Points of Contact for DSA Service Recipients

Legal Framework

Article 11 of the Digital Services Act (DSA) governs the requirement for providers of intermediary services to establish a single point of contact for recipients of their services and for authorities. While the provided authoritative commentary focuses on the GDPR, the DSA's analogous requirement is a core operational obligation. The law mandates that providers designate a point of contact whose details are publicly available, easily accessible, and directly enable recipients and authorities to communicate rapidly and efficiently. This obligation is distinct from the legal representative requirement under Article 13 and applies to all providers, regardless of their place of establishment, if they offer services in the Union.

Practical Application

The point of contact is not merely a public email address. It must function as an effective channel for direct communication. According to the DSA's rationale and the principles synthesized from the commentary, this requires organizations to ensure the contact is monitored and capable of engaging substantively with communications. This includes receiving notices related to illegal content, orders from authorities, and inquiries from recipients. The requirement for "rapid" communication implies that automated or unmonitored mailboxes are insufficient; there must be a system to ensure timely acknowledgment and routing of communications. While specific DSA case law is still developing, the enforcement expectation is that this contact facilitates the practical application of other DSA obligations, such as notice-and-action procedures.

Key Considerations

• Operational Effectiveness: Designate a functional contact (e.g., a dedicated team email or ticketing system) with clear internal procedures for triaging and responding to incoming DSA-related communications from recipients and authorities. Ensure this information is published in the terms and conditions and in a dedicated, easily findable section of the website.
• Distinction from Legal Roles: Clearly separate this operational point of contact from the role of the legal representative required under Article 13 DSA for non-EU established providers. The point of contact is for day-to-day operational communications, while the legal representative is for formal legal service and enforcement.
• Record-Keeping: Maintain logs of communications received through this channel as part of demonstrating compliance with the DSA's accountability and transparency principles, particularly in relation to handling notices about illegal content.