The Ruling
On August 17, 2026, Germany's Bundeskartellamt declared binding a set of commitments from Apple that will reshape how iPhone users are asked to consent to tracking. Under the decision, Apple must align the consent prompts shown for its own advertising with the ones shown for third-party apps, strip the prompt of the "warning hand" icon and the word "Tracking," and give app publishers up to 4,000 characters to explain why personalized advertising benefits their business (Bundeskartellamt). Apple has four months to implement the changes in iOS and iPadOS, and an independent monitoring trustee will oversee compliance for seven years.
The case traces back to June 2022, when the Bundeskartellamt opened proceedings into Apple's App Tracking Transparency Framework (ATTF) under Section 19a of the German Competition Act — the "extended abuse control" tool for firms of paramount cross-market significance. Apple was formally designated as such a firm in April 2023, a finding the Federal Court of Justice upheld in March 2025 (Bundeskartellamt, Apple proceedings). The complaint came from four German trade groups — advertising, digital economy, and two publisher associations — who argued Apple's 2021 tracking prompt was designed to depress consent for competitors while leaving Apple's own data collection largely untouched (netzpolitik.org).
The Self-Preferencing Complaint Has Merit
Before arguing the case for restraint, the underlying competition concern deserves to be taken seriously. Apple built ATTF as a genuine privacy control, and iPhone users are better off for having a real choice about cross-app tracking. But a dominant gatekeeper that designs the only consent interface on its platform has an obvious incentive to make the choice easier to decline for everyone except itself. If Apple's own tracking prompt uses neutral, low-friction language while third-party apps are shown a hand icon and the word "Tracking" — a framing consumer-research literature consistently shows suppresses opt-in — that is not a privacy protection, it is a design lever that advantages Apple's ad business over the publishers and app developers who depend on the same data for revenue. Opt-in rates for third-party tracking hovered around 11–15% in the period examined in France's parallel case, versus an industry average that has since climbed toward 38% as prompts and disclosures matured (ppc.land). A dominant platform is not entitled to pick which side of a privacy trade-off wins by default.
Why the Remedy, Not Just the Complaint, Gets This Right
What distinguishes Germany's response is the shape of the remedy. The Bundeskartellamt did not order Apple to abandon consent screens, weaken privacy defaults, or maximize ad-industry opt-in rates. President Andreas Mundt was explicit on this point, telling reporters the agency's goal is "expressly not" to drive consent rates as high as possible, but to ensure users make an equally free and informed choice regardless of which developer is asking (netzpolitik.org). That is a narrow, competitively-grounded fix — parity of presentation, not a mandate to track more people — paired with a sunset clause and independent monitoring rather than open-ended supervision.
Compare that to how the same underlying complaint has been handled elsewhere. France's competition authority fined Apple €150 million in March 2025 over ATT's rollout; Italy's authority fined Apple roughly €98.6 million in December 2025 over the double-consent burden the framework imposed on publishers (ppc.land). Fines punish past conduct but don't necessarily fix the design flaw going forward — Apple can pay and keep the asymmetric prompt. Germany's commitment decision, negotiated and tested with app publishers before being made binding, actually changes the interface prospectively, with a trustee checking that it stays changed. For a publication that favors proportionate, evidence-based regulation over headline-grabbing penalties, this is closer to the model worth encouraging: identify the specific mechanism causing harm, fix that mechanism, and stop there.
The Risk Is in the Execution
The most plausible failure mode isn't overreach but under-specification. A 4,000-character allowance for publishers to argue for personalized ads, if implemented as a wall of legalese, could make the prompt less legible for ordinary users than the version it replaces — trading one form of friction for another. Regulators comparing notes across France, Italy, and Germany should be watching whether the redesigned prompt, once it ships within Apple's four-month deadline, actually improves user comprehension rather than just industry economics. The Bundeskartellamt's insistence on testing the design with publishers before finalizing it is a reasonable safeguard, but the trustee's seven-year mandate should be judged on that outcome, not on consent-rate movement alone.
The Fragmentation Question
One unresolved issue this case surfaces: Apple is simultaneously a designated "gatekeeper" under the EU's Digital Markets Act, yet Germany reached this outcome through a national tool, Section 19a GWB, running in parallel. Three different EU member-state authorities have now reached three different remedies — two fines, one redesign — for functionally the same complaint. That is a genuine cost of Europe's overlapping enforcement architecture, and one national regulators and the European Commission should work to reconcile, since compliance fragmentation is itself a tax on the platforms and developers operating across the bloc.