ChatGPT and Security

ChatGPT falls under the DSA and has 4 months to audit its systemic risks


The European Commission designated it a very large search engine on August 31, based on the 159.1 million monthly users it reported in the EU.

September 3, 2026 · Translated from the Spanish original

What happened

Why it matters

The number

159.1 million. Average monthly users of ChatGPT’s search feature in the European Union, as reported by OpenAI itself. More than three times the legal threshold.

Context

The DSA designated its first group of platforms in April 2023, when no conversational assistant came close to the threshold. With these three additions, 28 services are now subject to its strictest regime. It’s the first time a conversational assistant has entered the perimeter through the search-engine door rather than the content-platform one. The week closed with another decision in the same direction: a Virginia court chose to change Google’s rules rather than break up the company.

What’s next

Bottom line

The European debate on generative AI had been running along the AI Act track, whose high-risk obligations were postponed to December 2027. While that track waits, the DSA got there first, and from another direction.

This note describes an administrative decision and does not constitute legal advice.

Sources

Related notes

← All notes