European Commission Fines Apple and Meta for Non-compliance with the DMA
Time 2 Minute Read

On April 22, 2025, the European Commission announced its first non-compliance decisions under the Digital Markets Act (“DMA”). In these decisions, the European Commission fined Apple EUR 500 million and Meta EUR 200 million for non-compliance with their obligations under the DMA.

According to the European Commission, Apple failed to meet its obligation to open its system to alternatives to the Apple App Store due to technical and commercial restrictions it imposed on developers. As such, in addition to the fine, the European Commission ordered Apple to remove the technical and commercial restrictions limiting developers from steering users to alternatives to the Apple App Store.

Regarding Meta, the European Commission considered that by offering a binary “consent or pay” model for Facebook and Instagram between March 2024 (when the DMA obligations became legally binding) and November 2024, Meta had infringed the DMA’s rule requiring gatekeepers to seek users’ consent for combining their personal data between services. Users who do not consent must have access to a less personalized but equivalent alternative. In November 2024, Meta introduced a different version of the free personalized ads model, offering a new option that uses less personal data to display advertisements. The European Commission is currently assessing the compatibility of Meta’s new “consent or pay” model with the DMA.

Read the Press Release.

You May Also Be Interested In

Time 2 Minute Read

On March 3, 2026, the European Commission published draft guidelines intended to clarify the application of the Cyber Resilience Act and opened a public consultation to gather feedback from stakeholders.

Time 4 Minute Read

On January 27, 2026, the Centre for Information Policy Leadership hosted a fireside chat with California Privacy Protection Agency General Counsel Phil Laird in honor of Data Privacy Day.

Time 4 Minute Read

On January 20, 2026, the European Commission proposed a comprehensive new cybersecurity package aimed at strengthening the EU’s cybersecurity resilience and enhancing its capacity to manage evolving threats.

Time 2 Minute Read

On January 8, 2026, the California Privacy Protection Agency announced enforcement activity against Rickenbacher Data LLC d/b/a Datamasters and S&P Global Inc. for failing to register as data brokers in California.

Search

Subscribe Arrow

Recent Posts

Categories

Tags

Archives

Jump to Page