as legal oversight. The receiving team must be able to authenticate the authority channel, act on the content, preserve required records, respond to complaints, and brief leadership without disrupting ordinary DSA user-notice and complaint operations.

Platforms and search engines with average monthly active recipients in the Union equal to or higher than 45 million can be designated as VLOPs or VLOSEs and then face additional DSA obligations, including systemic-risk assessment, mitigation, independent audit, advertising and recommender-system transparency, and researcher data-access duties.

Those duties can improve terrorist-content risk governance, especially where content moderation systems or recommender systems amplify illegal content. They still do not replace the separate TCO order-handling workflow: a VLOP risk file and a removal-order action log answer different questions.

TCO can also require a separate prevention workstream. When a competent authority establishes that a hosting provider is exposed to terrorist content, Article 5 requires the provider to take specific measures that are diligent, proportionate, non-discriminatory, and protective of fundamental rights. The provider chooses the measures, and the authority cannot impose a general monitoring obligation or require automated tools. If the provider took or was required to take TCO action during a calendar year, Article 7 requires a public transparency report before 1 March of the following year.

The TCO Regulation covers material that meets its definition of terrorist content, including material that incites or solicits terrorist offences, solicits participation in a terrorist group, provides instruction for terrorist offences, or threatens a terrorist offence under the stated conditions. The order must explain why the identified material qualifies and provide an exact URL plus any other information needed to locate it.

Material disseminated to the public for educational, journalistic, artistic, research, or terrorism-prevention purposes is not terrorist content under the Regulation when that is its true purpose. Polemic or controversial views in public debate are not enough on their own. Preserve the authority's classification and the content context instead of asking moderators to infer terrorist status from a topic, speaker, or keyword.