Access to platform data for vetted researchers under the DSA

From 29 October 2025, researchers are able to file applications for vetted status with the Netherlands Authority for Consumers and Markets () in order to gain access to non-public data from very large online platforms and search engines. Non-public data includes for example data about online behavioral patterns or about the functioning of algorithms. Researchers that need this type of data for a specific research project must file an application for vetted status first. They can do so on a dedicated website: the DSA data access portal.

While researchers were previously dependent on the voluntary cooperation of very large online platforms, these platforms are now required under the Digital Services Act (DSA) to make certain data available. This obligation applies to the major platforms and search engines, the so-called Very Large Online Platforms (VLOPs) or Very Large Online Search Engines (VLOSEs) . Examples include Facebook, TikTok, and Google. With this data, researchers are able to conduct research into systemic risks on these VLOPs and VLOSEs. Systemic risks are risks that can inflict serious harm to society or the economy at large, for example, the impact of recommendation systems on the mental health of users, or the dissemination of illegal content. This type of research is important, because it helps increase transparency regarding the social impact of these platforms, and regarding what measures are effective for mitigating such systemic risks.

Criteria for the status of vetted researcher

Before researchers can gain access to the data for their research, they first need to apply for the status of 'vetted researcher'. This status is granted by the Digital Services Coordinator (DSC) of the country in which the VLOP or VLOSE into the researcher wishes to conduct research has been established. The DSC assesses whether the researcher's application meets the statutory criteria. For example, researchers must be affiliated with a university or any other academic institute, and they must be independent from any commercial interests. In addition, they must demonstrate that they handle the data in a secure and confidential manner. Also, the researchers must make the research results publicly available, free of charge. Only if the DSC finds that the researcher meets all the criteria, will it grant the status of 'vetted researcher', and will it request the VLOP or VLOSE to make the data available for the vetted researcher.

ACM is the DSC in the Netherlands. ACM therefore assesses the applications filed by researchers that request access to data from the VLOPs or VLOSEs that are established in the Netherlands. These are Snapchat, Booking.com, AliExpress, and Wikipedia. In addition, researchers in the Netherlands are able to file with ACM requests for access to data from VLOPs or VLOSEs that are established in other EU member states. In that case, ACM carries out an initial assessment, and forwards this with the application to the DSC in the other EU member state that is ultimately able to grant the vetted status to the researcher.

Procedure

Applications for the status of vetted researcher can be filed using the DSA data access portal: Home | DSA Data Access Portal . As soon as an application filed by a researcher has been approved, the DSC of the country in which the VLOP or VLOSE has been established will file a request for data access with that platform. Such a request will indicate what data must be made available as well as the conditions under which that access must be granted.

More information about data access by vetted researchers can be found on our website: Vetted researchers | ACM

See also