ChatGPT and Reddit now face EU's toughest online safety rules
The EU Commission classified ChatGPT, Reddit, and Roblox as "very large online platforms" under the Digital Services Act (DSA), triggering stricter compliance obligations All three services surpassed the 45 million monthly EU users threshold, subjecting them to fines of up to 6% of global revenue for non-compliance They have until the end of December to meet additional obligations, including removing illegal content and protecting minors' privacy and security This marks a significant expansion o
Analysis
TL;DR
- The EU Commission classified ChatGPT, Reddit, and Roblox as "very large online platforms" under the Digital Services Act (DSA), triggering stricter compliance obligations
- All three services surpassed the 45 million monthly EU users threshold, subjecting them to fines of up to 6% of global revenue for non-compliance
- They have until the end of December to meet additional obligations, including removing illegal content and protecting minors' privacy and security
- This marks a significant expansion of the DSA into the generative AI space, following an existing investigation into X's Grok chatbot
- The EU is simultaneously enforcing its AI Act and investigating Google over potential competition violations in AI services
Why It Matters
This decision represents a pivotal moment in AI governance, signaling that the EU is actively extending its digital regulatory framework to encompass generative AI platforms. For AI practitioners and companies operating in or targeting the European market, it underscores the growing compliance burden and the real financial risk of non-compliance—fines reaching 6% of global revenue are no theoretical threat. The move also highlights the EU's broader strategy of using existing digital legislation as a flexible tool to regulate emerging AI technologies before dedicated frameworks are fully operationalized.
Technical Details
- DSA Classification Threshold: Services with over 45 million monthly active users in the EU are designated as Very Large Online Platforms (VLOPs), triggering enhanced obligations under the Digital Services Act
- Compliance Obligations: VLOPs must implement measures for illegal content removal, protect minors' privacy and security, conduct systemic risk assessments, and submit to independent audits
- Enforcement Mechanism: Non-compliance can result in fines up to 6% of global annual revenue, as demonstrated by the €550 million fine levied against AliExpress in July 2026
- Regulatory Overlap: The EU is simultaneously applying the Digital Services Act, the AI Act (the world's first comprehensive AI regulation), and competition law to AI services, creating a multi-layered regulatory environment
- Timeline: Designated platforms have until the end of December to achieve compliance with the additional DSA obligations
Industry Insight
- AI companies expanding into the EU market must prioritize regulatory compliance as a core engineering and product requirement, not an afterthought—budget and timeline for DSA/AI Act compliance should be factored into product roadmaps from inception
- The EU's approach of applying existing digital laws to novel AI services creates regulatory uncertainty; companies should monitor enforcement patterns closely and engage proactively with regulators rather than waiting for formal designations
- The convergence of DSA, AI Act, and competition law enforcement suggests the EU is building a comprehensive regulatory stack for AI—multinational AI firms should develop a unified compliance strategy that addresses all three regimes simultaneously to avoid fragmented and costly reactive measures
Disclaimer: The above content is generated by AI and is for reference only.