Digital Services Act researcher access is becoming the EU’s first hard test of whether Big Tech transparency rights mean anything once platforms still control the data pipe. Researchers can point to a legal pathway. TikTok, X, and Meta can still decide whether applications are complete, secure, narrow enough, or valid at all, according to Wired.
That gap matters because the disputed data isn’t academic trivia. It can show how political content spreads, how recommender systems amplify certain accounts, how coordinated networks behave, and whether platforms’ public explanations match what their systems actually did.
Europe gave researchers a key to Big Tech’s black box, but platforms still hold the door
The sharpest example comes from Romania’s 2024 presidential race. In the final weeks before the vote, TikTok accounts that had spent years posting about manicures or fashion suddenly began promoting Calin Georgescu, a little-known politician whose posts pushed hard-line immigration views and anti-Semitic tropes. Those posts were viewed 120 million times before the vote. Georgescu, previously polling in the single digits, won the first round with 23 percent.
At Maastricht University, Adriana Iamnitchi wanted to study how pro-Georgescu content was monetized through hidden influencer marketing and livestreamed political content. Her team applied for access to TikTok’s API under the Digital Services Act, then got denied. TikTok said the researchers had not proved they were established researchers, had not explained commercial interests, and had not met security requirements, Iamnitchi wrote in a blog post cited by Wired.
“When you need data to investigate that impact, and that data is privately held, it can become practically impossible to research this space.”
XOOMAR analysis: this is the core fight. The EU created a transparency right, but the platforms being scrutinized still operate the intake desk. If they can slow applications, define eligibility narrowly, or deliver partial data, they can shape the evidence base before any outside paper is written.
Digital Services Act researcher access depends on platform-controlled gates
The Digital Services Act lets vetted researchers at credible institutions request platform data when their work studies systemic risks, including illegal content, threats to fundamental rights, financial scams, and recommender systems. The intent is clear: independent experts should not need leaks, whistleblowers, or platform-approved dashboards to investigate public risks.
The implementation is messier. Researchers told Wired they face inconsistent application forms, demanding security requirements, daily API limits, unclear standards for systemic risk, and data that may be hard to reproduce. Iamnitchi said some forms require data storage on infrastructure that cannot be compromised, such as a machine physically disconnected from the internet, which many universities lack.
Platforms have a real counterpoint. User privacy matters. Security matters. Meta says the Meta Content Library and API include “robust privacy protections” and cover Facebook, Instagram, WhatsApp Channels, and Threads. TikTok says its research tools comply with the DSA and that it “would welcome further public guidance.”
The counterpoint doesn’t erase the structural problem. A privacy rule can protect users. It can also become a veto point. The distinction depends on whether researchers get timely, usable, reproducible data, not just a formal application portal.
The numbers show a transparency system still stuck in beta
The best available numbers show uneven access, not a settled regime.
| Metric or claim | Source detail |
|---|---|
| Tracked DSA applications | 46 applications tracked by DSA40 Collaboratory |
| Approved applications | 20 approved |
| Rejected applications | 14 rejected |
| TikTok approval pattern | 11 of 13 tracked applications approved |
| X rejection pattern | 11 of 23 tracked applications rejected |
| TikTok’s own access claim | More than 1,500 research teams given access to its tools |
| TikTok EU applications | 130 applications approved in the EU in the second half of last year |
| TikTok API quota | 1,000 API requests per day, up to 100,000 video and comment records or 2 million follower records |
The table cuts two ways. TikTok’s figures suggest platforms can grant access at scale when they choose to. The DSA40 figures show researchers still encounter rejection, variation, and uncertainty. L. K. Seiling, coordinator of the DSA40 Collaboratory, told Wired: “Data access as it’s set up right now tries to disincentivize researchers.”
Scale also changes the practical stakes. A single rejected request can delay election research past the election. A limited API can make network analysis impossible. A dataset that can’t be reproduced weakens peer review, which Iamnitchi called a “basic requirement of science.”
