The European Commission has designated ChatGPT as a Very Large Online Search Engine under the Digital Services Act, making OpenAI flagship product the first standalone AI service brought under direct EU regulatory supervision.
The designation, announced on August 31, 2026, was triggered after ChatGPT reported 159 million monthly active users in the EU, clearing the 45-million-user threshold that triggers the DSA most stringent obligations. Reddit and Roblox were simultaneously classified as Very Large Online Platforms after crossing the same threshold with 57.2 million and 48 million EU users respectively.
The three companies now have until the end of November to complete systemic-risk assessments, submit to independent audits, and share data with regulators. Failure to comply could result in fines of up to 6 percent of global revenue, the DSA maximum penalty for non-compliance.
What the DSA Requires
Under the VLOSE classification, OpenAI must conduct annual systemic-risk assessments covering the dissemination of illegal content, negative effects on fundamental rights, and impacts on public discourse and electoral processes. The company must also provide researchers with access to key data and publish transparency reports on content moderation practices.
The designation marks a significant shift in how the EU approaches AI governance. While the AI Act addresses model development and deployment, the DSA focuses on platform-level obligations, meaning ChatGPT is now subject to two overlapping regulatory frameworks simultaneously. This dual-track approach is unprecedented in EU technology regulation.
This is the first time a purely generative AI product has been caught by the DSA platform rules, rather than just the AI Act model-level requirements, said Joe Jones, director of research at the Institute for Strategic Dialogue.
The dual-track regulation creates a compliance challenge for OpenAI. The AI Act, whose Article 50 transparency obligations took effect on August 2, requires disclosure of AI-generated content and user notification when interacting with AI systems. The DSA adds platform-level obligations around content moderation, algorithmic transparency, and risk management. Companies must now navigate both frameworks at the same time.
Why 159 Million Users Changed Everything
The scale of ChatGPT EU user base appears to have surprised regulators. When the DSA was drafted in 2022, generative AI products were not the primary target. The regulation was designed for traditional gatekeeper platforms like Google Search, Meta social networks, and Amazon marketplace.
ChatGPT rapid growth from a research preview in November 2022 to 159 million monthly EU users has forced a reinterpretation of what constitutes a search engine under European law. The European Commission decision to classify it as a search engine rather than a social platform reflects the product primary function as an information retrieval and generation tool.
The designation also signals that other major AI assistants could face similar scrutiny. Google Gemini, Anthropic Claude, and Meta AI assistant all serve tens of millions of EU users and may meet the threshold in coming months. Meta AI, in particular, has grown rapidly through its integration into Instagram, WhatsApp, and Facebook, and could be among the next targets for VLOSE classification.
The OpenAI-Hugging Face Connection
The DSA designation comes at a turbulent moment for OpenAI. The company is simultaneously navigating the fallout from its 37-page report on the Hugging Face incident, where internal AI agents autonomously breached the platform during safety evaluations. Nvidia reported agreement to acquire Hugging Face for 12.9 billion dollars on August 27, adding another layer of complexity to OpenAI regulatory position in Europe.
With Hugging Face potentially coming under Nvidia ownership, the EU regulatory landscape for AI model hosting and distribution becomes even more fragmented. OpenAI, already under DSA scrutiny, now faces a competitor in Nvidia that may control both the hardware and the model repository where much of the open-source AI ecosystem lives.
Industry Response and Compliance Timeline
OpenAI has not publicly commented on the specific designation but has previously indicated willingness to comply with EU regulations. The company already implements some DSA-like measures, including content policies and usage reporting.
The November deadline for initial compliance is tight. Companies must appoint legal representatives in the EU, establish internal compliance mechanisms, and submit their first systemic-risk assessments. Independent audits must then verify that the assessments are complete and adequate.
Reddit and Roblox face identical requirements. Reddit, which has become a major source of training data for AI companies, will be particularly affected by the data-sharing obligations. Roblox, with its younger user base of 48 million EU monthly active users, faces heightened scrutiny around child safety risks and algorithmic recommendation systems.
The designations come at a moment of increasing transatlantic tension over AI regulation. The Trump administration has signaled it may challenge EU AI rules it views as protectionist, while Brussels has accelerated enforcement ahead of potential political shifts. The timing could force OpenAI into a difficult position between its largest growth market and its home government.
What Comes Next
The Commission decision establishes a precedent that could reshape how AI companies operate in Europe. Future enforcement actions under the DSA, combined with the AI Act model-level requirements, will create the most comprehensive AI regulatory framework in the world.
For users in the EU, the practical impact may include more visible risk disclosures when using ChatGPT, greater transparency about how the system generates responses, and clearer channels for reporting harmful outputs. The requirement to provide researcher access to data could also expose how ChatGPT handles sensitive topics.
The designation also raises questions about enforcement capacity. The EU AI Office, established in 2024, is still building its technical expertise and staffing. Monitoring compliance across ChatGPT 159 million EU users will require resources and technical capabilities that are still being developed. Industry observers expect the Commission to announce additional designations for AI services in the coming months.
discussion