Brussels designated 3 services. The quiet one is a search engine

What the digital services act did on 31 August#

Three services, two labels, one threshold. On 31 August 2026 the European Commission designated ChatGPT a very large online search engine, and Reddit and Roblox very large online platforms, per the Commission's announcement and its press release. That takes the strictest tier of the digital services act to 28 services. Supervision splits: the Commission works with Coimisiún na Meán in Ireland for ChatGPT and Reddit, and with the Netherlands Authority for Consumers and Markets for Roblox.

Designation is not a judgement, it is a counting exercise, and the digital services act sets the trap plainly. Article 33(1) sets the bar at 45 million average monthly active recipients in the Union, and each service published its own number: 159.1 million for ChatGPT per OpenAI's own disclosure, 57.2 million for Reddit per Reddit's help centre, and 46.6 million for Roblox per Roblox's DSA page.

Roblox cleared the threshold by 1.6 million people. A quiet quarter of drift either way and no designation happens, which tells you how much of this regime rests on a headcount each company reports about itself. That is the scent worth following: the digital services act begins with self declared arithmetic.

Why the digital services act calls it a search engine#

Reddit and Roblox were designated platforms, or vlop in the Commission's own shorthand, which is what they are. ChatGPT was designated a search engine. The Commission's reasoning is that it is a hybrid service which answers prompts by searching the web, and search is the function that counts.

Search marketers should not skim past that. A designated search engine carries transparency duties about how it ranks and recommends. Article 38 opens with the words "In addition to the requirements set out in Article 27", which pulls the recommender transparency duties of Article 27 across to search engines rather than leaving them behind with platforms.

A cunning piece of drafting, and the digital services act is not the only instrument in the room. the AI Act runs in parallel with its own penalties for general purpose model providers, capped at three per cent of worldwide turnover against the six per cent here. Two regimes, two ceilings, one company.

The four month window is the part that bites, and it is where dsa compliance stops being theoretical. Inside it each service has to complete a first systemic risk assessment, stand up an internal compliance function and prepare for an outside audit. Note what is not deferred: the supervisory fee is charged from designation, not from the deadline.

A PESTEL for each platform#

The three services share a label and almost nothing else. Run each through the same six lenses and the warren of obligations sorts itself into a shape you can act on.

Reddit's distinctive risk is structural. Reddit moderation is done by volunteers, more than 60,000 daily active moderators at its last published count, performing at least 466 hours of unpaid work a day, valued by Northwestern researchers at a minimum of 3.4 million dollars a year. Article 16 notice and action, Article 17 statements of reasons and Article 20 internal appeals all now run through people who are not employees.

Roblox carries the heaviest legal load, and it arrived before Brussels did. The company already fields state attorney general suits in the United States, and on 20 August 2026 gave Australia's eSafety Commissioner a court enforceable undertaking. Britain's regulator has been there too: the Information Commissioner fined Reddit 14.47 million pounds over children's privacy failures in February 2026.

So the E in this PESTEL is not a gap in the analysis. It is a gap in the law, and it is worth naming rather than padding.

What actually changes for you#

Most coverage of a designation talks about the company. The real quarry is what a person in Dublin or Dortmund can now do that they could not do last week, because that is where the digital services act earns or loses its reputation.

One asymmetry matters more than any of this, and almost nobody has written it down. Articles 20 to 28 sit in a chapter headed "Additional provisions applicable to providers of online platforms". ChatGPT is not an online platform, it is a search engine, so the internal appeal and the free out of court body do not reach it at all. Articles 16 and 17 do, because they bind hosting services generally. Reddit and Roblox users get the full ladder; ChatGPT users get the first two rungs. Be honest about what else is new. Notice and action, statements of reasons and internal appeals have applied to these services since February 2024 as ordinary platforms. Designation adds the heavy tier to all three: systemic risk assessment, an independent annual audit, researcher data access, a public ad repository, and a recommender option that does not profile you.

That last one is the sleeper. Every statement of reasons lands in the Commission's public transparency database, and 42 per cent of the decisions logged there are fully automated. A right to a human appeal against a machine decision is a different product to the one users have now.

Age checking is where users will feel it first, and roblox age verification is the sharpest case. Reddit's EU age checks took effect on 24 June 2026, two months before designation, with 13 to 15 year olds locked to the most protective settings. Roblox age verification through facial age estimation has been rolling toward mandatory for chat features, per the company's own explainer. The technology is not exact: NIST's evaluation put mean absolute error at 3.1 years across six algorithms on adult dominated visa photos, improved from 4.3 years in 2014, but still years wide at the point where the law draws a line at 18.

What changes for marketers#

There is an opportunity buried in the obligation, and marketers can forage in it. It is Article 39.

A designated service has to publish a searchable repository of every advert it carries: the creative, who paid, the targeting parameters used and the reach achieved. Read that as a competitor doing your media research for you, in public, on a schedule. Any team that treats it as a compliance artefact rather than an intelligence feed is leaving the best free dataset of the year on the table.

The constraint side is Articles 26 and 28: no advertising profiled on minors, and none built on special category data. On Roblox, where the audience skews young, that removes targeting many plans currently assume.

The market context matters as much as the rules. Roblox's European business is growing: 304 million dollars of revenue in the second quarter of 2026, 21 per cent of the total, against 204 million and 19 per cent a year earlier, per its Q2 supplemental materials. Reddit's European engagement is going the other way.

Reddit reaches the heavy tier just as its European growth stalls, and it does so carrying licensing deals with Google and OpenAI worth tens of millions a year against advertising revenue of 2.06 billion dollars in 2025. OpenAI, meanwhile, projects 2.5 billion dollars of advertising revenue this year and has begun testing ads in ChatGPT. Its newest and most valuable revenue line is the one Articles 26, 28 and 39 regulate most tightly.

Reddit users spent the morning of the designation discussing their own designation, which is a fair summary of why reddit moderation is hard to fix from head office.

The money, and the court that unpicked it#

Two numbers govern behaviour under the digital services act, and only one of them is settled.

The fine is settled. Article 74 allows up to six per cent of total worldwide annual turnover, and the Commission has used it. For Roblox, six per cent is roughly 293 million dollars, about 19.5 per cent of the 1.5 billion it paid creators through its developer exchange in 2025 per its annual report, and near enough one quarter's free cash flow.

The fee is not settled. Article 43 lets the Commission charge an annual supervisory fee capped at 0.05 per cent, and the pot has grown from 45.24 million euro for 2023 to 58.2 million for 2024, per the EUR-Lex summary. Then the General Court annulled the fee decisions for Facebook, Instagram and TikTok, holding that the method for counting recipients should have been adopted as a delegated act rather than annexed to implementing decisions. The court kept the annulled decisions in effect for no more than twelve months while the Commission fixes the machinery.

Note the wording trap if you write about this yourself. The EUR-Lex summary describes the cap as a share of worldwide profit; Article 43(5)(c) words it as worldwide annual net income. They are not the same quantity, so pick one and attribute it.

Where does this leave a marketing team? On the trail of the enforcement record rather than the press release. The Commission publishes its proceedings, its preliminary findings and its fines, and the behaviours it punishes are specific: a deceptive interface, an opaque ad repository, a risk assessment nobody really did. Those are the tracks worth following, because they say what good dsa compliance looks like far better than the statute does.

Frequently asked questions#