ChatGPT to face tougher regulation in the EU

The European Union has officially stepped into the ring with generative AI, designating ChatGPT as a Very Large Online Platform under the Digital Services Act. According to reporting by The Verge, this classification means OpenAI will now face rigorous accountability for how its system impacts minors, user mental health, and the spread of illegal content. This is not just a minor administrative update but a fundamental change in the regulatory landscape for artificial intelligence.

This move places ChatGPT in the same regulatory bucket as established social media giants like Reddit and Roblox. The European Commission’s decision signals that they view generative AI models not as isolated software tools but as massive platforms that shape public discourse and user behavior. The implications of this equivalence are profound for how AI companies must structure their safety protocols and content moderation strategies moving forward.

The core of the Digital Services Act focuses heavily on protecting vulnerable users. Platforms classified under these rules are strictly prohibited from targeting advertisements to minors. They are also banned from using sensitive data points such as sexual orientation, religion, ethnicity, or political beliefs to profile users. For an AI model that learns from and interacts with vast amounts of human data, adhering to these privacy and targeting constraints requires significant architectural changes.

OpenAI will now be held directly accountable for mitigating specific risks associated with its platform. This includes the potential negative impact on the mental health of users who might become overly dependent on or emotionally attached to the AI. It also covers the systemic risk of the platform being used to distribute illegal content, whether through direct generation or by users manipulating the model to bypass safety filters.

This regulatory pressure comes at a time when the global debate on AI safety is intensifying. The EU is positioning itself as a global standard setter for digital rights and safety. By treating a foundational AI model like a social media network, they are forcing companies to prove that their systems are safe before they can operate at scale in the European market. This could set a precedent for other regions to follow suit.

For developers and entrepreneurs building on top of AI models, this creates a new layer of compliance complexity. You can no longer assume that the underlying model provider handles all safety risks. If your application interacts with end users in the EU, you may need to implement additional safeguards to ensure you are not facilitating prohibited activities or exposing minors to harmful content. The burden of care is shifting upstream.

What this means for you: If you are building AI-powered applications for a European audience, you must audit your data flows and user interactions for compliance with the DSA. Start by implementing strict age verification or minor protection modes in your user interface. Try using an AI assistant to draft a compliance checklist for your specific use case with this prompt: "Act as a regulatory compliance expert. Create a checklist of safety measures for an AI app targeting EU users under the Digital Services Act, focusing on minor protection and data privacy."