Researchers, regulators, platforms, and users want different things from the same dataset
Researchers want granular data because platform harms often live in connections, timing, and amplification patterns. Scraping public pages into spreadsheets can capture fragments, but Duncan Allen of Democracy Reporting International said it is “not very comprehensive.” It cannot capture a complete follower list, which makes coordinated disinformation networks harder to map.
Regulators need outside researchers because platform oversight cannot rely only on company disclosures. The European Commission has already said in another DSA investigation that Meta and TikTok “may have put in place burdensome procedures and tools for researchers to request access to public data,” leaving researchers with partial or unreliable data.
Users sit in the hardest position. They benefit if researchers can expose manipulation, scams, illegal content, and broken recommender systems. They also lose if personal data, viewing behavior, or social graphs are mishandled. That tension is familiar beyond social media research, as XOOMAR has covered in Nearly 5 Million Brace for Origin Energy Data Breach. Data access without guardrails is reckless. Data denial dressed up as privacy is accountability theater.
From Cambridge Analytica to locked APIs, the research window has narrowed
The retreat from open access did not begin with the DSA. Researchers from the University of Bath warned in 2023 that API restrictions by X, TikTok, and Reddit were making research into human behavior harder, including work on polarization, misinformation, and voting patterns. They also noted that the Cambridge Analytica scandal pushed platforms to tighten third-party access and give users more control over app permissions.
That history matters because platforms can argue, credibly, that unrestricted data access created abuse risks. But the pendulum swung hard. Meta shut down CrowdTangle and replaced it with content libraries. X paywalled API data, forcing academics to pay “hundreds of dollars a month,” Allen said. TikTok caps how much any researcher account can pull each day.
The DSA is Europe’s attempt to rebuild a public-interest research channel after years of platform pullback. The question is whether it can do that without recreating the privacy failures that gave platforms their strongest reason to close the door.
Real platform data could turn online safety debates into evidence fights
If Digital Services Act researcher access works, public debate over platform harm gets less speculative. Journalists, policymakers, civil society groups, and academics could test how content spreads, which accounts coordinate, whether moderation is consistent, and how recommender systems shape visibility.
That would affect future fights over election integrity, ad transparency, scam enforcement, and recommendation audits. It would also give regulators better material than platform-written reports. XOOMAR has tracked the political pressure around European tech rules in Big Tech Fight Pulls Trump Into EU Digital Rules Clash, and researcher access is one of the places where that pressure becomes concrete.
If access stays weak, the public remains dependent on leaks, whistleblowers, anecdotal screenshots, and company-approved transparency products. That is not enough for systems that can move political narratives at national scale.
Enforcement, not legal theory, will decide whether the DSA has teeth
The next fight is already underway. DRI and the Society for Civil Rights applied for access to X’s API in April 2024 to study political discourse before Germany’s federal election. X rejected the request in November. DRI sued in February 2025, and the court ruled X should have granted access. DRI later fought another case over research ahead of Hungary’s election and won on appeal after a jurisdiction dispute.
The Commission has also moved against X. In December 2025, it fined X €120 million ($137 million) partly for creating “unnecessary barriers” to researcher access that “effectively undermin[e] research into several risks in the European Union.” X appealed on February 20, 2026, calling the investigation “incomplete and superficial” and alleging breaches of due process. The Commission has since accepted X’s action plan to fix researcher screening, provide data free of charge, cut processing times, and lift scraping restrictions. X has six months to put those changes in place.
Allen called the plan “a step in the right direction,” but remains skeptical about implementation. That is the right skepticism. The test is not whether platforms publish better forms. It is whether researchers can obtain timely, machine-readable, reproducible data that lets them draw independent conclusions. If Europe cannot force that under the DSA, the lesson for the rest of the world will be blunt: transparency rights are easy to write and hard to enforce.
Impact Analysis
- The DSA’s transparency promise depends on whether researchers can actually access platform data.
- Private control over APIs can limit scrutiny of political influence, recommender systems, and coordinated campaigns.
- The Romania case shows how fast online amplification can intersect with real election outcomes.
Originally published on XOOMAR. For more news and analysis, visit XOOMAR.
Top comments (0)