EUROPE • BEYOND THE HEADLINES

A continent in conversation.

Institutions / Analysis · European Union

EU adds ChatGPT, Reddit and Roblox to stricter DSA tier, but the public record still leaves key January details open

The European Commission’s 31 August 2026 DSA designations place ChatGPT, Reddit and Roblox in the EU’s stricter supervisory tier. The record shows a four-month compliance window and direct Commission enforcement powers, but not yet the full decision texts or exact January deadline.

The European Commission’s 31 August 2026 designations of ChatGPT, Reddit and Roblox changed their regulatory status under the Digital Services Act, not their legal guilt. The Commission’s public notice says ChatGPT was designated a Very Large Online Search Engine, while Reddit and Roblox were designated Very Large Online Platforms under the DSA, and the Commission’s designated-services list records the same date for all three services (Commission notice, designated-services list).

What changed is the supervisory tier. According to the Commission, these services crossed the DSA threshold because they declared at least 45 million average monthly users in the EU (Commission notice). The list page gives service-specific figures of 159.1 million for ChatGPT, 57.2 million for Reddit and 46.6 million for Roblox, but it also says those numbers were reported by the providers and are without prejudice to the Commission’s assessment of the methodology (designated-services list). That caveat matters because the public record retrieved here still does not include the full designation decisions.

The deadline is politically clear but legally incomplete in the public record. The Commission says designated VLOPs and VLOSEs become subject to the DSA’s additional obligations four months after notification of the designation decision, and its 31 August notice describes that deadline for these services as falling in January 2027 (Commission notice, DSA enforcement framework). But the retrieved documents do not give the exact notification date or exact calendar day in January. That means outside readers can say a compliance window is running, but cannot yet pin it to a specific deadline from these records alone.

The substantive shift is broader than a label. The Commission says the extra DSA duties include assessing and mitigating systemic risks linked to the service and its algorithmic systems, with cited risk areas including illegal content, negative effects on minors, users’ physical and mental well-being, fundamental rights, electoral processes and public security (Commission notice). The analytical point is that the DSA is treating these three services first as large EU information intermediaries with systemic reach, even though they operate in different product categories.

Enforcement also changes once a service is in this tier. The Commission’s list page says designated VLOPs and VLOSEs are supervised by the Commission, and the Commission’s enforcement framework says it may open an investigation when monitoring or other reliable sources raise a suspicion of infringement. The same framework lists requests for information, interviews and inspections among its tools, and says a non-compliance decision can lead to fines of up to 6% of a provider’s global annual turnover (designated-services list, DSA enforcement framework). None of that, by itself, shows that any of the three services is already under investigation.

National authorities still matter, but in a defined way. The designated-services list identifies Ireland as the Digital Services Coordinator for ChatGPT and the Netherlands for Reddit and Roblox; for Roblox, it also notes an EU legal representative in the Netherlands (designated-services list). The enforcement framework adds that inspections require consultation of the Digital Services Coordinator in the member state of establishment, and any temporary restriction of access to a service is a last-resort step that goes through the national judicial authority in that state (DSA enforcement framework). So the practical map is shared: Brussels leads direct supervision, but Dublin and the Dutch authorities remain part of the enforcement chain.

For readers tracking what comes next, the most important missing evidence is the unpublished decision text. Until that appears, the public record establishes the designations, the four-month structure and the Commission’s general powers. It does not yet establish the detailed legal reasoning for each designation, the exact January 2027 compliance day, any completed risk-mitigation measures, or any immediate enforcement action against ChatGPT, Reddit or Roblox (Commission notice, designated-services list, DSA enforcement framework).

What the DSA designation changes. A legal status changed; Deadline, but exact day unclear; Brussels leads, states still matter.
Original explanatory diagram. AI-assisted text and layout by Flor News Desk; based on the source records linked in this article. Flor News Desk