Germany's Federal Cartel Office, the Bundeskartellamt, closed its investigation into Apple's App Tracking Transparency Framework (ATTF) on August 17, 2026, announcing a commitment decision dated August 13 that requires Apple to rebuild the consent prompts iPhone and iPad users see before apps can track them for advertising. No fine was imposed. Instead, Apple has four months to redesign the prompts and will operate under an independent monitoring trustee for seven years afterward.
The Self-Preferencing Case, Fairly Stated
The complaint underneath this case has merit. Since ATTF launched in April 2021, third-party apps have had to clear a consent prompt styled with a warning-hand icon and the word "tracking" — language the Bundeskartellamt found discouraging — while Apple's own advertising-relevant prompts used friendlier wording and, in some cases, required only a single tap. Publishers also frequently had to run their own GDPR-mandated consent flow and Apple's ATT prompt back to back, a double-consent burden Apple's own services didn't face. When the company that designs the rulebook for an entire app ecosystem also competes inside that ecosystem with its own advertising business, asymmetric friction isn't a neutral privacy feature — it's a lever. That is a legitimate competition concern, not a manufactured one, and it's the reason the authority pursued this for four years: the proceeding traces to a June 2022 opening, a February 2025 preliminary finding that ATTF could violate both Section 19a(2) of the German Competition Act and Article 102 TFEU, and Apple's confirmed status as a company "of paramount significance for competition across markets" under Section 19a GWB — upheld by Germany's Federal Court of Justice in March 2025.
What Apple Actually Has to Change
Under the binding commitments, Apple must, within four months of the decision's service:
- Remove the warning-hand symbol and the term "tracking" from the third-party consent prompt
- Align wording and the order of consent options between its own prompts and third-party ATT prompts
- Let publishers attach a customizable purpose string of up to 4,000 characters explaining why personalized advertising matters to their business
- Offer app publishers a choice of consent architecture — merging their own consent-management prompt with the ATT prompt, cross-referencing prior consent to avoid duplicate asks, or keeping the current separate-prompt structure
An independent trustee will monitor compliance for seven years, with beta testing alongside app publishers before the changes ship in iOS and iPadOS. Bundeskartellamt president Andreas Mundt has been consistent on the underlying principle across this case: if Apple sets rules that third parties must follow, those rules cannot treat Apple's own offerings more favorably.
A Better Enforcement Model Than the Fines
What makes this case interesting for competition-policy design is the contrast with how France and Italy handled the identical complaint. France's Autorité de la concurrence fined Apple €150 million in March 2025, finding the ATT rollout "neither necessary nor proportionate" to its stated privacy goal. Italy's AGCM followed in December 2025 with a €98.6 million fine on the same double-consent theory. Both penalties are backward-looking — they punish conduct already completed and leave the underlying prompt design untouched unless Apple separately chooses to change it. Germany's remedy does the opposite: no fine, but a structural fix to the actual interface causing the harm, verified by a trustee for years afterward. For a regulator trying to correct an ongoing product design rather than extract a one-time penalty, a commitments-based settlement that changes the product is the more proportionate tool. It also lets Apple keep insisting — as it has throughout, telling regulators it considers ATTF fully compliant with competition law — that it accepted commitments without conceding wrongdoing, which is precisely the kind of negotiated posture that gets a fix shipped faster than years of appeals would.
Where the Caution Belongs
The soft spot in this outcome is scope and precedent, not intent. The commitments bind Apple only for German App Store billing addresses and devices — Apple has signaled the redesign will likely roll out more broadly, but nothing compels an EU-wide rollout, and a patchwork of jurisdiction-specific consent architectures is a real compliance cost for a company already managing separate obligations under the EU's Digital Markets Act. There's also a legitimate innovation-policy worry buried in the seven-year trustee term: interface-level micromanagement by a national regulator, sustained for the better part of a decade, is a heavier ongoing intervention than a fine, even if it's a more surgical one. Regulators should prefer structural fixes over penalties when the harm is a live design choice — but they should also set a defined end state, not open-ended oversight, or the remedy itself becomes a standing cost of doing business in Germany. On balance, though, a decision that fixes the actual prompt rather than just taxing the company for having built it is the more defensible model, and one other competition authorities scrutinizing gatekeeper interfaces should look at before reaching for a fine.