EU’s Digital Markets Act Challenges Google’s Dominance Fairly

Google is appealing European Union orders that would open its search data to competitors and AI developers, warning of privacy risks. But the Digital Markets Act represents a measured and necessary intervention in markets where a single company has controlled the gates for far too long.

Alphabet filed appeals Monday with the General Court in Luxembourg, challenging two decisions from EU antitrust regulators that target how Google shares data and services with rival search engines and AI companies like OpenAI. The tech giant argues these requirements would expose users to privacy violations and security vulnerabilities that can’t be undone. The European Commission, which enforces the Digital Markets Act, maintains that both orders include strong protections for user privacy and device security.

This legal challenge marks another chapter in the evolving relationship between Big Tech platforms and the regulatory frameworks designed to check their power. The Digital Markets Act, which entered force in November 2022, aims to make digital markets fairer and more contestable by imposing specific obligations on companies designated as gatekeepers. Google’s position as one of these gatekeepers means it faces requirements that smaller competitors don’t, and the company has consistently pushed back against what it views as overreach.

The Digital Markets Act doesn’t apply universally to all tech companies. It focuses on gatekeepers-platforms with significant market power, large user bases across the EU, and entrenched positions that competitors struggle to challenge. Google meets all these criteria through its search engine, Android operating system, and suite of interconnected services. The company processes billions of search queries daily, and Android powers the majority of smartphones in Europe.

The DMA’s gatekeeper obligations include allowing third-party apps on platforms, preventing self-preferencing of a company’s own services, enabling data portability, and providing competitors with access to certain data under privacy-preserving conditions. These requirements exist because regulators determined that gatekeepers can use their dominant positions to stifle competition in ways traditional antitrust enforcement takes years to address. Rather than waiting for lengthy legal battles after harm has occurred, the DMA sets prospective rules.

Google’s July orders fall within this framework. One decision requires the company to help competing search engines access data that Google makes available to its Gemini AI model. The other mandates that Google assist AI developers in tapping services connected to Gemini. Both measures are scheduled to take effect next year, though Google’s appeals will likely delay implementation while courts review the company’s objections.

Google is appealing EU orders that would give rival search engines and AI developers access to certain search data and services connected to Gemini. The company cites privacy and Android security risks, but the European Commission says the measures include safeguards. The dispute reflects the Digital Markets Act’s broader shift from slow, reactive antitrust enforcement toward prospective rules intended to prevent dominant platforms from using control over data, infrastructure, and distribution to foreclose competition.

Oliver Bethell, Google’s senior director of competition, said the company is appealing decisions that would force it to share people’s private search history without sufficient anonymization and weaken vital security protections on Android. He emphasized that users turn to Search for sensitive queries about medical concerns, relationships, and other personal matters. Mandating the company to share those queries without adequate safeguards, Bethell argued, would cause irreversible harm to user privacy.

The problem with this argument is that the EU’s orders specifically include anonymization requirements. The European Commission has stated that both measures contain robust protections for user privacy, device integrity, and security. DuckDuckGo, a privacy-focused search provider that supports the EU’s position, called the anonymization framework robust and said Google’s appeal only buys the company time rather than addressing genuine privacy concerns.

Google has a track record of raising privacy objections when regulators challenge its market position. The company lost an appeal in July 2026 against a record 4.1 billion euro fine for anti-competitive practices related to Android. The European Court of Justice dismissed Google’s arguments that its pre-installation deals with phone makers promoted choice and supported businesses. The court found instead that these contracts harmed competition by unfairly advantaging Google’s own apps.

The pattern suggests that privacy concerns serve as convenient cover for protecting market dominance. If Google’s data sharing under DMA orders truly threatened user privacy in ways that anonymization couldn’t address, the company would have stronger legal ground. But the EU has designed these requirements with privacy protections baked in, recognizing that data access for competitors must balance competition goals with fundamental rights.

