Never lose a customer to a missed message
An AI agent trained on your own business, replying in seconds, in any language, on every channel your customers already use.
The European Commission has placed ChatGPT in the top tier of its online platform rulebook. The ChatGPT DSA designation, announced on 31 August 2026, classifies OpenAI’s chatbot search function as a Very Large Online Search Engine under the Digital Services Act. Reddit and Roblox were designated Very Large Online Platforms on the same day. All three now face the strictest obligations the law contains.
Twenty-eight services now carry that status in Europe. Until this week, the list read mostly as a roll call of social networks, marketplaces and app stores. A general-purpose chatbot and a children’s gaming platform did not sit on it.
What the ChatGPT DSA designation actually means
The Digital Services Act sets a single numerical trigger. A service that averages at least 45 million monthly users inside the European Union crosses into the highest compliance tier. Platforms report those figures themselves, and the Commission then verifies and acts on them.
ChatGPT’s search function averaged roughly 159 million monthly active users in the bloc over the six months ending March 2026, according to the figures the Commission relied on. Reddit reported 57.2 million. Roblox reported around 48 million. Each number sits above the threshold, so each triggered a designation.
The split in labels matters. ChatGPT was designated as a search engine rather than a platform, because the Commission assessed its search feature. Reddit and Roblox were designated as platforms. The obligations overlap heavily, but the framing tells you which part of each product Brussels is looking at.
Why Reddit and Roblox met the DSA threshold too
Reddit’s European audience has grown steadily as its content surfaced more often in general web search. Roblox has a different profile: a very young user base, user-generated worlds, and an in-game economy. Regulators have paid close attention to both characteristics.
Roblox’s designation is the one to watch. The DSA’s minor-protection provisions were written with exactly this kind of service in mind, and the company must now assess and document how its design choices affect children in Europe. That is a heavier lift than a policy update.
The obligations that follow a top-tier designation
Designated services have four months to comply. That clock runs to the end of November 2026. In that window each company must build out a compliance programme covering several areas.
- Annual systemic risk assessments covering illegal content, the protection of minors, effects on users’ mental and physical wellbeing, fundamental rights, electoral processes and public security.
- Risk mitigation measures that respond to whatever those assessments find.
- Independent audits of compliance, paid for by the company and conducted by an outside firm.
- Data access for regulators and vetted researchers, so outside parties can study how the service behaves.
The Commission supervises this tier directly rather than leaving it to national regulators. That is a deliberate design choice in the law, and it removes the forum-shopping that shaped earlier EU tech enforcement.
How the DSA designation sits alongside the EU AI Act
Two separate European laws now touch the same product. The DSA governs how a service handles content, risk and users. The AI Act governs how an AI system is built, documented and disclosed. OpenAI has to satisfy both, and the requirements do not map onto each other neatly.
We covered the transparency provisions that took effect this summer in our report on the EU AI Act transparency rules. Read alongside this designation, the direction is consistent: Europe is regulating AI products through general platform law as well as through AI-specific law.
The commercial context matters too. AI companies are raising and spending at a scale that makes European compliance costs a rounding error, as the DeepSeek funding round illustrated this week. Compliance is a schedule problem for these firms, not a budget problem.
Where the DSA compliance clock goes from here
Expect three things before December. First, published risk assessments, which tend to arrive close to the deadline. Second, product changes in Europe that arrive quietly, particularly around age assurance on Roblox. Third, a period in which the Commission decides whether what it received is adequate.
Enforcement, if it comes, follows later. The DSA allows fines of up to 6% of global annual turnover for serious breaches, and the Commission has shown it will open proceedings against designated services. Nothing suggests that is imminent here. The immediate story is a deadline, not a penalty.
For anyone building on these platforms, the practical effect is narrower than the headlines suggest. Users in Europe should see more reporting options, clearer explanations of recommendation systems, and stronger defaults for younger accounts. Users elsewhere may see some of the same changes, because splitting a product by region is expensive.
Questions readers are asking about the DSA designation
Does the ChatGPT DSA designation apply outside the EU?
No. The Digital Services Act applies to services offered in the European Union. Companies often roll changes out globally for simplicity, but the legal obligation stops at the EU border.
Why was ChatGPT designated a search engine rather than a platform?
The Commission assessed ChatGPT’s search function, which retrieves and presents information from the web. That fits the DSA’s definition of an online search engine, so the Very Large Online Search Engine label applied.
When exactly does compliance start?
Designated services get four months from designation. For these three, that runs to the end of November 2026.
What happens if a company misses the deadline?
The Commission can open formal proceedings, request information, and ultimately fine a service up to 6% of global annual turnover for serious infringements. In practice, enforcement usually begins with information requests.
How many services are now designated?
Twenty-eight services are designated as very large online platforms or search engines following this announcement.
Sources
- European Commission — Commission designates ChatGPT, Reddit, Roblox under Digital Services Act. https://ec.europa.eu/commission/presscorner/detail/en/ip_26_1772
- European Commission, Shaping Europe’s digital future — Commission designates ChatGPT, Reddit, Roblox under Digital Services Act. https://digital-strategy.ec.europa.eu/en/news/commission-designates-chatgpt-reddit-roblox-under-digital-services-act
- Euronews — EU places ChatGPT, Reddit and Roblox under strictest digital safety rules, 31 August 2026. https://www.euronews.com/next/2026/08/31/eu-places-chatgpt-reddit-and-roblox-under-strictest-digital-safety-rules
More of our technology and regulation coverage: the Pentagon’s new generative AI platform.
Verification your users actually receive.
Send one-time passcodes over WhatsApp with a single API call. Replio can generate, hash and verify the code for you.