apple digital markets act

eu-says-apple-violated-app-developers’-rights,-could-be-fined-10%-of-revenue

EU says Apple violated app developers’ rights, could be fined 10% of revenue

Apple and the Digital Markets Act —

EU: Apple fees and rules stop devs from steering users to other sales channels.

Apple logo is displayed on a smartphone with a European Union flag in the background.

Getty Images | SOPA Images

The European Commission today said it found that Apple is violating the Digital Markets Act (DMA) with App Store rules and fees that “prevent app developers from freely steering consumers to alternative channels for offers and content.” The commission “informed Apple of its preliminary view” that the company is violating the law, the regulator announced.

This starts a process in which Apple has the right to examine documents in the commission’s investigation file and reply in writing to the findings. There is a March 2025 deadline for the commission to make a final ruling.

The commission noted that it “can impose fines up to 10 percent of the gatekeeper’s total worldwide turnover,” or up to 20 percent for repeat infringements. For “systematic infringements,” the European regulator could respond by requiring “a gatekeeper to sell a business or parts of it, or banning the gatekeeper from acquisitions of additional services related to the systemic non-compliance.”

Under the DMA, developers must be free “to inform their customers of alternative cheaper purchasing possibilities, steer them to those offers and allow them to make purchases,” the commission said. But Apple’s business terms prevent that, the commission found.

Apple’s rules prevent developers from providing pricing information within their apps and from communicating “with their customers to promote offers available on alternative distribution channels,” the commission said. Apple lets developers include an in-app link that redirects users to a website, but this “link-out process is subject to several restrictions imposed by Apple that prevent app developers from communicating, promoting offers and concluding contracts through the distribution channel of their choice,” the commission said.

Excessive fees

Apple was further accused of charging excessive fees. The commission said that Apple is allowed to charge “a fee for facilitating via the App Store the initial acquisition of a new customer by developers,” but “the fees charged by Apple go beyond what is strictly necessary for such remuneration. For example, Apple charges developers a fee for every purchase of digital goods or services a user makes within seven days after a link-out from the app.”

Apple says it charges a commission of 27 percent on sales “to the user for digital goods or services on your website after a link out… provided that the sale was initiated within seven days and the digital goods or services can be used in an app.”

We contacted Apple today and are waiting for a response. In a statement quoted by the Associated Press, Apple said that during the past few months, it “made a number of changes to comply with the DMA in response to feedback from developers and the European Commission” and will “continue to listen and engage” with regulators.

“We are confident our plan complies with the law and estimate more than 99 percent of developers would pay the same or less in fees to Apple under the new business terms we created,” Apple was quoted as saying. “All developers doing business in the EU on the App Store have the opportunity to utilize the capabilities that we have introduced, including the ability to direct app users to the web to complete purchases at a very competitive rate.”

As reported on Friday, Apple is delaying its Apple Intelligence AI tools and other features in the EU because of what it called “regulatory uncertainties brought about by the Digital Markets Act.”

EU also probes Apple “Core Technology Fee”

The commission today also announced it is starting a separate investigation into Apple’s “contractual requirements for third-party app developers and app stores,” including its “Core Technology Fee.” Apple charges the Core Technology Fee for app installs, whether they are delivered from Apple’s own App Store, from an alternative app marketplace, or from a developer’s own website. The first million installs each year are free, but a per-install fee of €0.50 applies after that.

The commission said it would investigate whether the Core Technology Fee complies with the DMA. This investigation will also probe “Apple’s multi-step user journey to download and install alternative app stores or apps on iPhones,” and the eligibility requirements imposed on developers before they are allowed to offer alternative app stores or distribute apps from the web on iPhones.

The probe includes Apple’s requirement that developers have “membership of good standing” in the Apple Developer Program in order to benefit from the alternative distribution methods required by the DMA. The commission said it is also probing the “checks and reviews put in place by Apple to validate apps and alternative app stores to be sideloaded.”

EU says Apple violated app developers’ rights, could be fined 10% of revenue Read More »

apple-must-open-ipados-to-sideloading-within-6-months,-eu-says

Apple must open iPadOS to sideloading within 6 months, EU says

big regulations for a big iphone —

iPads must comply with the same DMA regulations as the iPhone.

Apple must open iPadOS to sideloading within 6 months, EU says

Andrew Cunningham

Starting in March with the release of iOS 17.4, iPhones in the European Union have been subject to the EU’s Digital Markets Act (DMA), a batch of regulations that (among other things) forced Apple to support alternate app stores, app sideloading, and third-party browser engines in iOS for the first time. Today, EU regulators announced that they are also categorizing Apple’s iPadOS as a “gatekeeper,” meaning that the iPad will soon be subject to the same regulations as the iPhone.

The EU began investigating whether iPadOS would qualify as a gatekeeper in September 2023, the same day it decided that iOS, the Safari browser, and the App Store were all gatekeepers.

“Apple now has six months to ensure full compliance of iPadOS with the DMA obligations,” reads the EU’s blog post about the change.

Apple technically split the iPad’s operating system from the iPhone’s in 2019 when it began calling its tablet operating system “iPadOS” instead of iOS. But practically speaking, little separates the two operating systems under the hood. Both iOS and iPadOS share the same software build numbers, they’re updated in lockstep (with rare exceptions), and most importantly for DMA compliance purposes, they pull software from the same locked-down App Store with the same Apple-imposed restrictions in place.

