The norm expands capital requirements and improves protection for digital service users.