Vetted Researchers
What does ‘vetted researchers’ mean?
Vetted researchers are research organizations based on Article 2 of Directive (EU) 2019/790, with a principal investigator, that have been granted the status of ‘vetted researchers’ as referred to in the first subparagraph of Article 40(8) of the Digital Services Act (DSA), for a specific research project involving access to data held by providers of very large online platforms and very large online search engines.
What are their tasks?
‘Vetted researchers’ shall conduct research on the development and severity of systemic risks online and inform online platform providers, online search engine providers, digital service coordinators, other competent authorities, the European Commission and the public about them. They are particularly important for addressing information asymmetries and for establishing a robust risk mitigation system.

Who can obtain the status of ‘vetted researcher’?
According to Article 40(8) of the DSA, in a duly justified request for access to data to the provider of a very large online platform or a very large online search engine, applicants for the status of ‘vetted researcher’ for a specific study specified in the request must demonstrate that they meet the following conditions:
- They are affiliated to a research organisation as defined in Article 2(1) of Directive (EU) 2019/790;
- They are independent of commercial interests;
- Their application shall disclose the source of funding for the research;
- They are able to comply with the specific data security and confidentiality requirements corresponding to each request and to protect personal data, and shall describe in their application the appropriate technical and organisational measures they have put in place for that purpose;
- It is apparent from their application that the access to data and time limits requested by them are necessary and proportionate for the purposes of their research and that the expected results of that research will contribute to achieving the objectives in paragraph 4[1] of Article 40 of the DSA;
- The planned research activities will be carried out for the purposes referred to in paragraph 4 of Article 40 of the DSA;
- They have committed to providing free public access to the results of their scientific research within a reasonable time after the completion of the research, provided that the rights and interests of the recipients of the relevant service are respected in accordance with Regulation (EU) 2016/679.
How to apply for the status of ‘vetted researcher’?
The application for the status of ‘vetted researcher’ is made by submitting a reasoned application in accordance with the technical conditions and procedures. Under them providers of very large online platforms and very large online search engines must exchange data with vetted researchers, which entered into force on 29 October 2025 by Commission Delegated Regulation (EU) 2025/2050 supplementing Regulation (EU) 2022/2065 of the European Parliament and of the Council (Digital Services Act).
Applications are submitted through the European Commission’s DSA Data Access Portal – a single, centralized point for submitting applications. Researchers interested in obtaining the status of “vetted researcher” must register on the portal and fill in a form. CRC grants the status of a vetted researcher or terminates his access to data in accordance with Art. 40 of the DSA.
The European Commission has created a Frequently Asked Questions (FAQ) section and a set of resources to assist researchers in navigating and completing their applications.
For questions or further information, you can contact the CRC at the following address: dsa@crc.bg.
[1] Upon a reasoned request from the Digital Services Coordinator of establishment, providers of very large online platforms or of very large online search engines shall, within a reasonable period, as specified in the request, provide access to data to vetted researchers who meet the requirements in paragraph 8 of this Article, for the sole purpose of conducting research that contributes to the detection, identification and understanding of systemic risks in the Union, as set out pursuant to Article 34(1), and to the assessment of the adequacy, efficiency and impacts of the risk mitigation measures pursuant to Article 35.
