Access to social media platform data has become one of the central infrastructural questions for research in political communication. Over the past decade, platform data have underpinned a vast body of empirical scholarship on disinformation, election integrity, political advertising, and online harms. Yet at the very moment when the societal and political importance of such research is widely acknowledged as urgent, the conditions under which it can be conducted have become increasingly unstable.
This instability is often framed as a technical or legal problem: platforms change APIs, terms of service shift, access pathways close or reopen unpredictably, and regulatory requirements evolve. However, these “front door” access problems obscure a deeper dynamic. What researchers are currently experiencing is not merely a volatile environment, but an unfortunate combination of moving targets and moving politics. Platforms are changing data architectures and governance strategies, while policymakers are attempting to impose binding obligations on this very actors.
This article argues that the current turbulence in social media and platform data access should not be interpreted as evidence of regulatory failure or overreach. On the contrary, it is a sign that regulation is beginning to matter. Platform resistance, legal contestation and smokescreens, and procedural friction are not accidental side effects but predictable responses to a governance regime that seeks to reconfigure long-standing asymmetries of informational power. The risk at this juncture is not that regulatory frameworks are too ambitious, but that political and scholarly fatigue may lead to their premature abandonment.
Focusing on developments in the European Union, this article traces the evolution of data access governance from early voluntary arrangements to the legally binding obligations introduced under the Digital Services Act (DSA). It assesses the state of play as of early 2026, drawing on early implementation experiences, including the emerging realities of Article 40 data access (see also contributions by Ohme and Sellig in this Forum). It concludes by arguing that the task ahead is not to rethink the regulatory architecture from scratch, but to stand firm: to implement, monitor, and optimize the regulatory frameworks that have already been devised, while sustaining political pressure and developing complementary alternatives.