The strongest case for the Bundeskartellamt's intervention is simple. Apple wrote the rules for its App Tracking Transparency framework (ATT), applied them to everyone else, and exempted itself. A regulator that lets a gatekeeper hold rivals to a stricter standard than its own is not defending privacy; it is tolerating a competitive handicap dressed as privacy. Apple's changes, announced to developers in mid-September 2026, are the visible result of the German case that addressed exactly that, along with agreements with other European competition authorities.
What actually changed
According to TechCrunch's report of 17 September 2026, developers distributed in the EU can show an alternative consent screen. It is a full-page screen instead of a pop-up, it drops the word "track", and it replaces "Ask App Not to Track" with a plain "Reject" alongside "Allow". Developers can add a link explaining what data they collect and why, and, for the first time, can re-prompt a user one year after a refusal. MediaNama's summary confirms the consent prompt itself survives and appears at the same moment as before.
Apple's developer notice says the alternative version is optional in the EU generally, but is the only version available for apps distributed in Germany, France, Italy, Poland and Romania. It arrives with iOS 27.2 and iPadOS 27.2.
The legal path behind it
The Bundeskartellamt opened its proceeding in June 2022. Its February 2025 preliminary assessment raised three concerns: ATT's narrow definition of "tracking" did not capture Apple's own cross-service data combination; third-party apps could face up to four consecutive consent dialogs against a maximum of two for Apple; and the design nudged users toward accepting Apple's requests while steering them toward refusing others'. The legal basis was Section 19a(2) of the German Competition Act (GWB) and Article 102 TFEU, following Apple's April 2023 designation as a company of paramount significance for competition across markets. President Andreas Mundt framed the issue as whether Apple may apply stricter criteria to others than to itself.
On 17 August 2026, the authority closed the case by declaring Apple's amended commitments binding. They run for seven years, must be implemented within four months of service of the decision, and are overseen by an independent monitoring trustee. The authority also involved the federal data protection commissioner (BfDI), a Bavarian data protection authority, the European Commission and the European Competition Network. France and Italy had already fined Apple over ATT, per the German release a combined €248.6 million.
Why this is the proportionate model
The remedy is notable for what it does not do. It does not abolish ATT, forbid Apple from asking for consent, or hand a regulator the pen for interface design. It requires neutrality: comparable prompts for Apple's own services and third parties, no discouraging symbols or wording, and more room for publishers to explain why advertising funds their content. That is a symmetry remedy. It targets the specific harm, unequal treatment, and leaves the privacy benefit of asking users intact.
The alternative would have been worse for everyone. A blunt ban on platform-level consent prompts would have removed a control that many users value and pushed consent handling back to a patchwork of app-level dialogs. A prescriptive design code would have frozen a user interface in regulation just as interface norms are shifting. Commitments under Section 19a, monitored by a trustee and revisable, keep the fix adjustable.
The re-prompt right deserves attention. Publishers, especially small news and app businesses whose revenue depends on advertising, previously had no route to ask again after a refusal. A yearly ask is modest, and far less aggressive than the repeated prompting many consent regimes tolerate. Free apps are funded by a bargain between users and publishers; a design that makes refusal the path of least resistance, while exempting the platform's own ad business, distorts that bargain.
Risks worth watching
Three cautions apply. First, neutrality cuts both ways. If Apple's own prompts and third-party prompts converge, users will see more uniform consent screens, and the effect on opt-in rates is an empirical question that regulators should measure rather than assume. Second, the geographic fragmentation is a real cost. The alternative prompt is mandatory in five markets because of agreements with national competition authorities, so a developer with a European audience now handles different flows in different countries. That is the price of parallel national proceedings, and it argues for the European Commission and national authorities coordinating remedies rather than layering them. Third, a neutral prompt does not settle the data protection question. Whether combining Apple's consent with GDPR consent is adequate remains the province of data protection authorities, which is why the BfDI's involvement matters.
The broader lesson for European digital policy is that competition tools can fix a concrete distortion quickly and with limited collateral damage. The authority spent about four years on this, which is slow by product-cycle standards, but it produced a targeted, monitored and time-limited outcome. That compares favourably with rules that try to legislate user-interface details for every platform in advance.
The test now is implementation. If publishers report a fair chance to explain their model and Apple's own apps face the same friction, the case will stand as evidence that proportionate, symmetry-based remedies work. If not, the trustee and the seven-year term give regulators room to correct course without starting again.