Federal Cartel Office: Apple has to adjust tracking protection

Germany’s Federal Cartel Office has ordered Apple to significantly revise its App Tracking Transparency Framework (ATTF), a privacy feature introduced in 2021 that allows iPhone users to control whether apps can collect their data. The decision comes after a five-year review process initiated in 2022 and marks a major shift in how Apple presents tracking permissions to users. Under the new rules, Apple must redesign its consent prompts to avoid discouraging users from rejecting third-party tracking. This includes removing warning symbols such as the “Warning Hand” icon and avoiding language perceived as alarming, such as the term “tracking.” The revised framework will require Apple to present requests for user permission in a more neutral manner, ensuring that users are not led toward declining tracking options. Additionally, Apple must align the prompts for its own advertising tracking with those used for third-party tracking, preventing the company from gaining an unfair advantage over competitors. The Federal Cartel Office emphasized that while Apple has the right to implement stricter privacy protections than legally required, it must ensure these measures do not unfairly disadvantage other businesses. The ATTF was initially hailed as a landmark in mobile privacy protection. It gave iPhone users a straightforward and transparent way to allow or block tracking during app installation and in device settings. This system effectively disables the unique identifier assigned to each iPhone, known as the Advertising Identifier (IDFA). This ID is typically used by ad-supported apps to create detailed profiles of users based on location data, device information, and inferred interests. These profiles are then shared with numerous advertising firms to enable personalized ads. Research conducted by netzpolitik.org and the Bavarian Broadcasting Corporation revealed that some of this data is being used beyond just targeted advertising. For example, billions of highly accurate location records from German phones have ended up with data brokers who sell them for profit. The ability to opt out of tracking through ATTF has been a crucial defense against such practices. The legal challenge against Apple's tracking protections was launched by several German digital, media, and advertising associations, which felt disadvantaged by the introduction of ATTF. Organizations including the Central Association of the German Advertising Industry, the Federation of the Digital Economy, the Media Association of Independent Press, and the Federation of Digital Publishers and Newspaper Publishers sought to prevent Apple from implementing its own privacy measures that could restrict the business activities of other companies. The impact of ATTF has been substantial. According to reports, Meta, a member of the Federation of the Digital Economy, estimated losses of $10 billion in revenue within the first year following the implementation of Apple’s tracking restrictions. Apple argued that its privacy features were justified because they allowed the company to differentiate itself in the market through superior data protection standards. The Federal Cartel Office agreed with Apple on this point, stating that even dominant market players are generally allowed to introduce privacy measures that go beyond legal requirements. However, Apple must ensure that these measures do not unfairly harm competition. Since Apple itself collects and uses data for advertising purposes, the redesigned prompts must treat its own tracking requests similarly to those of third parties. As a result, users will likely face longer and more complex consent prompts when granting or denying tracking permissions. While the changes aim to balance privacy rights with fair competition, they also raise concerns about the potential for increased user confusion and the possibility of more intrusive data collection practices by third parties. The revised framework will take effect soon, and Apple is expected to roll out updates to its operating system to comply with the new regulations.