The European Commission (EC) has accepted Temu’s action plan to address its breach of risk assessment requirements under the Digital Services Act (DSA).

Temu submitted the plan in August following the EC’s May 2026 non-compliance decision, which found the company had not met its obligations and imposed a €200m ($233m) fine.

Discover B2B Marketing That Performs

Combine business intelligence and editorial excellence to reach engaged professionals across 36 leading media platforms.

Find out more

The EC had previously issued preliminary findings in July 2025, raising concerns about a potential DSA breach.

The plan includes five corrective measures.

Temu will carry out a risk assessment tailored to its service, using reliable and current information on risks associated with the platform’s design, operation and use.

It will also use reliable metrics and indicators to determine whether its mitigation measures reduce the spread of illegal content.

Temu will review the limitations and weaknesses of its proactive content moderation system, including their effects on recommended products.

The review will cover platform policies, moderation rules, automated detection tools, manual reviews, feedback mechanisms and resource allocation.

The company will also examine whether its recommender and other algorithmic systems could amplify illegal content, using relevant and reliable metrics.

It will consider intentional manipulation of the service and the possible rapid and wide dissemination of illegal content, including ways that traders and other service recipients could use platform features to distribute illegal product listings.

The Board for Digital Services found the proposed measures partly adequate, but said the plan did not provide enough detail to determine fully whether it remedied the infringement.

The EC will closely oversee implementation, with particular attention to matters the board considered insufficiently explained.

Temu has been given four months to execute the measures.

It must also complete an interim risk assessment covering the six months to 30 November 2026.

The measures will be subject to an external, independent audit, which Temu has committed to undertake.

The audit report is due to the EC within four months of implementation.

If the auditor issues recommendations, Temu must report to the EC on their implementation within one month.