The DSA classifies any online platform or search engine as a VLOP when it has 45 million or more average monthly active recipients in the EU — equivalent to roughly 10% of the EU's population . This threshold is defined in Article 33 of the DSA regulation . Platforms must self-report their user numbers every six months, and the Commission designates them when the 45-million mark is exceeded .
Once designated, VLOPs have four months to comply with the DSA's most stringent rules . The key obligations include :
The European Commission has exclusive supervisory authority over VLOPs for systemic risk obligations .
Companies that breach DSA rules risk fines of up to 6% of their annual global turnover (worldwide revenue) . The Commission can also impose periodic penalty payments for continued non-compliance. Recent enforcement actions demonstrate the scale: AliExpress was fined €550 million in July 2026 for failing to address unsafe/counterfeit products, and X was fined €120 million in December 2025 for deceptive design and lack of transparency .
Both ChatGPT and Roblox have surpassed the 45-million monthly active user mark in the EU, which is what triggered their pending VLOP designation . The exact user figures disclosed by each company to the Commission have not been published publicly, but the reports indicate they "surpassed" the threshold, meaning their EU monthly active user bases are above 45 million but specific numbers above that level remain confidential at this stage.
In summary: Both platforms clearly exceed the 45-million threshold, which is why they face designation — no exact figures above 45 million have been publicly confirmed beyond that they are above the line.