The €120M Fine That Broke the “It'll Never Be Enforced” Myth
On 19 December 2025, the European Commission handed X a €120 million fine — the first non-compliance decision issued under the DSA. The decision cited three distinct failures. First, X's blue checkmark, previously a verification signal, was re-sold as a paid status symbol that the Commission called “deceptive” because it implied verification that had not occurred. Second, X's public advertising repository failed the DSA's transparency and searchability tests, meaning researchers and civil society could not audit political ads or coordinated campaigns. Third, X's terms of service restricted eligible researchers from accessing public platform data, including by scraping — a direct conflict with Article 40 of the DSA.
Three things matter for everyone else. The fine was percentage-capped (DSA maxes out at 6% of global turnover), so €120M is the floor, not the ceiling. The Commission explicitly framed this as a template decision. And the enforcement reasoning focused on documented, auditable processes — not vibes, not intent. If your platform or campaign cannot show a paper trail, you are exposed.
Meta and TikTok: Preliminary Findings Set Up the Next Big Fines
In October 2025, the Commission issued preliminary findings that Meta (across Facebook and Instagram) and TikTok were in breach of their DSA obligation to give vetted researchers access to public data. The Commission also preliminarily found Meta in breach for failing to provide simple mechanisms for users to flag illegal content and to challenge moderation decisions — the core user-facing protections the DSA exists to guarantee.
On 6 February 2026, the Commission added a separate preliminary finding: TikTok's addictive design features may themselves breach the DSA's systemic-risk obligations, particularly with respect to minors. That is a significant escalation. It takes DSA enforcement beyond transparency paperwork and into product design. Recommender system tuning, infinite scroll, push notification timing, default autoplay — all now sit inside the regulatory envelope.
If either company's preliminary findings are upheld, the Commission can impose fines of up to 6% of global annual turnover. For Meta, that ceiling is multiples of the €120M X decision.
Grok and the DSA's First Formal AI Chatbot Case
In January 2026, the Commission opened formal DSA proceedings against xAI's Grok, the AI chatbot integrated into X. The stated focus is whether X implemented adequate risk mitigation for the creation and distribution of illegal content generated by Grok, including non-consensual intimate imagery. This is the first time the Commission has treated a generative AI feature embedded inside a VLOP as a DSA systemic risk in its own right.
The implication cuts far beyond X. Any platform operating in the EU that embeds a generative AI feature — chat assistants, image generators, product search co-pilots — now has to treat that feature as a first-class systemic-risk surface, with documented mitigations, red-teaming records, and incident reporting. “It was the model's fault” is not a defence under the DSA.
How the AI Act and the DSA Are Now Converging
Between August and December 2026, the EU's digital rulebook enters its hardest phase. The AI Act becomes largely applicable on 2 August 2026, the AI Office gains full powers over general-purpose AI models, and new transparency duties land for AI-generated content, including mandatory labelling of deepfakes and AI-generated text on matters of public interest. The Commission's Code of Practice on labelling AI-generated content is due in Q2 2026.
For VLOPs, the two regimes stack. A breach of AI Act transparency rules can, in parallel, constitute a DSA systemic risk — because AI-generated disinformation, manipulated media, and unlabelled synthetic content are exactly the harms DSA Article 34 requires platforms to assess and mitigate. Compliance teams that have been running these as two separate programmes are about to discover they are one programme with two sets of fines.
What This Means for Marketers and Brand Operators
The knee-jerk reading is “this is a platform problem.” It is not. DSA enforcement is reshaping the conditions under which your content, your ads, and your AI features reach European audiences. Four operational shifts are now non-optional for any team running marketing through Anjin or any other production stack:
- Ad transparency has moved from “nice paperwork” to a discovery surface. The DSA ad repositories that are being audited are the same ones researchers, journalists and competitors scrape. Clean, complete ad metadata is becoming a reputational asset. Sloppy, incomplete submissions are becoming evidence.
- Labelling AI-generated content is table stakes before August 2026. If your team generates image, video or copy assets with AI — and increasingly everyone does — your internal workflow needs a “this was AI-assisted” flag captured at creation, not reverse-engineered later.
- Documented moderation beats good moderation that is not documented. The X decision did not turn on whether moderation was “good enough” — it turned on whether X could show its work. Auditors do not read minds. They read logs.
- Trust is quantifiable and now mechanically linked to reach. Google's SGE and generative search systems increasingly privilege sources with visible provenance, author pages, structured data and editorial process documentation. The same artefacts that satisfy DSA auditors — sources, bylines, change logs — are the E-E-A-T artefacts that get you cited by AI Overviews. You only have to build them once.
The regulatory upside is real. The brands that land inside the EU in 2026 as “obviously compliant, obviously well-governed, obviously human-accountable” will out-compete the ones still arguing with Brussels.
Anjin: The Marketing Operating System for a Regulated, AI-First Europe
Anjin is the Marketing Operating System. It treats marketing as a connected system — content, SEO, AI assets, distribution, campaigns, reporting — run from one surface, with one audit trail. That architecture is not an aesthetic choice. It is the only architecture that scales in an environment where what you publish, how you generate it, and how you moderate it are all in the regulatory frame.
Inside Anjin, every piece of content carries its own provenance: who briefed it, which model touched it, which sources it cites, when it was updated. Ad metadata is structured at the point of production, not patched in later. AI-assisted assets are flagged by default. Moderation and revision history are stored, not scattered across Slack threads and deleted Google Docs. When the next DSA auditor (or the next AI Overview) asks who made this, with what, and on what evidence — the answer is one click away.
That is what “Marketing OS” means in 2026: the compliance-ready version of the marketing function, without you having to hire a compliance team to run it.
The £888 Lifetime License — Offer Closing Soon
Lifetime access to Anjin for a one-time payment of £888. Not a subscription. Not a seat. Not a trial. One payment, unlimited use, for as long as Anjin exists.
The average marketing team spends £888 in about three working days on tooling, freelancers and coordination software. You're buying the platform that replaces most of it — once.
This price will not be offered again once we close our early-access cohort.
Claim your £888 Anjin lifetime license →Founders, agency owners and in-house marketers — this is how you run marketing at AI speed without the team, the burn, or another year of waiting.
Sources: European Commission, Commission press corner, IAPP, CNBC, Creati.ai, MediaLaws, AI Act, TechPolicy.Press, European Business Magazine
