A Record Fine, and a Pattern Emerging
On 20 July 2026, the European Commission fined AliExpress €550 million for breaching the Digital Services Act (DSA) — the largest single penalty issued under the law since it entered force. The Commission found that AliExpress failed to diligently assess and mitigate the systemic risks its platform poses through the sale of illegal, unsafe and counterfeit products, and that it "overestimated the effectiveness of its systems for detecting and removing illegal products" while failing to account for a severe imbalance between the volume of listings and the number of human moderators reviewing them (European Commission). AliExpress must now submit a remediation action plan, and the Commission has warned that continued non-compliance could trigger periodic penalty payments on top of the fine.
This is not an isolated action. Two months earlier, on 28 May 2026, the Commission fined Temu €200 million for materially similar failures — a risk assessment that leaned on generic e-commerce sector data rather than an analysis of Temu's own platform, and mystery-shopping results showing a high failure rate for safety-critical products like chargers and children's toys (European Commission). Read together, the two decisions mark the DSA's systemic-risk framework moving from a compliance exercise into a live enforcement regime with real financial teeth aimed squarely at low-cost Chinese cross-border marketplaces.
The Case for Enforcement
The Commission's underlying concern is legitimate and worth stating plainly before critiquing the remedy. Discount marketplaces built around drop-shipped, low-value parcels from thousands of unvetted third-party sellers are a genuinely different risk profile than a curated retailer. Counterfeit cosmetics can contain banned chemicals; unbranded chargers can fail basic electrical safety tests; toys can pose choking hazards that never reach a regulator until a child is hurt. The DSA's Articles 34 and 35 require "very large online platforms" — those with more than 45 million monthly EU users — to identify and mitigate exactly these harms, with obligations proportionate to severity and probability (EUR-Lex, Regulation 2022/2065). If a platform of AliExpress's scale is systematically under-resourcing moderation relative to listing volume, as the Commission alleges, that is not a paperwork violation — it is the precise failure mode the systemic-risk regime was built to catch. A regulator that let repeat, scale-driven safety failures go unpunished would be abdicating the job the DSA assigns it.
Where Proportionality Gets Harder to See
The harder question is whether €550 million is the right number, and whether the process that produced it is legible enough for other platforms to plan around. The DSA caps fines at 6% of a violator's global annual turnover (EUR-Lex) — against Alibaba's group revenue, the theoretical ceiling runs into the billions of euros, meaning the Commission chose to land well below the statutory maximum. That restraint is welcome, but it also underscores how much discretion sits inside "systemic risk" as a legal standard. The concept has no fixed metric — no defined defect rate, no bright-line moderator-to-listing ratio — which means the size of a fine turns heavily on the Commission's own judgment about severity and effort, assessed after the fact. AliExpress has called the fine "disproportionate" and confirmed it will appeal, arguing it does not reflect the compliance systems and remediation work already under way.
That dispute matters beyond this one case. A regime where the penalty for negligence is set by retrospective discretion, rather than by clear, published thresholds a platform can test its systems against, invites two failure modes: firms that under-invest in compliance because the standard is genuinely unknowable in advance, and firms that over-invest in defensive process documentation aimed at surviving an audit rather than actually reducing consumer harm. Neither serves the DSA's stated goal.
The Trend Line Worth Watching
The AliExpress and Temu decisions, arriving two months apart and both targeting Chinese-owned marketplaces, land alongside a broader EU push to tighten customs treatment of low-value parcels from the same platforms — creating a pattern that reads, whether intended or not, as sector-specific pressure rather than platform-neutral enforcement of a general-purpose law. The Commission should be able to show that a comparably negligent EU or US marketplace would face the same scrutiny at the same severity; so far, the DSA's biggest fines have landed exclusively on two Chinese entrants competing hardest on price. If the pattern holds without a comparable case against a Western platform, it will be read — fairly or not — as trade policy wearing a consumer-protection label.
The Better Fix
None of this argues against enforcement. It argues for the Commission to pair enforcement with clarity: published minimum expectations for moderator-to-listing ratios or equivalent proxies for very large marketplaces, an explicit methodology for how a fine's size maps to the severity findings, and visible parity in which platforms get audited. Predictable rules produce compliance investment; unpredictable ones produce fines, appeals and, eventually, litigation over whether "systemic risk" means anything more precise than "whatever the Commission found this year." AliExpress's remediation plan and appeal will be the first real test of whether the DSA's biggest fine yet becomes a template — or a cautionary tale about discretion without guardrails.