Apps distributed through alternate app stores or third-party websites will have to abide by many of Apple’s rules and will still generally be limited to using Apple’s public APIs. However, the ability to use alternate app stores and browser engines on the iPad’s large screen (and the desktop-class M-series chips) could make the tablets better laptop replacements by allowing them to do more of the things that Mac users can do on their systems.

Though Apple has made multiple changes to iOS in the EU to comply with the DMA, EU regulators are already investigating Apple (as well as Google and Meta) for “non-compliance.” Depending on the results of that investigation, the EU may require Apple to make more changes to the way it allows third-party apps to be installed in iOS and to the way that third-party developers are allowed to advertise non-Apple app store and payment options. Any changes that Apple makes to iOS to comply with the investigation’s findings will presumably trickle down to the iPad as well.

Of course, none of this directly affects US-based iPhone or iPad users, whose devices remain restricted to Apple’s app stores and the WebKit browsing engine. That said, we have seen some recent App Store rule changes that have arguably trickled down from Apple’s attempts to comply with the DMA, most notably policy changes that have allowed (some, not all) retro game console emulators into the App Store for the first time.

Apple must open iPadOS to sideloading within 6 months, EU says Read More »

apple-disables-iphone-web-apps-in-eu,-says-it’s-too-hard-to-comply-with-rules

Apple disables iPhone web apps in EU, says it’s too hard to comply with rules

Digital Markets Act —

Apple says it can’t secure home-screen web apps with third-party browser engines.

Photo of an iPhone focusing on the app icons for Phone, Safari, Messages, and Music.

Getty Images | NurPhoto

Apple is removing the ability to install home screen web apps from iPhones and iPads in Europe when iOS 17.4 comes out, saying it’s too hard to keep offering the feature under the European Union’s new Digital Markets Act (DMA). Apple is required to comply with the law by March 6.

Apple said the change is necessitated by a requirement to let developers “use alternative browser engines—other than WebKit—for dedicated browser apps and apps providing in-app browsing experiences in the EU.” Apple explained its stance in a developer Q&A under the heading, “Why don’t users in the EU have access to Home Screen web apps?” It says:

Addressing the complex security and privacy concerns associated with web apps using alternative browser engines would require building an entirely new integration architecture that does not currently exist in iOS and was not practical to undertake given the other demands of the DMA and the very low user adoption of Home Screen web apps. And so, to comply with the DMA’s requirements, we had to remove the Home Screen web apps feature in the EU.

It will still be possible to add website bookmarks to iPhone and iPad home screens, but those bookmarks would take the user to the web browser instead of a separate web app. The change was recently rolled out to beta versions of iOS 17.4.

The Digital Markets Act targets “gatekeepers” of certain technologies such as operating systems, browsers, and search engines. It requires gatekeepers to let third parties interoperate with the gatekeepers’ own services, and prohibits them from favoring their own services at the expense of competitors. As 9to5Mac notes, allowing home screen web apps with Safari but not third-party browser engines might cause Apple to violate the rules.

Apple warns of “malicious web apps”

As Apple explains, iOS “has traditionally provided support for Home Screen web apps by building directly on WebKit and its security architecture. That integration means Home Screen web apps are managed to align with the security and privacy model for native apps on iOS, including isolation of storage and enforcement of system prompts to access privacy impacting capabilities on a per-site basis.”

Apple said it won’t be able to guarantee this isolation once alternative browser engines are supported. “Without this type of isolation and enforcement, malicious web apps could read data from other web apps and recapture their permissions to gain access to a user’s camera, microphone or location without a user’s consent. Browsers also could install web apps on the system without a user’s awareness and consent,” Apple’s FAQ said.

Despite the change, Apple said that “EU users will be able to continue accessing websites directly from their Home Screen through a bookmark with minimal impact to their functionality.”

Apple previously announced that its DMA compliance will bring sideloading to Europe, allowing developers to offer iOS apps from stores other than Apple’s official App Store.

Browser choice, security requirements

One browser-related change will be immediately obvious to EU users once they install the new iOS version. “When users in the EU first open Safari on iOS 17.4, they’ll be prompted to choose their default browser and presented with a list of the main web browsers available in their market to select as their default browser,” Apple’s developer FAQ said.

Apple said it had to prepare carefully for the requirement to let developers use alternative browser engines because browser engines “are constantly exposed to untrusted and potentially malicious content and have visibility into sensitive user data,” making them “one of the most common attack vectors for malicious actors.”

Apple said it is requiring developers who use alternative browser engines to meet certain security standards:

To help keep users safe online, Apple will only authorize developers to implement alternative browser engines after meeting specific criteria and committing to a number of ongoing privacy and security requirements, including timely security updates to address emerging threats and vulnerabilities. Apple will provide authorized developers of dedicated browser apps access to security mitigations and capabilities to enable them to build secure browser engines, and access features like passkeys for secure user login, multiprocess system capabilities to improve security and stability, web content sandboxes that combat evolving security threats, and more.

Overall, Apple said its DMA preparations have involved “an enormous amount of engineering work to add new functionality and capabilities for developers and users in the European Union—including more than 600 new APIs and a wide range of developer tools.”

Apple disables iPhone web apps in EU, says it’s too hard to comply with rules Read More »