A Landmark Penalty Under the Digital Services Act
The European Union has delivered a sharp regulatory blow to Chinese ecommerce giant Temu, imposing a €200 million penalty for structural failures that allowed dangerous and illegal products to circulate on the Temu platform. Announced on 28 May 2026, the fine represents only the second monetary punishment issued under the European Union Digital Services Act since the landmark online safety legislation took full effect, following a €120 million sanction against the X platform in December 2025. Regulators said the penalty reflects both the scale of the European operations at Temu and the severity of the safety gaps that endangered millions of consumers. The Commission further noted that the fine was calculated taking into account the nature of the infringement, its gravity in terms of affected EU users, and its duration. Failing to conduct proper risk assessments, a central pillar of the DSA architecture, is a particularly serious breach of the law.
- A Landmark Penalty Under the Digital Services Act
- Mystery Shopping Reveals Faulty Electronics and Hazardous Toys
- What the Digital Services Act Demands of Major Platforms
- How Temu Risk Assessment Fell Short of EU Standards
- Temu Disputes Fine and Cites Improved Systems
- Broader Investigations and the Future of Platform Accountability
- The Bottom Line
Temu has become one of the fastest growing retail platforms in Europe since entering the market, surging to roughly 130 million monthly active users across the bloc. The Commission designated Temu as a Very Large Online Platform in May 2024 after it reported more than 45 million monthly users, a classification that places the company under the strictest tier of EU digital regulation. EU tech commissioner Henna Virkkunen told reporters that the decision was intended to send a “very strong message” to the company and to the wider industry. She added that risk management is central to operating in the European digital single market. The investigation that led to the fine began in October 2024, when Brussels opened formal proceedings following complaints filed by the pan European consumer organisation BEUC and 17 of its national member groups. Those complaints documented a pattern of unsafe goods reaching European households, prompting the Commission to examine whether Temu was living up to its obligations under the DSA to identify and mitigate structural risks before they caused harm.
Mystery Shopping Reveals Faulty Electronics and Hazardous Toys
At the heart of the Commission case lies a mystery shopping exercise carried out by an independent testing organisation on behalf of EU regulators. The results painted a disturbing picture of product safety on the platform. A very high percentage of electrical chargers purchased through Temu failed basic electrical safety tests, creating risks of electric shock or fire in homes across Europe. The investigation also discovered that a high proportion of baby toys posed safety risks of medium to high severity. Some items contained chemicals exceeding legal safety limits, while others featured small detachable parts that presented clear suffocation hazards to infants.
Beyond chargers and toys, regulators identified problematic jewelry and other consumer goods that did not meet European product standards. The BEUC coalition had previously flagged additional dangers, including lava lamps with electrocution risks and bicycle helmets that failed to protect riders during falls. These findings confirmed what consumer advocates had long suspected: the ultra low prices and rapid cross border shipping that define the Temu business model were accompanied by gaps in vendor vetting and quality control that put European consumers in danger. The evidence also indicated that EU consumers were very likely to encounter such illegal items when browsing the platform, contradicting internal assumptions at Temu that unsafe products were merely isolated incidents.
What the Digital Services Act Demands of Major Platforms
To understand the significance of this fine, it helps to know what the Digital Services Act actually requires. The DSA, which became applicable to all online platforms in February 2024, is the attempt by the European Union to create a safer and more transparent digital environment. For ordinary platforms, the rules include obligations to remove illegal content when notified. For Very Large Online Platforms such as Temu, however, the obligations go much further. These companies must proactively assess structural risks linked to their services and adopt corresponding mitigation measures before harm occurs. Regulators view risk assessments as the backbone of the entire DSA framework. Platforms must submit detailed reports that identify specific dangers arising from their own business models, user base, algorithms, and supply chains rather than relying on broad industry generalisations. This proactive approach marks a shift from earlier rules that largely required platforms to react only after users or authorities flagged specific problems.
The DSA gives the European Commission enhanced oversight powers over platforms that reach more than 45 million monthly active users in the EU. These Very Large Online Platforms face stricter accountability because their scale means that even small failure rates can affect millions of people. Under the law, companies can face fines of as much as 6 percent of their global annual turnover for breaches. This makes the €200 million penalty financially significant, though it remains far below the theoretical maximum that Temu could have faced given its global sales volumes. The legislation also empowers regulators to order changes to platform design, recommender systems, and data access policies when these features contribute to consumer harm.
How Temu Risk Assessment Fell Short of EU Standards
Regulators found that the 2024 Temu risk assessment violated the DSA on several counts. According to the Commission, the document relied on general information about risks concerning the ecommerce sector as a whole rather than on specific evidence about the marketplace operated by Temu. It also seriously underestimated how often EU consumers were likely to encounter illegal items. Officials said the assessment lacked specificity, was not grounded in solid evidence, and was not comprehensive. It left regulators, users, and the public in the dark about the true scale of potential harm posed by illegal products sold on the platform, the Commission stated in the official decision.
