{"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"current_only","held_since":"2026-10-26","gaps":[],"covered":["2024/436 — Delegated act — Performance of audits for very large online platforms [in force] L2"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-10-26","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/dsa/level-2/delegated-acts/2024-436-performance-of-audits-for-very-large-online-platforms/articles/10","url":"https://www.headlesslaw.com/dsa/level-2/delegated-acts/2024-436-performance-of-audits-for-very-large-online-platforms/articles/10","title":"Article 10 — Appropriate audit methodologies","family":"l2_unit_view","work_id":"spaces/dsa/level-2/delegated-acts/2024-436-performance-of-audits-for-very-large-online-platforms","view_of":"/dsa/level-2/delegated-acts/2024-436-performance-of-audits-for-very-large-online-platforms","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-01","applies_from":null,"application":null,"version_label":"Consolidated version of 2 February 2024","check":{"against":"EUR-Lex","on":"2026-10-26"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02024R0436-20240202","valid_from":"2024-02-22","valid_until":null,"content_id":"66c2f415d0859201","versions":["2024-02-22"],"version_url":"https://www.headlesslaw.com/dsa/level-2/delegated-acts/2024-436-performance-of-audits-for-very-large-online-platforms/articles/10/versions/2026-10-26","revision_url":"https://www.headlesslaw.com/dsa/level-2/delegated-acts/2024-436-performance-of-audits-for-very-large-online-platforms/articles/10/versions/2026-10-26/rev/66c2f415d0859201","versions_url":"https://www.headlesslaw.com/dsa/level-2/delegated-acts/2024-436-performance-of-audits-for-very-large-online-platforms/articles/10/versions","relations_url":"https://www.headlesslaw.com/dsa/level-2/delegated-acts/2024-436-performance-of-audits-for-very-large-online-platforms/articles/10/relations","act_url":"https://www.headlesslaw.com/dsa/level-2/delegated-acts/2024-436-performance-of-audits-for-very-large-online-platforms#art-10","source_line":"Commission Delegated Regulation (EU) 2024/436 · binding · OJ L, 2024/436, 2.2.2024 · dated 20 Oct 2023 [in force]","attribution":{"prepared_by":"European Commission","published_by":"Publications Office of the EU","published_in":"Official Journal of the European Union","document_type":"delegated_regulation","legal_nature":"binding_adopted","addressees":"not stated in the document","dates":{"document_date":"2023-10-20","published_on":"2024-02-02","entry_into_force":"2024-02-22","locators":{"document_date":"CELLAR 32024R0436 work_date_document","published_on":"CELLAR 32024R0436 official-journal-act_date_publication","entry_into_force":"CELLAR 32024R0436 resource_legal_date_entry-into-force (earliest)"}},"adoption":null},"context":{"act":{"work_id":"spaces/dsa/level-2/delegated-acts/2024-436-performance-of-audits-for-very-large-online-platforms","path":"/dsa/level-2/delegated-acts/2024-436-performance-of-audits-for-very-large-online-platforms","name":"Commission Delegated Regulation (EU) 2024/436","number":"2024/436","celex":"32024R0436","title_official":"COMMISSION DELEGATED REGULATION (EU) 2024/436 of 20 October 2023 supplementing Regulation (EU) 2022/2065 of the European Parliament and of the Council, by laying down rules on the performance of audits for very large online platforms and very large online search engines","document_date":"2023-10-20"},"position":{"kind":"article","key":"10","index":10,"articles":18,"annexes":2},"prev":{"path":"/dsa/level-2/delegated-acts/2024-436-performance-of-audits-for-very-large-online-platforms/articles/9","key":"9","title":"Article 9 — Audit risks analysis"},"next":{"path":"/dsa/level-2/delegated-acts/2024-436-performance-of-audits-for-very-large-online-platforms/articles/11","key":"11","title":"Article 11 — Quality of audit evidence"},"act_anchor":"#art-10"}},"provenance":{"official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02024R0436-20240202","check":{"result":"matched","checked_at":"2026-10-26","against":"EUR-Lex"},"repo_path":"spaces/dsa/level-2/delegated-acts/2024-436-performance-of-audits-for-very-large-online-platforms.md","unit_text_sha256":"2662d6cd8e77192c10ac0a36e60036a277fea6df381b7d024b720a266195c1ee","note":"the unit is a byte-exact part of the act page, whose check record covers it"},"unit":{"locator":"spaces/dsa/level-2/delegated-acts/2024-436-performance-of-audits-for-very-large-online-platforms/art-10","kind":"article","key":"10","heading":"Article 10 — Appropriate audit methodologies","text":"## <a id=\"art-10\"></a>Article 10 — Appropriate audit methodologies\n\n1. <a id=\"art-10-p-1\"></a>Without prejudice to the specific audit methodologies set out in Articles 13, 14, and 15, audits shall be performed by using appropriate auditing methodologies to reduce the assessed audit risks to a level that enables the auditing organisation to reach audit conclusions at a reasonable level of assurance.