Regulatory Enforcement Under the Digital Services Act
The European Commission (EC) has imposed a €200 million ($232 million) penalty on the Chinese-owned online marketplace Temu, concluding a formal investigation into the platform’s compliance with the European Union’s Digital Services Act (DSA). The decision, announced on May 28, 2026, stems from findings that Temu failed to diligently identify, analyze, and mitigate systemic risks associated with the sale of illegal products on its platform.
According to the Commission, the evidence gathered—including an independent “mystery shopping” exercise—revealed that consumers within the EU were highly likely to encounter non-compliant goods. Specifically, investigators identified a significant proportion of electronic chargers that failed basic safety protocols, as well as children’s toys that exceeded legal thresholds for chemical content or contained detachable components posing severe choking hazards.
Systemic Failures in Risk Assessment
The investigation, which began in October 2024, scrutinized Temu’s status as a “Very Large Online Platform” (VLOP). Under the DSA, such entities are mandated to conduct rigorous, platform-specific risk assessments. The EC determined that Temu’s 2024 risk assessment was inadequate, as it relied on generalized e-commerce industry data rather than evidence specific to its own operations, such as user reporting and independent safety testing.
Henna Virkkunen, the European Commission’s Executive Vice-President for Tech Sovereignty, Security, and Democracy, emphasized that risk assessments are not “box-ticking exercises.” She stated: “Temu’s risk assessment underestimates concrete risks, lacks specificity, is not grounded in solid evidence, and is not comprehensive. It leaves regulators, users, and the public in the dark about the true scale of potential harm.”
Legal Stakes and Future Obligations
This penalty represents only the second major fine issued under the DSA, following a €120 million fine levied against the social media platform X in December 2025. Temu, owned by PDD Holdings Inc., has rejected the findings, labeling the fine as “disproportionate.” A company spokesperson noted that while the firm respects the objectives of the DSA, it is currently reviewing the decision and considering available legal options.
Despite their disagreement, Temu is under a strict mandate to submit an action plan by August 28, 2026, detailing how it will address the identified safety and governance failures. The Commission will then have two months to evaluate the sufficiency of these measures. Failure to comply could trigger additional daily, weekly, or monthly penalty payments, further escalating the financial and operational stakes for the platform.
The Temu case underscores a shift in EU policy toward aggressive oversight of global marketplaces, moving beyond mere content moderation to the physical safety of consumer goods. By holding platforms legally accountable for the products listed by third-party sellers, the European Commission is establishing a new regulatory benchmark that challenges the traditional intermediary liability models. As the EU continues to refine the implementation of the DSA, the success of this enforcement action will likely depend on the effectiveness of the mandated remedial action plans and the Commission’s willingness to escalate penalties if compliance remains superficial.