The Regulation Map: TikTok, the DSA, and the New Rules of Distribution

For most of the social era, platform regulation was something operators could safely ignore. It happened in committee rooms and Brussels working groups, far from the daily reality of posting, growing, and monetizing an audience. That distance has collapsed. The events of the last two years have made regulation a first-order variable in distribution strategy, on par with algorithm changes and ad pricing. The question is no longer whether a platform will tweak its feed. It is whether the platform will still be legally permitted to operate the channel you depend on.

This is not a story about politics. It is a story about risk. Three distinct regulatory fronts have matured roughly in parallel, and together they define a new operating environment for anyone whose reach is borrowed rather than owned.

The TikTok precedent: a channel can become a legal object

The TikTok divestiture saga is the clearest illustration of the shift. A federal law requiring ByteDance to divest TikTok's US operations or face a ban was signed in 2024, upheld by the Supreme Court in early 2025, and then absorbed into a drawn-out sequence of enforcement delays, extensions, and negotiated frameworks that stretched deep into 2025 and beyond. The specifics have moved repeatedly. The lesson has not.

What the saga established is that a distribution channel can be transformed into a legal object overnight, for reasons entirely disconnected from how any individual creator or brand used it. No engagement strategy, no content quality, no audience loyalty offered protection. The risk lived upstream, in the platform's ownership structure and its relationship with a foreign government, and it propagated downstream to everyone who had built on top of it.

The platforms you build on are not infrastructure. They are counterparties, and counterparties can be regulated, sanctioned, or forced to change hands.

For operators, the practical consequence was a months-long stretch of genuine uncertainty about whether a primary channel would survive. Reporting through 2025 indicated that many brands and agencies quietly built contingency plans, shifting spend and shadowing audiences on alternative platforms even as TikTok kept operating. That hedging behavior is the real signal. It is what it looks like when distribution risk becomes a board-level concern. We have written before about the rented algorithm and why dependence on a single feed is a structural liability; the TikTok episode turned that thesis from a thought experiment into a live drill.

The DSA: compliance becomes a feature of the feed

While the US debated bans, the European Union built a standing regulatory regime. The Digital Services Act, fully in force for the largest platforms since 2023 and 2024, does not threaten to remove channels. It reshapes how they work from the inside. Very Large Online Platforms now carry obligations around content moderation, illegal-content takedowns, advertising transparency, and systemic-risk assessments, with penalties that can reach a meaningful percentage of global annual turnover.

Two provisions matter most for distribution. First, the DSA requires transparency and, in some cases, non-profiling alternatives for recommendation systems, which begins to pry open the black box that determines who sees what. Second, it imposes real constraints on targeted advertising, including restrictions on profiling minors and on the use of sensitive data. Reporting through 2025 documented formal Commission proceedings against several major platforms over these obligations, signaling that the regime has teeth and that enforcement is not theoretical.

The strategic implication is subtle but important. When a platform's recommendation and ad systems are governed by external rules, the operator's playbook becomes partly hostage to compliance decisions made for regulatory reasons rather than performance ones. Targeting options narrow. Moderation thresholds shift. The feed you optimized against last quarter may behave differently next quarter, not because the platform chose to change it, but because it was required to. This compounds the broader squeeze on organic reach that we have described as the attention recession.

The US enforcement turn: from speech to consumer protection

The American regulatory story is often miscast as a free-speech fight. The more consequential action has migrated to consumer-protection and youth-safety theories, where the legal ground is firmer and the appetite bipartisan. The FTC has continued to scrutinize data practices, dark patterns, and deceptive advertising, while a broad coalition of state attorneys general has pursued litigation alleging that platform design features are harmful to younger users.

This matters for distribution because it expands the surface area of liability beyond the platform itself. Disclosure rules around sponsored content, scrutiny of influencer marketing practices, and tightening expectations around minors all reach directly into how creators and brands operate. The compliance burden no longer stops at the platform's legal department. It extends to anyone running paid partnerships or marketing to younger audiences. As regulators sharpen rules on sponsorship disclosure and authenticity, the economics of brand deals are quietly being rewritten, a shift that intersects with what we have called the end of the sponsorship era.

• Channel risk sits upstream, in ownership and geopolitics, as TikTok showed.
• Mechanism risk sits inside the platform, as the DSA reshapes recommendations and ads.
• Conduct risk sits with the operator, as US enforcement reaches sponsorship, data, and youth marketing.

What this means for operators who build on rented networks

The instinct in regulated industries is to lawyer up and lobby. For most creators, brands, and venture-backed media companies, that is the wrong response, because the regulation is not aimed at them and they cannot influence its direction. The right response is architectural.

The through-line across all three fronts is that risk concentrates wherever dependence concentrates. A business with a single dominant channel inherits the full regulatory exposure of that channel. A business with diversified distribution and, crucially, a direct relationship with its audience absorbs the same shocks with far less damage. This is the case for treating owned channels as the core asset and rented reach as the acquisition layer that feeds it, a strategy we have argued for under the banner of owning your audience.

Concretely, that means a few disciplines. Map your distribution by dependency, not by vanity metrics, and know what share of reach and revenue would survive the loss of any single platform. Build first-party capture, email and messaging and community, into the top of every funnel so that audience relationships persist regardless of platform fate. Treat compliance literacy, on disclosure, data, and minors, as an operating competence rather than a legal afterthought. And underwrite new bets with regulatory scenarios explicitly priced in, the way a sophisticated investor would.

The regulation map is still being drawn, and the lines will keep moving. But the strategic conclusion is already legible. The era of treating platforms as neutral, permanent infrastructure is over. They are counterparties operating inside a tightening regulatory perimeter, and the operators who thrive will be the ones who built their businesses to survive the perimeter shifting around them.