Another critical flaw involved the internal systems at Temu. The company did not properly assess how the design of the Temu service, including recommender systems and product promotion programmes run by affiliated influencers, could increase the reach of illegal products. In other words, Temu failed to examine whether the algorithms and marketing incentives were actively pushing dangerous goods toward consumers. This gap matters because a risk assessment that ignores the unique mechanics of the platform cannot lead to effective safeguards. The Commission highlighted that risk assessments are not box ticking exercises, and that Temu had clearly underestimated the dangers present in the services offered to European shoppers.
“Risk assessments are not box ticking exercises; they are the backbone of the DSA. The Temu risk assessment underestimates concrete risks, lacks specificity, is not grounded in solid evidence, and is not comprehensive. Now it is time for Temu to comply with the law.”
Henna Virkkunen, Executive Vice-President for Tech Sovereignty, Security and Democracy, delivered the message as Brussels made clear that generic compliance documents will no longer satisfy regulators when concrete testing and customs data reveal widespread non-compliance.
Temu Disputes Fine and Cites Improved Systems
Temu reacted to the penalty with a public statement asserting that it respects the objectives of the DSA and the need for clear, consistent rules across the digital economy. However, the company said it disagrees with the European Commission decision and considers the fine to be disproportionate. A spokesperson explained that the decision relates to the first DSA assessment produced by Temu in 2024 and does not reflect the current state of the systems at the company. The retailer noted that it engaged constructively with the commission throughout the process and has since taken further steps to strengthen risk assessment, platform governance, and user protection. It also stressed that it will continue to engage with regulators in good faith while reviewing the decision carefully and considering all available options, which leaves open the possibility of a legal challenge.
The proportionality debate carries weight because the DSA allows for penalties reaching 6 percent of global turnover. While €200 million is a substantial sum, it likely represents only a fraction of the worldwide revenue generated by Temu, given the explosive growth of the company in North America, Europe, and other regions. Still, the fine sets a financial marker for how Brussels values consumer safety in cross border ecommerce. Industry observers note that even a fraction of global turnover can steer corporate behaviour when multiplied across several enforcement actions. The company now has until 28 August 2026 to submit an action plan that details specific measures to remedy the breach of the risk assessment obligations. The European Board for Digital Services will have one month to issue an opinion on the plan, after which the Commission will have a further month to adopt a final decision and set a reasonable period for implementation. Failure to comply could trigger additional periodic penalty payments.
Broader Investigations and the Future of Platform Accountability
The risk assessment fine is not the end of regulatory troubles for Temu in Brussels. The Commission continues to investigate other suspected breaches of the DSA, including the potentially addictive design of the platform, the transparency of the recommendation systems at Temu, and the access granted to data for external researchers. Separately, EU consumer protection authorities have examined a range of Temu practices under ordinary consumer law, identifying concerns that include alleged fake discounts, pressure selling, forced gamification of shopping, misleading information on refunds, suspected fake reviews, and hidden contact details. The consumer protection probe also found insufficient vendor information on product listings, making it harder for buyers to know who ultimately stands behind the goods they purchase.
The Temu case sits within a larger European effort to bring large online marketplaces under closer supervision in an era of surging international parcel volumes. EU policymakers face growing pressure over the millions of low cost goods entering the European market through direct to consumer platforms, which strain customs enforcement and product safety checks. The rapid expansion of these marketplaces has raised questions about fair competition with EU retailers and the ability of national authorities to monitor supply chains that stretch from Chinese factories to European doorsteps. Regulators have opened similar DSA investigations into other major platforms including Shein and AliExpress, suggesting that Temu is merely the first major ecommerce enforcement target rather than an isolated exception. The outcome will likely shape how other platforms structure their risk assessments and vendor verification systems in the months ahead.
The Bottom Line
- The European Union fined Temu €200 million on 28 May 2026 for breaching the Digital Services Act by failing to properly assess structural risks from illegal products.
- Independent testing found that a very high percentage of chargers failed basic safety tests, while numerous baby toys contained banned chemicals or suffocation hazards.
- Regulators ruled that the 2024 Temu risk assessment relied on generic industry data rather than specific evidence about the marketplace and algorithms operated by Temu.
- The penalty is only the second issued under the DSA, following a €120 million fine against X in December 2025, and reflects Brussels intent to hold ecommerce giants accountable for consumer safety.
- Temu has until 28 August 2026 to submit a detailed action plan, and it faces additional ongoing investigations into addictive design, recommender systems, and consumer protection violations.