EU Hate Speech Laws: What’s Illegal, Penalties, and Platform Duties

EU hate speech laws require every member state to criminalize public incitement to violence or hatred against people based on race, color, religion, descent, or national or ethnic origin. The baseline comes from Council Framework Decision 2008/913/JHA, which each country writes into its own criminal code.¹ Certain forms of genocide denial fall within the same regime, and online platforms carry separate duties under the Digital Services Act to act on illegal content once it is reported.

What Speech Is Illegal

Two words in the Framework Decision do most of the work: “publicly” and “inciting.” Private conversations sit outside the criminal mandate, and merely offensive or controversial speech is not enough. The speaker must be encouraging hostility in a way that could move an audience toward violence or hatred against a protected group.¹

The same conduct is criminal when carried out by distributing leaflets, images, or other material to a wide audience. Prosecutors look at intent and method of distribution. A social media post seen by thousands is treated very differently from a remark at a dinner table. Courts weigh context: the size of the audience, the volatility of the social climate, and whether the words were calculated to provoke action rather than express a viewpoint.

Member states have some room to narrow this. The Framework Decision allows each country to limit criminal liability to conduct that is either likely to disturb public order or that is threatening, abusive, or insulting.¹ Not every member state criminalizes the exact same range of speech, but all must reach at least the baseline of public incitement to violence or hatred.

Who the Law Protects

The Framework Decision covers five characteristics: race, color, religion, descent, and national or ethnic origin.¹ Only speech targeting people on those specific grounds triggers the EU-wide criminal obligation. Many member states go further in their own laws, adding protection for sexual orientation, gender identity, disability, or age, but those are domestic choices rather than EU requirements.

The Framework Decision includes a clarification about religion. The reference to religion is intended to cover, at minimum, conduct that uses religion as a pretext for targeting people based on their race, color, descent, or ethnic origin.¹ Anti-religious speech that is really a proxy for racial hostility gets no cover from the religion label.

A Proposed Expansion Has Stalled

The European Commission has proposed using Article 83(1) of the Treaty on the Functioning of the European Union to extend the list of “EU crimes” to cover all forms of hate speech and hate crime, which would add protections for characteristics such as gender and sexual orientation at the EU level.² A broad majority of the Council supported the initiative in 2022, but the file has stalled because extending the list requires unanimous agreement among all member states.

The European Parliament adopted a resolution in January 2024 criticizing the lack of progress and urging a procedural workaround to the unanimity requirement.² As of early 2026 the proposal remains stalled. The vast majority of member states already criminalize hate speech based on sexual orientation in domestic law, but only six member states fully cover sexual orientation, gender identity and expression, and sex characteristics in both hate speech and hate crime legislation.

Genocide Denial and Trivialization of War Crimes

EU law goes beyond incitement. Member states must also criminalize publicly condoning, denying, or grossly trivializing crimes of genocide, crimes against humanity, and war crimes as defined by the Statute of the International Criminal Court, when that conduct is directed against a protected group and carried out in a way likely to incite violence or hatred.¹ A separate provision covers the same conduct directed at crimes defined by the Charter of the International Military Tribunal, which principally means Holocaust denial.

This is where EU law most clearly parts ways with the American approach to free speech. Publicly denying or downplaying a recognized genocide can be a criminal offense carrying prison time if it targets a protected group and is likely to stir up hatred. Member states may choose to limit prosecutions to cases where the genocide or war crime has been established by a final decision of a national or international court, which gives countries room to narrow these provisions.

Criminal Penalties

Every member state must make hate speech offenses punishable by penalties that are effective, proportionate, and dissuasive. For the most serious offenses, the Framework Decision sets a floor: the maximum prison sentence available to judges must be at least one to three years.¹ That is a minimum standard for the maximum, meaning countries can and often do set higher ceilings. No member state may treat hate speech as a trivial infraction punishable only by a small fine.

Companies and other legal entities face liability too. When hate speech is committed for the benefit of an organization by someone in a leadership position, the organization itself can be held responsible. Penalties for legal entities must also be effective, proportionate, and dissuasive, and can include criminal or non-criminal fines.¹

Racist or xenophobic motivation must also be treated as an aggravating circumstance in sentencing for any criminal offense, or at least be something courts can take into account when setting penalties.¹ A physical assault committed out of racial hatred should draw a heavier sentence than the same assault without that motive.

Where Free Expression Sets the Limit

These laws do not exist in a vacuum. Article 11 of the EU Charter of Fundamental Rights guarantees freedom of expression, and Article 10 of the European Convention on Human Rights does the same while explicitly acknowledging that this freedom carries duties and responsibilities. The European Court of Human Rights uses two approaches when speech crosses into hateful territory.

For the most extreme cases, where speech aims to destroy the rights the Convention protects, the Court excludes it from protection entirely under Article 17, which prohibits abuse of Convention rights.³ Holocaust denial has been treated this way.

For less extreme hate speech, the Court allows restrictions only if they pass a three-step test: the restriction must be prescribed by law, it must pursue a legitimate aim such as protecting public safety or the rights of others, and it must be proportionate to that aim.³ Proportionality is where most contested cases are decided. A blanket ban on criticizing a religion would likely fail; a prosecution for urging a crowd to attack members of an ethnic group would likely pass. Courts weigh the severity of the speech against the severity of the punishment.

What Online Platforms Must Do

The Digital Services Act, which took full effect in 2024, creates a separate set of rules for online platforms.⁴ The DSA does not define what speech is illegal. That question still comes from the Framework Decision and national criminal laws. Instead, the DSA tells platforms what they must do once illegal content, including hate speech, appears on their services.

Every hosting service must offer an easy-to-use electronic mechanism for anyone to flag content they believe is illegal. A valid notice needs to explain why the content is illegal, identify the exact location of the material such as a URL, and include a statement that the reporter genuinely believes the notice is accurate.⁵ Once a platform receives a notice, it must process it in a timely and objective way and inform the reporter of its decision, including any appeal options.

Reports from designated “trusted flaggers” carry more weight. These are organizations with demonstrated expertise, independent from any platform, designated by national Digital Services Coordinators. Platforms are legally required to prioritize their reports and process them without undue delay.⁵

Enforcement runs through national Digital Services Coordinators, with the European Commission stepping in as enforcer for the largest platforms.⁴ Non-compliance penalties can reach up to 6% of a platform’s global annual turnover.⁶ The focus is on whether the platform’s systems and procedures are adequate, not on punishing individual users for what they posted.

1
EUR-Lex. Council Framework Decision 2008/913/JHA
2
European Parliament. Proposals to Extend the List of EU Crimes to All Forms of Hate Crime and Hate Speech
3
European Court of Human Rights. Factsheet – Hate Speech
4
European Commission. The Digital Services Act
5
EUR-Lex. Regulation 2022/2065 – Digital Services Act
6
European Commission. The Enforcement Framework Under the Digital Services Act