[Disclaimer: None of this is legal advice.] :)
Just read through the Digital Services Act (DSA) and wrote up some notes for Domain.
Basically, if you’re a micro/small business and classified as a host you’re exempt from all but the easiest-to-comply-with rules.
(Domain aims for compliance by default with DSA and GDPR with the terms and conditions and privacy policies it generates. Still a work in progress, mind you.)
https://codeberg.org/domain/app/src/branch/main-site#legal-matters-concerning-small-web-hosts