The digital revolution has transformed the dissemination of messages and the construction of public debate. This article examines the disintermediation and fragmentation of the public sphere by digital platforms. Disinformation campaigns, that aim at assuming the power of determining a truth alternative to reality, highlight the need to enhance the traditional view of freedom of expression as negative freedom with an institutional perspective. The paper argues that freedom of expression should be seen as an institution of freedom, an organizational space leading to a normative theory of public discourse. This theory legitimizes democratic systems and requires proactive regulation to enforce its values.

Viewing freedom of expression as an institution changes the role of public power: this should not be limited to abstention but instead has a positive obligation to regulate the spaces where communicative interactions occur. The article discusses how this regulatory need led to the European adoption of the Digital Services Act (DSA) to correct DPs through procedural constraints. Despite some criticisms, the DSA establishes a foundation for a transnational European public discourse aligned with the Charter of Fundamental Rights and member states’ constitutional traditions.

As part of its risk management system, aiming at the mitigation of so-called systemic risks on very large online platforms and very large online search engines (VLOPSEs), the DSA introduces data access rights for independent researchers. With this instrument, the legislator hopes to enable the production of evidence concerning possible threats to society and democracy that might be linked to these platforms or search engines. After an overview of the functioning of the risk management system in the DSA that is characterised by a collaborative governance framework and a learning-based approach, the article will explore the role of the researchers inside this framework. It thereby focuses on the legal significance the researchers’ evidence could have for the risk mitigation obligations imposed on the VLOPSEs in the DSA by interpreting the provisions of the DSA.