EU tags WhatsApp a VLOP after it crosses 51 million users

The European Union has officially classified WhatsApp as a Very Large Online Platform (VLOP) under the Digital Services Act (DSA), a move that places the messaging app under tighter regulatory oversight.

The designation was announced in a statement published on the European Commission’s website. It follows WhatsApp’s rapid growth across the EU, where the platform now records more than 51 million monthly active users. 

That figure is significant because the DSA applies extra obligations once a platform crosses the EU’s threshold for “very large” services.

In simple terms: WhatsApp is now big enough in Europe to be treated as a platform that can shape public conversation at scale and the EU wants stronger safeguards.

Why WhatsApp was classified as a VLOP

Under the DSA, platforms that reach more than 45 million monthly active users in the EU — roughly about 10% of the bloc’s population fall into a higher-risk category that triggers enhanced rules

WhatsApp’s EU user numbers now exceed that bar. The platform currently averages about 51.7 million monthly users in the region, which is above the DSA’s threshold and is the key reason behind the new classification.

What the EU is demanding from WhatsApp

The European Commission said VLOPs must take stronger actions to reduce harm and protect users. Specifically, the Commission pointed to responsibilities around:

Preventing the spread of disinformation, limiting the manipulation of public opinion, and protecting users especially minors.

Beyond that, the Commission stated that WhatsApp must properly assess and reduce what it calls “systemic risks” linked to the service. These include risks connected to:

Violations of fundamental human rights and freedom of expression, electoral manipulation, dissemination of illegal content, and privacy concerns.

The bottom line is that WhatsApp is no longer treated as “just another app” in the EU. It is being treated as a platform with enough influence to require continuous risk checks and stronger protections.

The May 2026 compliance deadline

The timeline is tight. According to the Commission, Meta, WhatsApp’s parent company has four months to ensure WhatsApp meets the additional obligations for Very Large Online Platforms. The deadline is mid-May 2026.

In the Commission’s words, the platform must assess and mitigate systemic risks stemming from WhatsApp’s service and demonstrate compliance with the extra VLOP-level requirements under the DSA.

Who will supervise WhatsApp’s compliance?

Supervision will be carried out in cooperation with Coimisiún na Meán, Ireland’s Digital Services Coordinator.

That detail matters because Ireland plays a central role in regulating many major tech companies operating in Europe, given that several of them have key European operations there.

WhatsApp joins a growing VLOP list

WhatsApp is not alone. Other platforms already designated as VLOPs under the DSA include Facebook and Instagram (designated on 25 April 2023), as well as YouTube, LinkedIn, Snapchat, Shein, Wikipedia, and several other services.

This is part of the EU’s wider attempt to bring the biggest online platforms under stricter accountability rules especially those seen as capable of shaping information flows, public debate, and user safety.

The EU is already probing other platforms

The Commission is not stopping at labels, it is actively investigating. It is currently investigating Facebook and Instagram over possible breaches linked to the DSA’s obligations to protect minors.

Separately, the Commission has launched a new formal investigation into X under the DSA. It has also extended an existing probe opened in December 2023 focused on the platform’s recommender systems and risk management obligations.

The Commission said the new investigation will check whether X properly assessed and reduced risks tied to the deployment of its AI chatbot Grok in the EU, including risks linked to illegal content. The focus here is user protection and platform responsibility, especially when new tools can amplify harmful content at speed.

What this means for WhatsApp and its users

For WhatsApp, the VLOP label means increased scrutiny and stronger legal duties inside Europe. The EU is essentially saying: if your platform is this large, you must prove you are actively reducing risk not reacting after damage is done.

For users, the aim at least on paper is a safer online environment, more protection for minors, and stronger safeguards against manipulation, disinformation, and illegal content.

What happens if WhatsApp fails to comply?

The DSA comes with real penalties. If WhatsApp is found to be in breach, the platform could face fines of up to 6% of its global annual turnover, along with additional enforcement measures.

That is a major financial threat for any global tech company and it is designed to ensure compliance is not treated as optional.