Staatliche Schutzpflichten im Kontext der Vorratsdatenspeicherung

Nachdem das jüngste EuGH-Urteil zur Vorratsdatenspeicherung die rechtspolitische Debatte um das umstrittene sicherheitsbehördliche Instrument nochmals anfeuerte, streitet auch die deutsche Bundesregierung. In diese Debatte mischt sich nun auch der Kasseler Professor Mattias Fischer ein und argumentiert im Einspruch-Format der F.A.Z., nicht die Vorratsdatenspeicherung selbst, sondern deren Nichteinführung sei verfassungs- und primärrechtswidrig, da sie aufgrund staatlicher Schutzpflichten geboten sei. Fischers Beitrag ist ein weiterer Versuch, aufgrund einer diskutablen dogmatischen Konstruktion eine Engführung des legislativen Gestaltungsspielraumes zu bewirken.

Regulating influence, timidly

The DSA considers advertising and recommender systems as deserving of regulatory attention, and not immutable facets of an online world. But even as the regulation furthers current standards in disclosures around online advertising, it insulates advertising business models and consolidates platform efforts to sidestep the operative question that characterizes online advertising: how and why advertisements reach who they reach, in less abstract terms.

Now What

The question of the DSA's enforcement has already been getting considerable attention, with one of the main concerns being that the resources put forth by the European Commission are too humble when compared to the DSA’s far-reaching goals. More concerningly, the DSA leaves loopholes and grey areas in respect to native advertising and the influencer economy.

Remedying Overremoval

The DSA provides a whole set of notice and action mechanisms to address online harms. The codified mechanisms, together with detailed procedures, are foreseen for content that is illegal but also for content incompatible with platforms’ terms and conditions. But the DSA has also another goal, to ensure that the new rules respect fundamental human rights. While definitely a good step towards more effective protection of users’ rights, the true effect of the provided remedies will depend on their practical implementation. Some elements of the new regime may be a bold experiment the result of which is not fully predictable.

Contextualisation over Replication

The EU is notorious for using regulatory solutions like the DSA to dominate and pre-empt global digital standards. Often, the major conversations on the international impacts of EU laws have oscillated between capture and actually providing normative leadership on thorny aspects of digital regulation. African countries should develop their own content regulation rules by paying more attention to their contexts and consider aspects of the DSA only where they will improve such local rules.

Fundamental rights impact assessments in the DSA

The attention to fundamental rights in the new wave of EU digital regulation, confirmed in the Digital Services Act, is a significant step towards a more articulated and appropriate framework for protecting people in a context characterised by pervasive technologies that are often developed without adequate consideration of their impact on society. However, existing practices in human rights impact assessment show some limitations in being extended to the digital context.

Platform oversight

The Digital Services Act requires EU member states to name a “Digital Services Coordinator” (DSC) to coordinate national regulators involved in platform oversight. But the DSCs are more than just “coordinators,” as they have to fulfill specific oversight tasks themselves. That is why member states should resist the temptation to build a small-scale coordinator and instead build a strong DSC with skills in data analysis, community management and flexible case-based work. 

A Regulator Caught Between Conflicting Policy Objectives

The Digital Services Act has landed on an increased centralization of its enforcement powers in the hands of the European Commission. The rationale behind this centralized enforcement is understandable, particularly in light of the experience with GDPR enforcement. At the same time, it raises crucial questions about the future recurrence of such centralizaion in the Commission's hands, and the separation of powers more broadly.