The EU DSA Big Tech regulations took a major step forward as European Union officials officially expanded their strictest regulatory framework to cover OpenAI’s ChatGPT, Reddit, and Roblox. On August 31, 2026, the European Commission announced that ChatGPT has been designated as a Very Large Online Search Engine (VLOSE), while Reddit and Roblox have been designated as Very Large Online Platforms (VLOPs) under the landmark Digital Services Act. This decision forces these global digital platforms to adopt rigorous operational changes, independent oversight, and comprehensive risk mitigation strategies to continue servicing millions of users across European member states.
Regulatory Thresholds and Platform Classifications
The legal threshold for being categorized under the strictest tier of the Digital Services Act requires a digital platform or search engine to reach at least 45 million average monthly active users within the European Union. All three companies confirmed that their user metrics exceeded this regulatory benchmark. According to European Commission findings, ChatGPT reported an average of approximately 159 million monthly active EU search users for the six-month period ending in March 2026. Meanwhile, Reddit reported approximately 57.2 million monthly active users in the EU, and Roblox reported reaching roughly 48 million users across the region.
The specific classifications reflect the underlying mechanics of how users interact with each service. Because users publicly create, upload, and distribute interactive media and text content on Reddit and Roblox, both platforms meet the standard criteria for Very Large Online Platforms. Conversely, OpenAI’s integration of real-time web search functionality into ChatGPT prompted regulators to classify the AI tool as a Very Large Online Search Engine. This marks the first time a generative artificial intelligence chatbot has received the VLOSE designation, setting a historical precedent for how sovereign nations regulate conversational AI tools that double as primary information discovery engines.

Compliance Requirements and Risk Mitigation Directives
Following the official designation, OpenAI, Reddit, and Roblox have exactly four months to bring their internal systems into full compliance with the enhanced Digital Services Act requirements. The enforcement framework obligates these companies to systematically identify, analyze, and mitigate systemic risks inherent to their algorithmic recommendation systems and data architectures. Regulators are specifically targeting four core areas of public interest:
Illegal Content and Harmful Material: Implementing aggressive moderation pipelines to prevent the dissemination of illegal speech, pirated material, and dangerous content.
Child Safety and Youth Protection: Establishing strict age-verification safeguards, enhanced privacy defaults, and protective measures to shelter minors from exploitation or psychological harm.
Mental Health and Algorithmic Well-being: Auditing engagement-driven algorithms to curb addictive platform design choices that negatively impact physical and mental user health.
Public Security and Electoral Integrity: Protecting democratic processes and fundamental rights by actively suppressing coordinated disinformation campaigns and deceptive synthetic media.
To satisfy European Union oversight, the three tech firms must submit detailed risk assessment reports, submit to annual independent external audits, and grant regulatory authorities full transparency into their underlying algorithms and data-handling practices. These compliance mandates represent a substantial administrative shift that will force all three entities to invest heavily in engineering resources, localized trust and safety teams, and legal infrastructure across European jurisdictions.
Financial Risks and Future Enforcement Impact
The expansion of the EU DSA Big Tech regulations underscores the significant financial stakes involved for tech companies operating at scale within the European market. Non-compliance with the Digital Services Act carries severe statutory penalties, with maximum fines reaching up to six percent of a non-compliant company’s total annual global turnover. For multi-billion-dollar entities and venture-backed startups alike, such fines pose an unprecedented threat to global revenues and operational margins.
With the addition of ChatGPT, Reddit, and Roblox, the European Union’s list of high-scrutiny VLOSE and VLOP entities now stands at twenty-eight platforms. This enforcement action highlights Brussels’ firm resolve to hold dominant digital networks accountable for user safety, algorithmic transparency, and information integrity. As these companies navigate their four-month compliance window, the global tech industry will closely observe how these regulatory adjustments reshape user privacy, AI search dynamics, and content moderation policies worldwide.
Ultimately, the enforcement of these EU DSA Big Tech regulations establishes that operating an expansive digital platform within the European Union requires adhering to strict, mandatory standards of public oversight and corporate accountability.

