Summary

  • On 31 August 2026, the European Commission designated ChatGPT as a very large online search engine and Reddit and Roblox as very large online platforms. Its public list records 159.1 million, 57.2 million and 46.6 million average monthly active recipients respectively.
  • The Commission says the extra duties apply by January 2027, while DSA Article 33 starts the four-month period from notification to the provider. The public list still marks all three designation decisions as unavailable, so an outsider cannot yet reproduce the exact application date or inspect the detailed service boundary.

Three services crossed the same numerical threshold. They did not enter the same operational category.

The European Commission’s 31 August announcement classifies ChatGPT as a very large online search engine, or VLOSE. Reddit and Roblox are very large online platforms, or VLOPs. All declared at least 45 million average monthly active recipients in the European Union. From that common gateway, the Commission says, additional Digital Services Act obligations will apply by January 2027.

The month is public. The exact day is not.

That difference is not clerical. Article 33 of the DSA does not say that the extra obligations begin four months after a press release or a webpage update. It says they apply four months after notification of the designation decision to the provider. The checked Commission supervision list records the designations on 31 August, but for each of the three it also says the decision is not yet available.

The decisions may exist. The providers may already have them. Notification may have occurred on 31 August. None of those possibilities is the same as a public date that a customer, researcher, auditor or national authority can independently reproduce.

One threshold, three public records

The Commission’s list supplies more detail than the announcement. It records 159.1 million average monthly active recipients for ChatGPT, 57.2 million for Reddit and 46.6 million for Roblox. It names OpenAI Ireland Limited as the relevant EU establishment for ChatGPT and Reddit Netherlands B.V. for Reddit. For Roblox, it identifies the Netherlands because the service appointed a legal representative there.

Those numbers answer one narrow question: did the service meet the Article 33 threshold? They do not rank the services by attention, loyalty, revenue, registered accounts or social influence. Nor should the apparent precision hide the underlying measurement object. The DSA requires a figure for each online platform or search engine, averaged over six months. The Commission’s user-number guidance exists because “active recipient” is a legal counting concept, not a universal audience metric.

The three figures also sit at very different distances above the threshold. That matters for future monitoring, but it does not create stronger or weaker legal status today. A service at 46.6 million and one at 159.1 million are both designated once the threshold and decision conditions are met. Termination is a separate act after a service remains below the threshold for an uninterrupted year.

A clean public record would keep the measurement period, method version and service boundary attached to each number. Without those fields, a later update can look like growth or decline when it may reflect a different window, counting rule or product perimeter.

The date controls a chain of later duties

The missing exact date propagates.

By the application date, a designated service must perform a service-specific systemic-risk assessment. Article 34 includes illegal content, fundamental rights, civic discourse, elections, public security, gender-based violence, health, minors and physical or mental well-being. Article 35 requires proportionate mitigation. Article 37 adds independent audits. Article 40 creates regulated data-access routes. Article 41 requires a compliance function independent from operations and connected to management.

Article 42 then sets another clock: the enhanced transparency report is due no later than two months after the additional obligations begin, and at least every six months after that. A missing public notification date therefore obscures not one deadline but the anchor for a sequence of expected records.

The Commission’s VLOP and VLOSE overview explains the four-month transition in plain terms. Its transparency overview shows how user-number disclosures, risk reports, audit reports and implementation reports occupy different layers. What neither page can substitute for is the service-specific decision and notification receipt.

This is not evidence of non-compliance. The first relevant deadlines are still ahead. It is evidence that the public cannot yet calculate those deadlines to the day from the same official record that announces them.

“ChatGPT” is a label; the decision supplies the perimeter

The service boundary deserves equal attention. The Commission list calls the designated service ChatGPT and classifies it as a search engine. That tells the public the legal category, but not the complete reasoning that places particular functions inside the designated service.

The distinction matters because a product name can contain multiple interfaces and capabilities. A designation attaches to a service, not automatically to every corporate product, model, API or future feature sharing a brand. The unavailable decision may answer the boundary clearly. Until it is published, outside observers should not widen or narrow it by inference.

The same discipline applies to Reddit and Roblox. Their classification as VLOPs does not make their interaction patterns interchangeable. A discussion service, an immersive creation environment and an AI-assisted search interface can generate different risks, evidence and mitigation choices. Article 34 explicitly requires an assessment specific to the service.

Designation is therefore neither a safety certificate nor a finding of wrongdoing. It is an authority state that activates a stronger governance regime for a defined service after a defined interval.

A designation-handoff receipt

The Commission should publish a compact receipt alongside each entry. It need not expose confidential submissions, trade secrets or security detail.

The first row should name the provider legal entity, designated service and VLOP or VLOSE classification. The second should identify the average-recipient figure, measurement period, denominator and method version. The third should link the Commission decision and record its date. The fourth should record notification to the provider, the European Board for Digital Services and the relevant coordinator as separate events.

From those events, the receipt can state the exact application date and the first expected risk-assessment, audit and transparency-report milestones. A later correction, review, challenge, amended boundary or termination should append a new state rather than silently replacing the old one.

This receipt is my editorial recommendation, not a current EU requirement. It applies the authority chain in The Policy Mirror, the execution test in Running Code Primary and the separation of evidence from institutional messaging in Why BTW Media Exists.

Europe has already made the consequential decision: three more services sit inside the DSA’s systemic-risk regime. Publishing the exact handoff would not weaken that authority. It would make the authority reproducible.

Sources