EU Names ChatGPT, Reddit, and Roblox to Its Toughest Rulebook

On August 31, 2026, the European Commission designated ChatGPT a Very Large Online Search Engine and Reddit and Roblox Very Large Online Platforms under the Digital Services Act, each having self-reported at least 45 million average monthly EU users. All three now face the DSA's toughest tier: systemic-risk assessments, independent audits, ad transparency, and a non-profiled recommender option, on a four-month clock (European Commission).

Key Highlights

• The Commission designated ChatGPT a VLOSE and Reddit and Roblox VLOPs on August 31, 2026, each self-reporting at least 45 million average monthly EU users (European Commission).
• All three have four months to meet the full obligation set: systemic-risk assessment, an internal compliance function, annual independent audits, regulator/researcher data access, a non-profiled recommender option, and a public ad repository (Commission VLOP/VLOSE page).
• Reddit (NYSE: RDDT) and Roblox (NYSE: RBLX) are publicly traded and directly named; OpenAI/ChatGPT is private (Reddit 8-K, Roblox 10-Q).
• Roblox's own 10-Q discloses DSA penalty exposure up to 6% of annual global revenue and a Dutch minor-safety investigation opened in January 2026 (Roblox Form 10-Q).
• Neither RDDT nor RBLX has filed a specific dollar cost estimate for VLOP compliance as of this review; Roblox describes the cost trend only qualitatively.

Scale, Not Conduct, Triggers the Label

Designation is a function of user count, not wrongdoing. "These services declared that they reach at least 45 million average monthly users in the EU," the Commission said, giving the three "four months to comply" (European Commission, August 31, 2026). That threshold, roughly 10% of the EU population, has anchored VLOP/VLOSE status since February 2023 (Commission VLOP/VLOSE policy page). OpenAI discloses ChatGPT search averaged roughly 159.1 million monthly EU users through March 31, 2026, over three times the threshold (OpenAI Help Center, EU DSA disclosure); Roblox sits closer to the line, at roughly 48 million.

The Obligation Checklist

Designated services must "identify, analyse, and assess systemic risks" tied to illegal content, fundamental rights, electoral processes, public security, and "protection of minors, and mental and physical wellbeing," then mitigate them, including by "changing their recommender systems" (Commission VLOP/VLOSE obligations page). They must stand up an internal compliance function, undergo independent audits "at least once a year," share data with regulators and vetted researchers, offer a non-profiled recommender option, and maintain a public ad repository, on top of baseline duties under Regulation (EU) 2022/2065 (EUR-Lex summary). Four months is short for a checklist Meta and Google needed the better part of a year to build the first time.

Regulatory catalysts don't wait for a convenient reading window. Get the next one first, free, one email when a new development breaks. Subscribe free.

Roblox's Filing Already Shows a Cost Line

This is the one name where "expect higher compliance costs" is not speculative. Roblox's Form 10-Q for the period ended March 31, 2026, states the DSA "imposes significant penalties for noncompliance, including fines of up to 6% of annual global revenues," and confirms the Dutch Authority for Consumers and Markets opened a formal DSA investigation into Roblox in January 2026 over "possible risks faced by minors," expected to run roughly a year (Roblox Form 10-Q). VLOP designation layers a mandatory minors-and-wellbeing assessment on top of that inquiry, it does not replace it. Reddit's most recent SEC filing, an August 2026 Form 8-K confirming its NYSE listing mechanics, contains no DSA-specific risk language (Reddit Form 8-K). Neither filing puts a dollar figure on VLOP compliance costs; Roblox's language stays qualitative, costs "expected to continue to increase and could become prohibitively expensive," with no number attached, itself the honest finding: a watch-list cluster, not a quantified line item yet.

Figure 1: All three share the same four-month runway, but the load differs, Roblox layers a minors-safety assessment onto an open Dutch probe, ChatGPT search clears the threshold by over 3x, and Reddit enters with no prior DSA risk disclosure on record. Source: European Commission, OpenAI, Roblox Form 10-Q, fetched August 31, 2026.

Ideas to Watch

• Roblox (NYSE: RBLX), minors and wellbeing risk assessment. Roblox's young user base puts it squarest under the DSA's minors/wellbeing obligation, layered onto the Dutch ACM's open probe. Watch the ACM outcome, expected around January 2027 (Roblox Form 10-Q).
• Reddit (NYSE: RDDT), recommender transparency and the non-profiled feed. Reddit's model runs on algorithmic surfacing; the mandatory non-profiled feed option is a product-design mandate, not just disclosure. Watch for a cost or product-change disclosure in Reddit's next quarterly filing (Commission VLOP/VLOSE obligations page).
• OpenAI/ChatGPT, VLOSE-specific audit and ad-repository rules. ChatGPT is the first generative-AI product designated a VLOSE. OpenAI is private, so there is no direct equity angle; the angle is precedent for any future AI-search designation (OpenAI DSA disclosure).
• Compliance-cost materiality, a genuine open question. Neither RDDT nor RBLX has filed a dollar estimate; given both companies' scale, incremental audit and transparency costs may prove immaterial to platform revenue, as they largely did for Meta and Google.
• Enforcement-posture read-through. The Commission fined AliExpress €550 million and flagged TikTok for minor-safety breaches this year, while resolving X's case via an accepted action plan. Watch which posture applies to this trio (Commission VLOP/VLOSE news feed).

The honest framing is a watch-list event with one concrete test case, Roblox's Dutch probe, not a uniform, quantified catalyst across all three names. Designation triggers investigative powers and a deadline, not a finding of wrongdoing, and none of the three has an actual fine or quantified compliance budget on record yet. Know a reader tracking platform regulation on both sides of the Atlantic? Forward this one along. Seeing a regulatory angle worth tracking next Monday? Hit reply.

Related analysis

Read next: The U.S. Tried This Grid Equipment Ban Before. It Didn't Stick.

Read next: The SEC's EU Debt Proposal Skips a Line It Used for 22 Years

The Free Markets Report is provided by Lead-Lag Publishing, LLC. All opinions and views mentioned in this report constitute our judgments as of the date of writing and are subject to change at any time. Information within this material is not intended to be used as a primary basis for investment decisions, and should also not be construed as advice meeting the particular investment needs of any individual investor. Trading signals produced by The Free Markets Report are independent of other services provided by Lead-Lag Publishing, LLC, or its affiliates, and the positioning of accounts under their management may differ. Please remember that investing involves risk, including loss of principal, and past performance may not be indicative of future results. Lead-Lag Publishing, LLC, its members, officers, directors, and employees expressly disclaim all liability with respect to actions taken based on any or all of the information in this writing.