The EU Gave Researchers a Right to Audit Big Tech. TikTok Says No Through the Procedure.

Dr. Adriana Iamnitchi watched Romania's first-round presidential results from her office at Maastricht University in November 2024. Călin Georgescu, who had been polling in the single digits, was suddenly ahead. She knew the story behind the numbers was happening on TikTok. She suspected she would never get to study it.

A year later, on October 28, 2025, she tried. Iamnitchi, who chairs computational social sciences at one of Europe's leading research universities, filed a formal request to TikTok for the raw data behind Romanian political content on the platform. She had a legal right to ask. The European Union's Digital Services Act, in force since February 2024, was written precisely so that vetted academic researchers could audit how platforms shape elections, spread illegal content, and target minors. The law calls these requests "research access" and treats them as part of a platform's compliance with EU rules.

TikTok said no. The company rejected the application on three procedural grounds, according to Iamnitchi's own write-up of the denial: she had not proved her status as an "established researcher," had not adequately explained any commercial interests, and had not met unspecified security requirements. Each of those tests is set, scored, and enforced by TikTok itself.

What TikTok would not let her see, according to Wired's reporting, is now a public record. Pro-Georgescu TikTok content accumulated roughly 120 million views before the November 2024 first round. Georgescu won 23% and advanced to a runoff. The Romanian Constitutional Court annulled the first round after declassified intelligence alleged that Russia had coordinated the online campaign to install him. Georgescu called the annulment a "formalized coup d'état" on his YouTube channel and was barred from running again. In the May 2025 rerun, the independent mayor Nicușor Dan defeated George Simion, who had taken over the Alliance for the Union of Romanians.

Two months after Iamnitchi's denial, TikTok itself disclosed that it had identified more than 116,000 accounts as potentially compromised and taken action against more than 27,000 accounts in a coordinated network promoting Georgescu and AUR. The company called the operation a "fake engagement vendor," language that describes the infrastructure of an influence campaign without ever using the word.

The DSA was passed after a decade of platform scandals: Cambridge Analytica, the congressional hearings on algorithmic radicalization, the research papers that had to rely on scraped data because the platforms would not hand it over. Its research-access provisions are the law's load-bearing wall, the idea that an outside expert, with platform-sized data, can verify what a platform says about itself. The Commission has used other DSA powers against the largest platforms; it has not yet used the research-access lever. Iamnitchi's denial is what a failed wall looks like in practice. The right exists; the remedy is in the platform's hands.

Iamnitchi told Wired that the last several years have been "tough" for scholars studying how social media shapes society. The Iamnitchi case is the proof: the people best placed to verify what a platform did during a foreign-backed election are the same people the platform can refuse to talk to.

The DSA has a regulator. The European Commission's digital services coordinator can investigate, fine, and order compliance. Whether it will use those powers on a research-access denial, rather than only on the larger fights over illegal content and child safety, is the open question. So far, the law has produced a queue of procedural "no"s and a single heavily-disclosed takedown that came after the election it was supposed to inform.

Each denial is a precedent. The mechanism is denial-by-procedure. The Commission has the tools; it has not used them on a research-access denial.