Artificial intelligence is moving deeper into the regulatory spotlight as adoption continues to grow.
According to Deutsche Welle, ChatGPT, Reddit, and Roblox have each surpassed 45 million average monthly users in the European Union, bringing them under stricter requirements of the EU’s Digital Services Act (DSA). ChatGPT is the first AI chatbot to fall under the law’s heightened framework.
For MSPs helping businesses adopt AI, the development reinforces the growing importance of governance, risk management, and regulatory awareness.
1. AI Governance Is Becoming More Important
ChatGPT’s inclusion under stricter DSA requirements shows how AI services are attracting greater regulatory scrutiny as their reach expands.
For MSPs, this reinforces the need to help clients establish policies around how AI tools are selected, accessed, and used.
MSP Action: Help clients create AI governance policies covering approved tools, acceptable use, access, data handling, and organizational responsibility.
2. Scale Can Change the Regulatory Picture
ChatGPT, Reddit, and Roblox crossed the EU threshold of 45 million average monthly users, triggering heightened requirements under the DSA.
While MSPs are not responsible for a platform’s regulatory compliance, they should recognize that the rules surrounding widely adopted technologies can change as those platforms grow.
MSP Action: Include major regulatory developments in technology reviews so clients understand when changes affecting key platforms may influence their own governance and compliance considerations.
3. AI Risk Extends Beyond Cybersecurity
The DSA requirements highlighted in the report extend beyond traditional cybersecurity concerns. The platforms must assess and mitigate potential risks involving areas such as illegal content, protection of minors, and users’ mental health.
For MSPs, this demonstrates why evaluating AI requires a broader view of technology risk.
MSP Action: Expand AI risk discussions to include privacy, governance, acceptable use, data exposure, compliance requirements, and potential business consequences.
4. MSPs Can Help Clients Navigate Complexity
ChatGPT is now facing requirements under the DSA while also being subject to European AI regulations, illustrating the increasingly complex environment surrounding AI.
MSPs should not act as legal advisors unless qualified, but they can help clients understand how AI is being deployed and identify situations where specialized compliance guidance may be needed.
MSP Action: Document client AI deployments and collaborate with legal or compliance specialists when questions extend beyond the MSP’s expertise.
5. Responsible AI Adoption Can Be a Differentiator
As businesses embrace AI, they will need partners capable of balancing new capabilities with appropriate safeguards.
MSPs that understand both AI technology and its evolving governance considerations can bring greater strategic value to client relationships.
MSP Action: Incorporate responsible AI adoption into strategic business reviews, helping clients evaluate opportunities alongside security, governance, and compliance considerations.
Preparing Clients for a More Regulated AI Era
The EU’s increased scrutiny of ChatGPT demonstrates that AI is becoming part of the broader regulatory environment surrounding modern technology.
For MSPs, the opportunity is to help clients adopt AI deliberately rather than simply chasing new capabilities. By combining technical expertise with governance awareness, clear policies, and appropriate outside expertise, providers can help businesses pursue AI innovation while preparing for an increasingly complex regulatory landscape.