SUMMARY
- A new investigation identifies €56.76 million in contracts and grants linked to implementation of the EU Digital Services Act.
- The figure is not a pot of DSA fines handed directly to NGOs: it combines multi-year awards to advocacy groups, consultancies, technology suppliers and an EU agency.
- The DSA separately makes the largest platforms finance their own supervision, while the Commission purchases external monitoring, research and technical assistance.
- Two consortium contracts worth €6.01 million are coordinated by the German arm of the Institute for Strategic Dialogue, although the institute’s own share is not disclosed.
- The result is a self-reinforcing enforcement economy in which the regulator defines online “risk”, regulated firms fund supervision, and outside organizations are paid to help identify non-compliance.
The European Union’s Digital Services Act has done more than create a censorship regime. It has created a market around enforcing one.
An investigation by Effort News identifies €56,762,300.69 in EU contracts and grants connected to DSA implementation through 27 August 2026. The awards range from compliance monitoring and market intelligence to trusted-flagger research, data systems and technical support.
That finding supplies the financial architecture behind a system FFO has already explained. The DSA obliges the largest platforms and search engines to assess vaguely defined “systemic risks”, cooperate with approved researchers and trusted flaggers, and face fines of up to 6 per cent of global annual turnover for non-compliance. The new records show that an expanding class of contractors and policy organizations is being paid to help the European Commission turn those powers into a permanent enforcement apparatus.
The money trail
The money does not move in quite the way the word “fine” might suggest. DSA penalties and supervisory fees are legally separate. Article 43 requires designated very large online platforms and search engines to pay annual fees covering the Commission’s estimated supervisory costs. Fines of up to 6 per cent are sanctions for violations; they do not simply become a fund distributed to outside groups.
The distinction makes the system more revealing, not less. The Commission’s latest fee report says it levied about €58.2 million in 2024 to finance DSA supervision in 2025. Actual 2025 expenditure was €42.57 million, including €21.41 million in operational and administrative spending. That category included €9.63 million for supervisory capacity-building and support, €3.55 million for external experts and €2.84 million for databases, digital tools and IT systems. The Commission levied a further €54.82 million in 2025 to cover 2026 supervision. Its previous annual report describes the same fee-financed model.
Effort’s downloadable award ledger is broader than a single year’s fee account and includes contracts and grants with multi-year values. The public records do not trace each euro of platform fees to each award. Nor do they show that every listed recipient is an advocacy NGO. They do, however, reveal the scale of the institutional ecosystem being assembled around DSA enforcement.
Belgium accounts for €18.45 million of identified awards, followed by Luxembourg at €8.78 million, Spain at €8.11 million and Germany at €7.42 million. Using registered addresses and OpenStreetMap, Effort found 28 recipients within five miles of the Commission’s Berlaymont headquarters in Brussels.
Who gets paid
The largest single entry is not a civil-society group but an EU body: the European Union Intellectual Property Office, with €5 million. Commercial research, consulting and IT firms also appear near the top, including Verian Group Belgium at €3.60 million, Network Research Belgium at €3.48 million and Lithuania’s Visionary Analytics at €3.46 million.
The most politically significant entry is the Institute for Strategic Dialogue. Germany’s ISD GmbH is named as coordinator on two consortium awards totaling €6.01 million. A TED contract notice describes the work as technical assistance for “market intelligence, evidence gathering and compliance monitoring” under the DSA.
The accounting needs care. One consortium award was worth €1.15 million and another €4.86 million, but the EU records attribute their total values to the coordinator while leaving the division among consortium members unpublished. It is therefore accurate to say that ISD coordinates €6.01 million of DSA contracts—not that ISD alone received every euro.
That caveat does not remove the conflict built into the model. ISD’s own DSA explainer presents the law as central to its work on election risks, hate, extremism, terrorism and technology accountability. The Commission is paying a policy organization embedded in the disinformation field to help gather the evidence on which compliance decisions may rest.
Visionary Analytics provides another example. It has been commissioned to support implementation of the DSA’s trusted flagger mechanism—the status that gives selected organizations priority channels for reporting allegedly illegal content. Verian, meanwhile, has been paid for market intelligence and compliance work. These are not merely passive vendors supplying office equipment. They help produce the studies, taxonomies and monitoring capacity through which broad political concepts such as “disinformation” and “systemic risk” become enforceable administrative practice.
The feedback loop
This is the DSA’s institutional feedback loop. The Commission defines the categories of harm. Platforms are compelled to assess and mitigate them under threat of global-turnover fines. Outside organizations are then commissioned to study the same risks, monitor compliance or advise the regulator. Those findings can justify further intervention, more monitoring and another round of contracts.
A contractor may conduct sound research, and a grant recipient may act in good faith. The structural problem remains: organizations with a financial and professional stake in a growing enforcement regime are helping supply the evidence that sustains it. The DSA has converted the censorship-industrial complex from an informal network into a regulated European market.
The EuroStack: How ‘Digital Sovereignty’ Became a Plan to Replace American Tech
FFO’s investigation of the Ceuta invasion censorship protocol showed how this machinery can operate in practice. The Commission pressed Meta and TikTok over migration-related content, activated a crisis-response network involving fact-checkers and civil-society groups, and projected EU moderation demands beyond Europe. FFO has also documented how the EuroStack agenda combines content control with a broader campaign to displace American technology under the language of “digital sovereignty”.
The regime is still expanding. Days after Effort published its findings, the Commission formally designated ChatGPT, Reddit and Roblox under the DSA, treating ChatGPT as a “very large online search engine”. The companies now enter the same structure of risk assessments, supervisory fees, external monitoring and potentially enormous penalties.
Europe’s officials describe this as accountable regulation. The financial record shows something more troubling: the regulator writes the rules, charges the regulated companies, hires an external enforcement ecosystem and relies on that ecosystem to help identify the risks that warrant more regulation.
The DSA is therefore not only a censorship law. It is the foundation of a durable censorship economy—one financed by the companies it controls and increasingly exported to the users, speech and businesses of the rest of the world.
