Apple announced on September 16, 2026 that apps distributed in Germany, France, Italy, Poland and Romania will use a redesigned App Tracking Transparency (ATT) prompt — a full-page screen instead of a pop-up, stripped of the word "track," with buttons relabeled "Allow"/"Reject" instead of "Allow"/"Ask App Not to Track," plus room for developers to explain their data use and the ability to re-prompt users annually (TechCrunch). The change is the tail end of a proceeding Germany's Bundeskartellamt opened in June 2022 and formally closed on August 17, 2026, when it declared Apple's commitments legally binding under Section 19a of the German Competition Act — the provision built for firms with "paramount cross-market significance" (Bundeskartellamt).
What the regulator actually found
The Bundeskartellamt's core finding was narrow and specific, not a broadside against ATT itself: "the wording, design and selection options of the request used for Apple's own offerings had the potential to encourage users to give their consent, whereas they had the potential to discourage consent for third-party apps." Apple's own services never showed a tracking prompt at all — they used data under a separate, less conspicuous consent flow — while third-party apps faced a screen engineered, regulators found, to nudge users toward "Ask App Not to Track."
That is a fair complaint, and it's worth taking seriously before arguing the other side. A dominant platform that writes the rules for a permission screen and then plays by different rules for itself is not a neutral referee — it is a competitor using rulemaking power as a weapon. Independent publishers, who lack Apple's first-party data or App Store leverage, depend disproportionately on interest-based advertising to fund free content; when a chokepoint gatekeeper tilts the consent language against them specifically, the harm lands hardest on exactly the businesses least able to absorb it. France's Autorité de la concurrence made the same point when it fined Apple €150 million on March 31, 2025, finding the ATT rollout "neither necessary nor proportionate" to Apple's stated privacy goals and noting users could decline tracking with one tap but had to confirm consent twice (Autorité de la concurrence). Italy's AGCM followed in December 2025 with a €98.6 million fine on similar grounds (TheHackerNews).
Why the remedy matters more than the finding
What makes the German outcome notable isn't the finding — it's the remedy. The Bundeskartellamt did not ban ATT, did not force Apple to drop the prompt, and did not fine Apple a headline-grabbing sum. It required Apple to make the same prompt neutral for everyone: align its own consent flow with the third-party one, strip discouraging language, and let publishers explain why they're asking. Apple, notably, wasn't found to be lying about privacy motives — the FCO's own report "welcomed ATT from a data protection perspective," per 9to5Mac's account of the settlement (9to5Mac). The objection was procedural fairness in how the choice was presented, not the existence of the choice.
That distinction should matter to anyone worried EU competition enforcement is drifting toward feature-banning maximalism. France and Italy's fines-first approach extracted large penalties for past conduct but didn't durably change the prompt design going forward, at least not with the same specificity — Apple is appealing Italy's decision. Germany's Section 19a track, by contrast, produced a structural fix with teeth: independent monitoring-trustee oversight for seven years and a four-month implementation clock. If the goal is a less anticompetitive App Store rather than a punished Apple, a binding-commitments settlement that ships an actual redesign is the better instrument — it changes behavior instead of just pricing in the fine as a cost of doing business, a genuine risk when penalties like France's €150 million amount to roughly a day and a half of Apple's revenue.
The scope caveat is doing a lot of work
The rollout's limits are worth flagging. The redesigned prompt only applies in five member states — Germany, France, Italy, Poland and Romania — "due to country-specific legal requirements," per MediaNama's reporting, not the full EU (MediaNama). That's an awkward outcome for a single-market bloc: a German developer and a Dutch developer distributing the identical app now face different consent UX obligations depending on where the user sits, because Germany litigated and the Netherlands didn't. It's a reminder that antitrust enforcement proceeding country-by-country, rather than through a single EU-wide instrument like the Digital Markets Act, produces exactly the fragmentation the single market was built to avoid — even when each individual outcome is defensible.
The better long-run fix is procedural convergence, not five separate national settlements each with slightly different terms. But as a template for what proportionate platform-power enforcement looks like — precise finding, structural remedy, no ban on the underlying feature — Germany's ATT settlement is closer to the mark than either the fines-only approach or a full DMA-style prohibition would have been.