Apple to change app data consent rules, German regulator says

Apple Inc. is set to revise its app data consent policies following a ruling by Germany’s Federal Cartel Office, which concluded that the tech giant’s current framework may violate competition laws. The decision, announced on August 17, mandates that Apple adjust how app developers, particularly third-party ones, obtain user permission to track data for targeted advertising on iOS devices. The company has been given four months to implement these changes, which will remain in effect for seven years under the supervision of a designated trustee. The investigation into Apple’s App Tracking Transparency (ATT) system began several years ago, focusing on whether the company unfairly advantaged its own applications over those developed by external firms. According to the Federal Cartel Office, Apple’s consent prompts were designed in a manner that gave its apps a competitive edge. Specifically, the office found that Apple’s own apps used more favorable language and visual cues during the consent process compared to third-party developers, which could distort market fairness. Under the new commitments, Apple must redesign the consent pop-ups for third-party apps to eliminate any language or symbols that might discourage users from granting permission. These prompts must become visually and linguistically neutral, ensuring that users receive consistent information regardless of the app developer. Additionally, third-party app publishers will be allowed greater flexibility to integrate Apple’s required consent request with their own separate data protection prompts, offering them more control over how they collect and use user data. Apple stated that the changes will apply across nearly all European Union member states and confirmed that it has already adjusted the text and design of the consent prompt based on the authority’s recommendations. This move comes amid growing scrutiny of how major technology companies handle user data and privacy. For third-party app developers, particularly those reliant on targeted advertising for revenue, the revised rules could significantly impact their ability to gather accurate user data, which is crucial for generating income through ad placements. Facebook’s parent company, Meta Platforms, among others, has long advocated for more flexible data collection practices, arguing that targeted ads yield higher returns compared to generalized advertising campaigns. However, concerns over user privacy and potential anti-competitive behavior have led regulators in multiple jurisdictions to take action against Apple. In recent years, both France and Italy have imposed substantial fines on Apple related to the ATT framework, amounting to €150 million and €98.6 million, respectively. The German regulatory decision adds another layer of complexity to Apple’s compliance efforts within the EU, where data privacy regulations are increasingly stringent. The company faces mounting pressure to align its practices with evolving legal standards while maintaining its position as a leader in mobile operating systems. As the deadline approaches for implementing the changes, industry observers will be watching closely to see how Apple adapts its approach to data tracking and user consent mechanisms. The outcome could influence future regulatory actions and set precedents for how other tech giants manage similar issues.