{
  "compartment_id": "section-16",
  "number": "Section 16",
  "title_local": "The Digital Services Act: put knowledge on the record",
  "title_english": "The Digital Services Act: put knowledge on the record",
  "source_url": "https://phishdestroy.io/steam_dossier/#dsa-accountability",
  "source_document": "index.html",
  "content": {
    "html": "<section class=\"border-t border-gray-800 pt-6 accountability-section\" id=\"dsa-accountability\">\n<div class=\"max-w-7xl mx-auto space-y-8\">\n<div class=\"case-section-heading section-head section-head-balanced\"><div class=\"section-head-primary\"><span class=\"kicker\">Part C — Legal frameworks · Section 16 · Notice, response, responsibility</span><h2>The Digital Services Act: put knowledge on the record</h2>\n<section class=\"dossier-note chapter-context\"><div class=\"dossier-note-title\">Context &amp; source limits</div><p class=\"chapter-context-text\">Two elements of an Article 16 notice sit with the submitter rather than with this dossier: the submitter's own details and a statement of good faith that the information is accurate. Everything else the Article requires — the substantiated explanation and the exact electronic location — is set out in Section 3 and in the route register, with saved responses and hashes, so that any party can lodge it. Two further limits on the law itself: losing the hosting exemption does not by itself establish liability under any other law, and the 6% in Article 52(3) is a statutory ceiling, not an assessed penalty against Valve.</p></section></div><div class=\"section-head-intro\"><p class=\"lede\">Under the DSA a hosting provider keeps its liability shield only until it has specific knowledge and fails to act. <strong class=\"text-white\">This dossier is that notice.</strong> It names the hosts, the dates, the saved responses and the hashes. From publication the question is no longer whether Valve knew — it is what Valve did next.</p></div></div>\n<div class=\"dsa-spread\"><div class=\"dsa-timeline\"><div><span class=\"timeline-node\">01</span><span class=\"case-kicker\">July 2016 / the dossier exhibit</span><h3>A ten-day demand.</h3><p>The notice reconstructed above is the historical starting point for the investigation's enforcement comparison.</p></div><div><span class=\"timeline-node\">02</span><span class=\"case-kicker\">17 February 2024 / general application</span><h3>The DSA time window.</h3><p>Separate historical conduct from conduct during the period when the relevant DSA obligations apply.</p></div><div><span class=\"timeline-node\">03</span><span class=\"case-kicker\">Ten years / original dossier snapshot</span><h3>Duration needs a notice trail.</h3><p>The elapsed time since July 2016 (see Section 11) is a dossier metric. It is not ten years of established DSA violations. Link each notice to a specific item, applicable law, delivery evidence and response.</p></div></div><aside class=\"dsa-fine\"><span class=\"case-kicker\">Article 52(3) / statutory ceiling</span><strong>6<span>%</span></strong><h3>of annual worldwide turnover</h3><p>Maximum fine for a breach of DSA obligations, using the provider's preceding financial year. This is a legal ceiling, not an assessed penalty against Valve.</p></aside></div>\n<div class=\"case-legal-note\"><span class=\"case-kicker\">Articles 6, 8 &amp; 16 / the legal test</span><p>For relevant hosting services, specific knowledge and failure to act expeditiously can remove the hosting exemption. A sufficiently precise notice can establish knowledge of the particular content. The DSA imposes no general monitoring duty; loss of the exemption does not itself establish liability under another law.</p><p class=\"case-source\"><a href=\"https://eur-lex.europa.eu/eli/reg/2022/2065/oj/eng\" rel=\"noopener noreferrer\" target=\"_blank\">DSA: Articles 6, 8, 16, 52, 53, 93 and recital 17 ↗</a> <a class=\"archived-link\" href=\"https://web.archive.org/web/20260920080125/https://eur-lex.europa.eu/eli/reg/2022/2065/oj/eng\" rel=\"noopener noreferrer\" target=\"_blank\">archived 2026-09-20 ↗</a></p></div>\n<div class=\"case-actions\"><a href=\"steam_enforcement_evidence#support-records\">Review preserved complaints ↗</a><a href=\"#dsar-playbook\">Build the account timeline →</a><a href=\"legal_analysis\">Full legal &amp; economic analysis →</a></div>\n</div>\n</section>"
  },
  "original_content_sha256": "3c1664c9f6f9b780ec91779b89c54470b194a9a5af9240d28b58e377f45fbf1d",
  "author_pseudonym": "Agent John",
  "schema": "phishdestroy.macro-fact.v1",
  "language": "en",
  "aggregator": "PhishDestroy",
  "exports": {
    "pdf": "/steam_dossier/exports/agent-protocol/files/en/steam_dossier_section_16_agent_john.pdf",
    "json": "/steam_dossier/exports/agent-protocol/files/en/steam_dossier_section_16_agent_john.json",
    "signature": "/steam_dossier/exports/agent-protocol/files/en/steam_dossier_section_16_agent_john.json.asc"
  },
  "integrity": {
    "signed_object": "steam_dossier_section_16_agent_john.json",
    "signature_file": "steam_dossier_section_16_agent_john.json.asc",
    "signing_key_fingerprint": "129FC7F39C40C69D2EF3C329BFCF9E8DD295EE01",
    "scope": "Exact JSON bytes, including macro-fact author and corresponding PDF SHA-256. PhishDestroy is the integrity signer; original evidence attribution is unchanged."
  },
  "pdf": {
    "filename": "steam_dossier_section_16_agent_john.pdf",
    "sha256": "76ac5e5ea3d62f715bcad5a14e6749276db0dce9e4ea49a0179cb9b0bf03e72e",
    "pages": 4
  }
}
