The European Commission has accepted a remedial action plan from X to address violations of the European Union's Digital Services Act, marking a significant development in the bloc's aggressive stance toward technology platform regulation. The agreement comes after the Commission levied a financial penalty against the Elon Musk-owned social media giant in December 2025 for multiple compliance failures, making it the inaugural enforcement action under the groundbreaking DSA framework that has reshaped how the EU regulates online content and digital transparency.
The original December fine targeted three core areas of non-compliance. First, X had breached transparency obligations by failing to adequately disclose how its algorithms and systems functioned. Second, the platform was criticised for what the Commission characterised as deceptive design practices surrounding its "verified" blue checkmark feature, which the company had used to designate supposedly legitimised accounts in a manner the regulator deemed misleading to users. Third and most significantly for the broader regulatory landscape, X had refused to grant researchers adequate access to public data on its platform, undermining the EU's commitment to enabling independent scrutiny of how major digital platforms operate.
Under the agreed compliance measures, X has committed to substantially broadening researcher access to its systems and data repositories. The platform will now provide external academics and civil society organisations with meaningful ability to study its operations, including detailed information about advertising content and how promotional material spreads across the network. This represents a meaningful victory for European regulators who have made researcher access a cornerstone of DSA enforcement, viewing independent academic scrutiny as essential to ensuring digital platforms remain accountable to public interest considerations rather than purely commercial imperatives.
Thomas Regnier, the European Commission's spokesperson on digital affairs, characterised the agreement as "an important step in the right direction," reflecting the Commission's position that X has demonstrated willingness to reform its practices. Regnier further emphasised that the approved measures would furnish researchers, civil society groups, and ordinary citizens with substantially improved transparency regarding X's operational systems and the tangible impacts these systems exert on user behaviour and information exposure. The framing suggests the Commission views this settlement as validating its regulatory approach rather than representing capitulation.
Implementation carries concrete deadlines and oversight mechanisms. X has been granted six months to operationalise all agreed measures, after which compliance will be subject to external and independent auditing by a third party. This institutional arrangement reflects Brussels' determination to move beyond accepting corporate assurances and instead embed verification mechanisms directly into settlement agreements. For Malaysian and Southeast Asian observers, the precedent indicates how future regional digital regulation frameworks might incorporate ongoing compliance monitoring and independent verification as standard features.
Crucially, the Commission's acceptance of X's remedial plan does not extinguish the company's broader legal challenge to the December penalty itself. X filed an appeal against the fine in February, and that proceeding continues independently of this compliance arrangement. This distinction matters because it allows X to simultaneously work toward regulatory compliance while contesting whether the original penalty was legally justified—a posture that underscores the parallel tracks of digital regulation occurring simultaneously across different institutional venues within the EU system.
The agreement unfolds against a backdrop of intensifying transatlantic friction over digital regulation. The United States technology sector and the Trump administration have mounted increasingly vocal criticism of EU regulatory efforts, framing them as protectionist measures that unfairly target American companies while advancing censorship objectives. President Donald Trump himself characterised the X fine as an act of censorship, adopting a rhetorical frame popular within American technology policy circles that equates transparency requirements and content moderation oversight with restrictions on free expression.
This political temperature rose further in March when the US State Department announced sanctions against five individuals, including Thierry Breton, the former European Commission official who had spearheaded much of the DSA's development and initial enforcement. The sanctions represented an extraordinary escalation in the regulatory dispute, transforming what would traditionally be viewed as technical compliance matters into a flashpoint in broader US-EU relations. For Southeast Asian policymakers developing their own digital governance frameworks, the episode illustrates how easily regulatory disagreements can metastasise into diplomatic confrontations when powerful nations view the underlying policy choices as touching core interests.
Beyond the immediate compliance settlement, the European Commission's investigation into X remains incomplete. The probe initiated in 2023 continues examining various aspects of the platform's operations, potentially presaging additional enforcement actions. More recently, the Commission opened a fresh investigation at the beginning of the year focusing on X's artificial intelligence chatbot Grok, specifically examining the tool's capacity to generate sexually explicit deepfake imagery depicting women and minors. This emerging investigation highlights how regulatory focus has begun shifting toward AI-generated content risks, an area where the EU is attempting to establish precedent ahead of broader artificial intelligence regulation through the forthcoming AI Act.
For Malaysia and other ASEAN nations, the X enforcement saga carries several instructive implications. The DSA demonstrates how comprehensive digital regulation can be operationalised through multiple enforcement mechanisms and ongoing monitoring, not merely through one-time penalties. The emphasis on researcher access and algorithmic transparency reflects a model that prioritises structural accountability over ad-hoc content moderation interventions. Additionally, the US response signals that major technology companies and their home governments will vigorously contest regulatory frameworks that they perceive as disadvantaging their interests, suggesting that Southeast Asian regulators should anticipate similar resistance when implementing stricter digital governance standards.