Google’s security arguments around Android follow a similar pattern. The company contends that DMA compliance requirements create new vulnerabilities, particularly when third-party access to core services might weaken safeguards. This framing positions Google as a guardian protecting users from the risks that regulatory intervention would introduce.

The Digital Markets Act review from April 2026 found that the regulation has effectively contributed to making digital markets fairer and more contestable. The review highlighted that users gained greater control through features like switching data across services and choosing alternative search engines or browsers. The DMA has fostered competition by encouraging the rise of alternative app stores, browsers, and messaging apps through interoperability obligations. These changes happened without the security catastrophes Google warned about.

Alternative app stores provide a useful example. Google initially argued that allowing third-party app stores on Android would expose users to malicious software and undermine the security model that protected hundreds of millions of devices. But the DMA’s interoperability requirements have enabled alternative stores to emerge, and Android hasn’t become a malware-ridden wasteland. Users who want the additional choice can access it, while those who prefer Google’s ecosystem can remain within it.

The security argument assumes that only Google can adequately protect users, and that opening Android or sharing search data necessarily introduces risks that outweigh competitive benefits. This assumption doesn’t hold when competitors face the same privacy regulations and security requirements. DuckDuckGo, for instance, has built its entire business model around privacy protection. Smaller search engines and AI developers aren’t asking for unprotected access to sensitive user data-they’re asking for access under the same privacy-preserving conditions that apply to Google’s own services.

Google’s privacy warning is less a reason to reject the DMA than a test of whether the company can protect users without protecting its monopoly.

If anonymized, security-conscious access is technically possible, then the real question is whether Google should control the inputs that rivals need to compete with Gemini and Search.

Traditional antitrust enforcement operates reactively. Regulators must identify anti-competitive conduct, gather evidence, file charges, and then litigate through multiple court levels. Google’s Android case took eight years from the European Commission’s initial investigation in 2018 to the final court ruling in 2026. During that entire period, Google continued the practices regulators challenged, collecting revenue and strengthening its market position while appeals dragged on.

The Digital Markets Act takes a different approach. Rather than waiting for harm and then trying to remedy it through protracted litigation, the DMA sets prospective obligations for gatekeepers. Companies designated under the regulation must comply with specific requirements designed to prevent anti-competitive conduct before it solidifies into entrenched disadvantages for competitors and lock-in effects for users.

This shift from reactive to prospective regulation addresses a fundamental problem: markets move faster than legal systems. By the time courts reach final rulings in traditional antitrust cases, market conditions have often changed substantially. Network effects and data advantages compound over time, making it harder for competitors to gain footholds even after regulators eventually penalize anti-competitive conduct. The DMA attempts to interrupt this dynamic by imposing obligations that prevent gatekeepers from using their positions to foreclose competition.

Google’s appeals argue that DMA requirements go too far, imposing obligations that damage user interests in pursuit of abstract competition goals. But competition isn’t abstract. When Google uses its search dominance to preference its own services in results, users see fewer alternatives. When Android’s pre-installation deals make Google Search and Chrome the default options, users face friction in switching to competitors even if they’d prefer different tools. When Google restricts what data competing search engines or AI developers can access, those competitors struggle to build services that might better serve specific user needs.

The stakes around AI access involve more than philosophical debates about fair competition. OpenAI, Anthropic, and other AI model builders have pushed for broader interoperability with platforms like Google’s Gemini ecosystem. These companies argue that gatekeepers shouldn’t be able to use their control over data, services, and distribution channels to give their own AI offerings insurmountable advantages.

Google’s Gemini benefits from the company’s access to search data, user interactions across its services, and integration points throughout Android and Chrome. Competing AI developers don’t have equivalent access to the infrastructure and data streams that train and improve large language models. The DMA orders that Google is appealing would require the company to help AI developers tap services made available to Gemini under privacy-preserving conditions.

This requirement doesn’t force Google to hand over its proprietary algorithms or unique innovations. It mandates that Google provide access to the same types of services and infrastructure that Google’s own AI products use. The distinction matters because it separates competitive advantages that stem from better engineering or innovation from advantages that stem purely from control over essential inputs.

