The European Commission says the following platforms now fall under the Digital Securities Act (DSA). According to an EU statement, ChatGPT, Reddit, and Roblox now qualify as Very Large Online Platforms (VLOPs) or Very Large Online Search Engines (VLOSEs) because they have topped 45 million users on average each month.
Under DSA rules, large platforms must assess and mitigate systemic risks stemming from their services and algorithmic systems related to the dissemination of illegal content, negative effects on minors, users’ physical and mental well-being, fundamental rights, electoral processes, and public security.
These platforms now have 4 months to comply with the DSA so the clock is ticking.
While ChatGPT is a true search engine with the platform providing other services, the EU has determined it is a hybrid system and lumped it into the search category. ChatGPT is already in the AI Act pipeline so this may emerge as double regulation. ChatGPT must now risk-assess for illegal content, adding more compliance tasks for the platform in Europe. The EU could have targeted search only for ChatGPT, but the Commission chose to gloss over that option.
Targeting Reddit and Roblox is more clear-cut, but all platforms will need to dedicate more resources to operate on the continent.
In total, the EU has determined that 28 platforms fall under the DSA. Including names like Meta, Google, Apple, Microsoft, and more. Many are firms headquartered outside the EU.
An industry-commissioned 2025 study put the DSA cost for a large US firm in the regime at about $150 million a year.
DSA transgressions may trigger a penalty of up to 6% of the firm’s worldwide revenue.