A four-year case ends in a settlement, not a fine
On 17 August 2026, the Bundeskartellamt announced it had closed its proceeding against Apple's App Tracking Transparency Framework (ATTF) by declaring Apple's commitments legally binding — a decision dated 13 August 2026 that ends an investigation opened in June 2022 (Bundeskartellamt, 17 August 2026). No fine was levied. Instead, Apple agreed to redesign how its tracking-consent prompts work — a remedy that is narrower, and arguably more useful, than the headline suggests.
What the Bundeskartellamt actually found
ATT has required third-party apps to ask users for explicit permission before tracking them across other companies' apps and websites since 2021. The Bundeskartellamt's concern was never that this consent requirement existed — it was that Apple's own consent flow for its first-party advertising looked and behaved differently from the one it mandated for everyone else. In its preliminary assessment, transmitted in February 2025, the authority found that the ATT prompt shown to third-party developers used design choices — including a warning-style hand icon and the word "tracking" itself — that tended to push users toward refusal, while Apple's own personalised-advertising consent screen used comparatively neutral language that tended to produce more "allow" outcomes (Bundeskartellamt Apple proceedings). That asymmetry is what Section 19a of the German Competition Act (GWB) — Germany's extended abuse-control regime for companies of "paramount significance for competition across markets" — was built to catch: not tracking itself, but a dominant gatekeeper writing the rules of consent differently for itself than for the apps that depend on its platform.
Apple was formally designated as such a company in April 2023, a finding the Federal Court of Justice (Bundesgerichtshof) upheld on 18 March 2025 after Apple's appeal, confirming both that multi-sided platforms qualify under the statute and that designation requires only an "abstract risk potential," not proven harm (SCiDA, 18 March 2025). That ruling is what gave the Bundeskartellamt the legal footing to press Apple toward the commitments it tested with the market in December 2025 and finalised this August.
The steelman: this is exactly what a competition authority should do
The case for the Bundeskartellamt's approach is genuinely strong. Consent-prompt design is not a neutral technical detail — dark-pattern research has repeatedly shown that icon choice, wording, and framing measurably shift user decisions. If a platform operator controls the rules of the game and also plays in it, letting that operator write itself an easier consent path than its rivals is a textbook self-preferencing problem, the exact conduct Section 19a was designed to reach without waiting years for a full abuse case under general competition law. Under the settlement, Apple must remove "possibly discouraging symbols and wording," make prompts "neutral in terms of content, wording and layout," let publishers combine Apple's consent request with their own data-protection consent asks, and give app makers up to 4,000 characters to explain why personalised advertising matters to their business — all while the commitments run for seven years under an independent monitoring trustee (Bundeskartellamt, 17 August 2026). Apple has four months from service of the decision to implement the change in iOS and iPadOS.
Where the remedy creates a new tension
The honest complication, flagged by German privacy commentary, is that a longer, more neutral, more "explain yourself" consent flow is not obviously better for users trying to say no. Coverage of the decision noted that the changes will produce "longer and more complicated permission requests," and that removing the deterrent framing makes it marginally harder for iPhone owners to quickly reject cross-app tracking than the current one-tap "Ask App Not to Track" flow allows (netzpolitik.org, August 2026). That is a real trade-off, not a hypothetical one: a remedy engineered to stop Apple from tilting the scale toward its own advertising business risks tilting the overall scale, Apple's and everyone else's, slightly toward more tracking consent than before ATT existed.
Even so, the Bundeskartellamt's design here deserves credit for restraint. It did not ban ATT, mandate a specific UI, or impose a fine that functions as a cost of doing business. It required symmetry — the same rules for the gatekeeper and the gatekept — and left the substance of the tracking-consent choice to users and, ultimately, to Germany's separate data-protection framework. Apple's own statement maintained that ATT's original design was about clarity, not self-interest, but agreed to the presentational change anyway. For a Section 19a regime still built on precedent (only Apple, Alphabet, Amazon, Meta and Microsoft have been designated so far), a proportionate, negotiated fix beats either inaction or a punitive fine that does nothing to change the underlying design. The test now is whether Apple's "neutral" prompt, once shipped, actually treats a click for Apple's ads the same as a click for everyone else's — and whether Germany's privacy regulator has anything to say about the trade-off netzpolitik flagged.