DSA: Booking.com and Systemic Platform Risk
🟢 Main Issues
The Commission’s investigation is not about isolated scams; it’s about systemic governance failures in a VLOP (Very Large Online Platform).
- Fraudulent listings reveal gaps in risk identification, mitigation and marketplace integrity.
- Phishing pathways emerge from data-flow design and messaging architecture, not user error.
- Transparency failures show how boosted visibility becomes manipulation when ads are not clearly labelled.
🟢 Systems Angle
- Platforms become risk amplifiers when access, authority and trust are misaligned.
- Data-sharing design can create exploit pathways even when policies appear compliant.
- Transparency without legitimacy becomes a liability, not a safeguard.
🟢 Governance Angle
- Articles 34/35 require VLOPs to assess and mitigate systemic risks.
- Article 26(1) requires clear ad identification and user comprehension.
The case tests whether consumer-facing platforms can meet DSA obligations at scale.
🔵 RACinform view
- Platform risk is architectural, not accidental.
- Fraud, phishing and transparency drift share the same root cause: governance gaps at system layer.
- DSA enforcement is consequence architecture applied to marketplaces. And it sets a reference point for how marketplace‑scale breaches will be handled going forward.