Network effects in AI development create winner-take-most dynamics. The company with the most users generates the most interaction data, which trains better models, which attract more users. Breaking into this cycle as a new entrant becomes nearly impossible when the dominant player also controls access to key infrastructure. The DMA’s interoperability and data access requirements aim to prevent this foreclosure by ensuring that size alone doesn’t become an insurmountable barrier.

Google’s appeal highlights tensions that extend beyond European borders. The EU has taken the most aggressive regulatory stance on digital markets through the DMA and on AI specifically through the AI Act. The United States has relied more heavily on voluntary frameworks like the AI Bill of Rights and the NIST AI Risk Management Framework rather than comprehensive legislation. This regulatory divergence creates compliance challenges for global platforms but also opportunities for regulatory learning and eventual alignment.

The EU AI Act imposes strict rules on collecting and using biometric data, prohibits certain high-risk AI applications, and requires transparency and conformity assessments for AI systems designated as high-risk. These regulations address concerns about algorithmic opacity, data repurposing, and the persistence of privacy harms that traditional data protection frameworks struggle to cover. The DMA complements these privacy-focused rules by addressing the competitive dimensions of AI deployment.

Critics argue that European regulation unfairly targets American technology companies and creates burdensome compliance obligations that stifle innovation. Google’s appeals echo these concerns, framing DMA requirements as harmful interventions that will damage users. But the alternative is allowing gatekeepers to use their market positions to control emerging technologies like generative AI without constraint. The EU has determined that markets won’t self-correct when network effects and data advantages create compounding dominance.

The General Court’s eventual ruling will shape how the DMA applies not just to Google but to other designated gatekeepers including Apple, Meta, and Amazon. Each of these companies faces DMA obligations tailored to their specific market positions. Apple must allow alternative app stores on iOS. Meta faces interoperability requirements for its messaging platforms. Amazon must prevent self-preferencing on its marketplace. The legal precedents from Google’s case will influence how courts interpret gatekeeper obligations across these different contexts.

Google will likely seek to delay implementation of the July orders while appeals proceed through the General Court and potentially up to the European Court of Justice. This delay represents a predictable feature of the legal process rather than a failure of the DMA itself. The regulation anticipated that gatekeepers would challenge their obligations, and it structured enforcement mechanisms accordingly.

The European Commission can impose fines up to 20% of a company’s global revenue for DMA non-compliance. These penalties dwarf traditional antitrust fines and create meaningful incentives for compliance even as companies pursue appeals. The Commission has already fined Google 890 million euros under the DMA for steering users toward its own services, and it fined Meta and Apple 200 million and 500 million euros respectively in 2025. These enforcement actions demonstrate that the EU treats DMA obligations as binding requirements rather than aspirational goals.

The DMA’s first review in April 2026 found the regulation fit for purpose and highlighted positive impacts including greater user control and the emergence of alternative services. Stakeholders remain divided on whether the regulation should expand to cover additional obligations, particularly around social media interoperability and cloud computing. The Commission has indicated it will monitor market developments while enforcing existing rules, taking a measured approach to potential amendments.

Google’s appeals position the company as defending users against regulatory overreach. But the DMA represents a democratic choice by European lawmakers to prevent the concentration of market power that forecloses competition and limits user options. The regulation acknowledges that markets dominated by a handful of gatekeepers produce worse outcomes than markets where competitors can viably challenge incumbents. Google’s size and success don’t automatically make the company a harmful monopolist, but they do create obligations to ensure the company doesn’t use its dominance to prevent competition.

The Digital Markets Act gets this balance right. It imposes obligations on gatekeepers while including protections for privacy, security, and legitimate business interests. It promotes competition without mandating specific business models or picking winners among competitors. And it recognizes that preventing anti-competitive conduct before it calcifies into permanent market structures works better than trying to unwind dominance after the fact. Google’s appeals might delay specific requirements, but they won’t change the fundamental reality that gatekeepers face heightened obligations when they control access to digital markets.