How do regulators audit risk assessments?

Digital Services Coordinators and the European Commission can audit how platforms conduct risk assessments.

Audits may include:
Reviewing documentation of identified risks and mitigations.
Checking whether assessments were updated on schedule.
Inspecting data on systemic harms or algorithmic behaviour.
Ordering independent audits by external experts.
Platforms must provide full cooperation, access to data, and evidence of follow-up actions. Non-compliance can result in fines or remedial orders.