Civil-society organisations researching online harms have several routes into Digital Services Act enforcement. The European Commission's latest roundtable, held with around 60 civil-society and research organisations on 23 September, confirms that systemic-risk research, platform reports, complaints and structured stakeholder submissions are all relevant inputs.
Choose the route that matches the evidence
Use a Digital Services Coordinator complaint when representing an affected user or documenting a suspected breach with a national connection. Use the Commission's stakeholder publication channel for research, monitoring reports and analysis that may support wider enforcement. Organisations with the necessary research capacity can also examine risk assessments, compliance audits and data obtained through DSA access provisions.
Prepare an evidence package regulators can use
Record the platform, feature and user group affected; the dates and geography of collection; the research method; sample limitations; screenshots or archived material where lawful; and the harm or DSA obligation being examined. Separate observed behaviour from participant testimony and editorial inference. State what cannot be concluded from the data.
Plan for data-access constraints
Before committing a project, test whether the available platform data, documentation and timeframes support reproducible analysis. Assign responsibility for data protection, secure storage and deletion. If access depends on a platform or formal researcher route, budget for delays and decide what useful work can continue with public data.
Track outcomes separately from dialogue
The roundtable covered risks involving minors, online marketplaces and AI, but it did not create a rule or announce an enforcement decision. Keep a separate log of submissions, regulator responses, formal investigations and published decisions. That prevents stakeholder participation from being mistaken for regulatory impact.
