What the DSA actually requires under Article 34
The Digital Services Act (Regulation EU 2022/2065) places a specific duty on Very Large Online Platforms (VLOPs): services with more than 45 million monthly EU users. Under Article 34, every VLOP must perform a systemic risk assessment covering, among other risks, the dissemination of illegal content and the sale of illegal products.
The obligation has three legs: identify the risks, analyse their nature and scale, and assess how the design and operation of the service amplifies them. Article 35 then requires proportionate mitigation. Article 74 sets the ceiling for fines at 6% of global annual turnover.
The three legs of Article 34
01
Identify
Map illegal-product categories the platform could expose users to.
02
Analyse
Measure volumes, repeat sellers, and evasion patterns at platform scale.
03
Assess
Gauge consumer exposure and the platform’s contribution to it.
What “illegal items” means in concrete terms
The Commission’s wording, “very likely to encounter illegal items”, is unusually direct. It refers to product categories that breach EU horizontal product law: cosmetics with banned CMR substances, toys and electronics without valid CE marking, jewellery and accessories above REACH limits for lead, cadmium and phthalates. These are not edge cases; they are the categories enforcement bodies have flagged repeatedly in market surveillance reports since 2023.
CMR
Cosmetics
Carcinogenic, mutagenic and reprotoxic substances banned under Annex II of Regulation EC 1223/2009.
CE
Toys & electronics
Missing or counterfeit CE marking under Directive 2009/48/EC and RED 2014/53/EU.
REACH
Jewellery & accessories
Lead, cadmium, phthalates above limits in Annex XVII of Regulation EC 1907/2006.
The DSA does not replace any of these vertical product laws. It layers on top of them. A platform that hosts sellers exposing EU consumers to products breaching REACH, CE or the Cosmetics Regulation must, under Article 34, account for that risk.
Temu is not the first case, and will not be the last
Since 2024, the Commission has opened formal DSA proceedings against every high-volume cross-border marketplace operating in the EU. Today’s fine is the first to convert a proceeding into a penalty on the specific question of illegal products. The pattern is now visible.
Apr 2024
AliExpress: formal proceedings opened (illegal products, advertising transparency).
Oct 2024
Temu: formal proceedings opened by the Commission.
Feb 2025
Shein: designated as VLOP, brought under the strengthened DSA regime.
Jul 2025
Shein: formal proceedings opened (non-compliant products, dark patterns).
28 May 2026
Temu, first DSA fine targeting illegal products: €200 million.
What the fine signals to European brands
For brands that compete with, or sell on, cross-border marketplaces, three things shift after 28 May 2026.
1. The marketplace is no longer a compliance shield
Listing on a third-party platform does not transfer regulatory exposure away from the manufacturer or importer. EU market surveillance authorities continue to trace illegal products back to the economic operator, while the DSA now adds platform-level accountability on top. Two layers of enforcement, not a substitution.
2. The price asymmetry created by non-compliance is closing
Brands that document substances, test against REACH limits, validate CE files and version their packaging copy per market carry a cost that non-compliant low-price sellers avoid. The Commission’s decision turns part of that avoided cost into a fine. Over time, the price gap between a compliant and a non-compliant SKU should narrow: not because compliance gets cheaper, but because non-compliance gets priced.
3. Product compliance becomes evidence, not paperwork
The Commission did not fine Temu for one product. It fined Temu for the absence of an evidenced process. The defensible position is no longer “we checked at launch”: it is a continuously refreshed record of which regulation applies to which SKU, where it applies, when it changed, and what mitigation is in place. That record is what audits, market surveillance authorities and now platform regulators will ask to see.
Two ways to read the same fine
The narrow read
€200M is a one-off sanction against a non-EU marketplace with a uniquely permissive seller onboarding model. Business as usual elsewhere.
The structural read
The DSA has moved from designation phase to enforcement phase. Every platform, and every brand selling through one, now has to prove its compliance process, not just its certificates.
The new baseline for product compliance in 2026
Identify, analyse, assess: the three verbs the Commission used today against Temu are the same three verbs every EU brand will be expected to apply to its own catalogue. Across 27 member states, 50,000+ active regulations and 27,000+ enforcement authorities, doing this by hand is no longer a question of effort: it is a question of structure. The fine is not the warning. The wording is.



