This is arguably required by Article 30 of the EU Digital Services Act.