EU designates ChatGPT, Reddit and Roblox as very large online platforms, four‑month deadline to comply

On 31 August 2026 the European Commission announced that OpenAI’s ChatGPT, Reddit and Roblox have been classified as very large online platforms (VLOPs) under the EU Digital Services Act (DSA). The designation subjects the three services to the bloc’s strictest safety obligations – mandatory removal of illegal content, specific protections for minors and new transparency requirements – and sets a compliance deadline of 31 December 2026. Non‑compliance can trigger fines of up to 6 % of a company’s global revenue, according to the Commission’s decision cited by Ars Technica.

New DSA duties for the three platforms

The Commission’s ruling makes clear that the three services must, within four months, put in place mechanisms to:

• Detect and remove illegal content promptly, as defined by EU law.
• Protect the privacy and safety of minors, including age‑verification tools and content‑filtering measures.
• Publish annual risk‑assessment reports and provide algorithmic‑transparency information to vetted researchers.

These obligations mirror those already imposed on other very large online platforms such as major social‑media giants, but the inclusion of a generative‑AI chatbot marks the first time an AI‑driven service has been brought under the DSA’s toughest regime.

Financial scale of the designated firms

Understanding the potential monetary impact of the fine cap requires a look at the latest publicly filed financial figures for Reddit and Roblox, the two companies that file with the U.S. Securities and Exchange Commission. OpenAI is privately held, so its financials are not disclosed in the packet.

Both Reddit and Roblox report revenues in the low‑to‑mid‑billion‑dollar range, meaning a 6 % fine could amount to tens of millions of dollars for each firm. The exact fine would be calculated on each company’s global revenue for the fiscal year in which a breach is identified, as stipulated by the DSA.

Implications for compliance and business operations

The four‑month window to meet the new obligations is unusually short for large technology firms that must redesign moderation pipelines, audit recommendation algorithms and implement age‑verification systems. For Reddit, a platform that already hosts user‑generated content at massive scale, the requirement to remove illegal material on a “prompt” basis may necessitate expanded moderation staff and upgraded AI‑based detection tools. The company’s 2026 six‑month net income of USD 456.8 million suggests it has earnings capacity to fund such upgrades, but the expense could compress margins if not managed carefully.

Roblox, primarily a user‑generated gaming platform, faces a different set of challenges. Its 2026 six‑month net loss of USD 429 million indicates ongoing profitability pressure. Adding mandatory minors‑safety safeguards – such as stricter in‑app purchase controls and content‑rating systems – could increase operating costs at a time when the firm is already working to return to profitability.

OpenAI’s ChatGPT, while privately held and therefore lacking disclosed financials in the packet, is known to be a high‑growth service with a global user base that crossed 45 million monthly EU users, according to the same Ars Technica article. The DSA designation therefore extends the EU’s existing framework for “very large online search engines” to a generative‑AI chatbot, creating a precedent for future AI services.

All three firms must also publish annual risk‑assessment reports that detail systemic risks posed by their services, a requirement that could expose internal policy debates and technical limitations to public scrutiny. The Commission’s decision notes that the obligations apply uniformly across the three platforms, regardless of their differing business models – a chatbot, a social‑media forum and a gaming ecosystem.

What remains unknown

The packet does not contain any statements from OpenAI, Reddit or Roblox confirming how they plan to meet the DSA requirements. It also does not disclose OpenAI’s revenue or profit figures, so the exact monetary exposure for ChatGPT under the 6 % fine cap cannot be quantified here.

Furthermore, the EU decision does not specify the methodology for calculating “global revenue” for privately held firms, nor does it detail any grace periods beyond the 31 December 2026 deadline. Companies may seek extensions or negotiate remediation plans, but such developments are not covered in the current sources.

Finally, the impact on third‑party developers and advertisers that rely on Reddit’s and Roblox’s platforms is not addressed in the available material. Stakeholders will likely monitor how the new compliance costs are passed through to users or partners in the months ahead.

In sum, the European Commission’s 31 August 2026 designation brings the EU’s most stringent online‑safety rules to a generative‑AI service for the first time and re‑affirms the regime’s reach over established social and gaming platforms. With a compliance deadline of 31 December 2026 and a fine ceiling of 6 % of global revenue, the decision adds a concrete financial risk to the operational challenges already faced by ChatGPT, Reddit and Roblox.