\n\n2. <a id=\"art-10-p-2\"></a>The audit report shall include a description of the audit methodologies designed by the auditing organisation prior to performing any audit procedures, including at least:\n\n    <a id=\"art-10-p-2-a\"></a>**(a)** the audit criteria, for assessing compliance with each audited obligation or commitment, defined on the basis of information pursuant to Article 5(1), point (a), and the materiality threshold tolerated and expressed in qualitative or quantitative terms, as appropriate;\n\n    <a id=\"art-10-p-2-b\"></a>**(b)** all tests and substantive analytical procedures and audit evidence that the auditing organisation intends to use to assess compliance for each audited obligation or commitment.\n\n    The audit report shall include a description of any changes to the methodologies used during the performance of the audit compared to the methodologies designed prior to performing audit procedures.\n\n3. <a id=\"art-10-p-3\"></a>Where an auditing organisation has reasonable doubts concerning the information assessed in the performance of the audit, in particular as regards information that has been presented by the audited provider, the choice and application of the methodology shall be adapted to afford that organisation the necessary audit evidence in accordance with Article 11.\n\n4. <a id=\"art-10-p-4\"></a>Reasonable doubts referred to in paragraph 3 shall be deemed to arise, in particular, in the presence of any of the following elements:\n\n    <a id=\"art-10-p-4-a\"></a>**(a)** professional judgment and scepticism in assessing information, including concerning internal controls of the audited provider, that leads the auditing organisation to formulate reasonable doubts;\n\n    <a id=\"art-10-p-4-b\"></a>**(b)** external indications pointing to audit risks, in particular reports from the European Board for Digital Services referred to in Article 35(2) of Regulation (EU) 2022/2065, guidance from the Commission including through guidelines referred to in Article 35(3) of that Regulation, and any other relevant guidance issued by the Commission with respect to the application of Regulation (EU) 2022/2065, and audit reports issued pursuant to codes of conduct or crisis protocols referred to in Articles 45, 46 and 48 of that Regulation;\n\n    <a id=\"art-10-p-4-c\"></a>**(c)** information related to events occurring during the performance of the audit, including crisis situations, that require additional actions from the audited provider to ensure compliance with certain audited obligations or commitments.\n\n5. <a id=\"art-10-p-5\"></a>Audit procedures shall include at least:\n\n    <a id=\"art-10-p-5-a\"></a>**(a)** the performance of tests and substantive analytical procedures for the internal controls the audited provider has put in place for each of the audited obligations or commitments;\n\n    <a id=\"art-10-p-5-b\"></a>**(b)** the performance of substantive analytical procedures to assess compliance with each audited obligation and commitment, including as regards algorithmic systems;\n\n    <a id=\"art-10-p-5-c\"></a>**(c)** the performance of tests, including with respect to algorithmic systems, concerning the audited obligations and commitments in relation to which the auditing organisation has reasonable doubts, as referred to in paragraph 4, and concerning audited obligations and commitments where the auditing organisation deems necessary to perform tests in its choice of methodology pursuant to paragraph 1.\n\n6. <a id=\"art-10-p-6\"></a>Where obligations or commitments referred to in Article 37(1) of Regulation (EU) 2022/2065 require the audited provider to report certain information publicly, the auditing methodologies shall include an assessment of whether the reported information is free from material error or omission which might otherwise render them misleading.\n\n","marks":[],"text_hash":"2662d6cd8e77192c10ac0a36e60036a277fea6df381b7d024b720a266195c1ee","revision":1}}