De-Risking Social Media Monetization: Rating Platforms’ Coverage of Monetisation-Related Risks

 
 

De-Risking Social Media Monetisation:
Rating Platforms’ Coverage of Monetisation-Related Risks (YEAR 3 DSA Risk Assessment Reports)

Published: March 18, 2026
 
 
Very Large Online Platforms (VLOPs) have now released their Year 3 Risk Assessment reports under the EU Digital Services Act (DSA).
As with previous assessments, social media platforms did not adequately assess the risks stemming from the design, functioning and use of their monetisation services.
This is despite having launched (or retired) multiple monetisation features and mitigation measures over the reporting period.
 
In our latest report, which we submitted to the Board of Digital Services’ consultation, we set out to assess and rate platforms’ existing coverage of monetisation-related risks.
 

METHODOLOGY

 
We reviewed the reports of YouTube, Facebook, Instagram, TikTok, Snapchat, X and LinkedIn as well as public disclosures related to their monetisation services, and rated their latest risk assessment report along five key criteria:
dot Monetisation features - description of existing (and new) monetization features.
dot Risk: Incentive - assessment of the risk of monetisation services offering financial incentives inciting harmful content and behavior.
dot Risk: payment - assessment of the risk of monetisation services financing harmful actors, behavior and content.
dot Risk: restriction - assessment of the risk of monetary restrictions negatively impacting on systemic risks.
dot Mitigation measures - discussion of mitigation measures and their effectiveness.
 

RATINGS

 
Our analysis revealed major shortcomings with all of the platforms’ risk assessment reports, when it comes to monetisation.
Our overall monetisation ratings ranged from a minimum of 1 out of 20 (LinkedIn) to a maximum of 7 out of 20 (X).
notion image
 
 

RECOMMENDATIONS

 
Platforms have to conduct risk assessments at least annually under the DSA, as well as whenever new features are introduced that are likely to have a critical impact on systemic risks in the EU.
As platforms set out to work on their 2025-2026 DSA Risk Assessment reports, we urge them to :
dot Identify, assess and disclose (!) all relevant risks associated with their monetisation services.
dot Address all risks identified in relation to newly introduced monetisation features.
dot Adopt and disclose (!) mitigation measures to all identified risks.  
dot Release sufficient data and information about monetisation terms, policies and enforcement to allow third parties to assess the effectiveness of mitigation measures.