On 17 August, Germany’s Federal Cartel Office — the Bundeskartellamt — closed a proceeding it opened in June 2022 by declaring binding a set of commitments from Apple to change how its App Tracking Transparency framework works. ATT, introduced in 2021, requires every third-party app to ask permission before using the IDFA identifier to track users for advertising. The regulator’s finding, built on Section 19a of the German Competition Act and Article 102 TFEU, was the one app publishers have alleged for five years: Apple held other companies’ apps to a consent standard it did not apply to its own services.
Two changes carry the weight. First, Apple must align the consent prompts for its own offerings with those shown by third-party apps — neutral in wording, symbols and layout, with the discouraging framing stripped out — and app publishers gain room to explain, inside the flow, why personalised advertising matters to their business model. Second, publishers may combine Apple’s mandated prompt with the consent requests data-protection law already requires, collapsing the stack of privacy dialogs that currently greets a user at first launch. Apple has four months from service of the decision to implement. The commitments run for seven years, with independent monitoring.
Bundeskartellamt president Andreas Mundt was careful about what the remedy is for: “It is expressly not our aim to help achieve the highest possible levels of consent to personalised advertising.” The goal, he said, is that users can make a free and informed decision. Apple, for its part, maintains that ATT complies with competition law — it offered the commitments without conceding the point. The binding scope is Germany only, though the regulator notes the decision may influence how ATT is implemented across EU member states, and Digiday-adjacent trade coverage has already framed it as a template.
01The self-preferencing finding is the story
Strip away the consent mechanics and the case is about who writes the rules of a platform they also play on. Apple runs a fast-growing ads business of its own; its apps requested ad-personalisation consent through a separate, softer prompt than the stern dialog it imposed on everyone else. The regulator concluded the two prompts were not equivalent. That is the same structural complaint publishers have pressed against every gatekeeper that operates both the pitch and a team on it — and it is now a formal finding with a binding remedy attached, not a trade-press grievance.
Germany is also not acting in a vacuum. France’s competition authority has fined Apple €150 million over the same framework. Italy’s regulator has imposed a €98.6 million penalty on similar grounds. Three European authorities reaching adjacent conclusions about one framework is how a national remedy becomes a continental norm: Apple can run one consent architecture across the EU or maintain a Germany-specific fork, and history says platforms eventually choose uniformity.
02What actually changes on the ground
Nobody should expect German opt-in rates to snap back to pre-2021 levels. ATT survives; the prompt remains mandatory; and five years of “Ask App Not to Track” have trained user reflexes that neutral wording will only partially undo. The realistic gains are narrower but real: a single combined consent moment instead of a gauntlet, the chance to make the value exchange explicit before the user decides, and — perhaps most consequentially — Apple’s own ads business now competing for consent on the same terms as everyone else’s. For large international publishers who long ago re-engineered around signal loss, VideoWeek notes the Germany-only scope limits the immediate effect. For publishers with meaningful German app audiences, this is a genuine, measurable opening.
Five years after ATT reset mobile advertising, a regulator has established that the reset was not applied even-handedly — and forced the referee to play by the rules it wrote for others.
03Why this matters for publishers
| A regulator has formally found the consent playing field was tilted | The precedent — that a platform's own services cannot enjoy a softer consent standard than third parties — is portable to every gatekeeper consent framework, not just Apple's. |
|---|---|
| Consent UX is now a competition-law issue, not just a privacy one | Wording, symbols and layout were treated as instruments of market power. That reframing gives publishers a second legal avenue when platform dialogs suppress their addressable audience. |
| The combined-prompt change attacks consent fatigue directly | Merging Apple's dialog with GDPR-required requests means one coherent ask instead of a barrage — historically the single biggest depressant of opt-in rates after the wording itself. |
| The remedy has a long tail | Seven years of monitored commitments outlasts several product cycles, and the four-month implementation clock means changes land in German apps in early 2027 at the latest. |
04What publishers should do
05The bottom line
Five years after ATT reset mobile advertising, a regulator has established that the reset was not applied even-handedly — and forced the referee to play by the rules it wrote for others. The direct effect is bounded: one country, one framework, no restoration of the old identifier economy, and none was sought. The structural effect is larger. Consent design is now recognised as a lever of market power, self-preferencing through UX has a binding remedy attached, and two more European fines suggest Germany will not be the last word. Publishers with German app audiences should treat the next four months as a window to rebuild their consent experience and measure everything; every other publisher should treat the decision as the template it is likely to become.