Germany Tells Apple: Play Fair With Your Own App Tracking Rules

Germany's Federal Cartel Office (Bundeskartellamt) ruled on August 17, 2026, that Apple designed its app-tracking permission system in a way that favors Apple's own apps over apps made by other companies. The regulator ordered Apple to make its permission prompts fair and identical across both its own services and outside developers' apps. Apple has four months to make the changes and must test the revised prompts with app developers before rolling them out. (Bundeskartellamt)

The case began in June 2022 and looked at a system Apple introduced in April 2021 called App Tracking Transparency, or ATT. ATT requires apps to ask users for permission before tracking what they do across other companies' apps and websites. The Bundeskartellamt found that Apple does not treat its own apps and third-party apps the same way. The wording, design, and options in the permission prompts for Apple's own apps could encourage users to say yes, while the prompts shown for third-party apps could discourage it. (Bundeskartellamt; Engadget)

A key difference the regulator identified comes down to how many steps users go through. When a third-party app wants to track you, Apple shows two separate permission screens. But for Apple's own apps, there is no extra step. That means Apple's apps face fewer hurdles to get your permission than outside apps do. (Bundeskartellamt FAQ)

Under the ruling, Apple must remove any symbols or wording that might discourage users from granting permission in the prompts shown for third-party apps. The prompts must be neutral in content, wording, and layout. Apple agreed to largely match the wording and content of the prompts across its own services and third-party apps. (Bundeskartellamt; Reuters)

The commitments will stay in force for seven years and will be overseen by an independent monitor responsible for checking that Apple keeps complying. Apple must also test the revised prompts with app developers during the four-month implementation period. (Bundeskartellamt; Engadget)

The ruling formalizes changes Apple had already signaled in December 2025, when the Bundeskartellamt first announced that Apple had agreed to introduce neutral consent prompts for both its own services and third-party apps. (Bundeskartellamt, December 2025; Reuters)

The broader context here is that ATT has been controversial since it launched, because it effectively gives Apple control over the iPhone advertising ecosystem. When a third-party app wants to track users for advertising purposes, it has to show a system-level permission dialog that Apple designs and controls. Think of it as a tollbooth: Apple decides what the sign says, how it looks, and where it is placed. If the sign for outside apps is worded in a way that makes people more likely to say no, while Apple's own apps get an easier path, that distorts competition. It affects how advertisers measure ad performance, how they target users, and how entire categories of apps make money.

What the Bundeskartellamt's ruling targets is not whether ATT should exist, but whether the permission system treats all apps equally. The distinction matters. Privacy rules that require apps to ask for consent are reasonable. The problem arises when the company that owns the platform designs those rules in a way that benefits its own data collection over everyone else's. The German authority's fix is narrow and specific: make the prompts the same, remove anything that discourages users, and check the changes with developers before deployment.

The seven-year oversight period and the appointment of an independent monitor signal that the Bundeskartellamt expects compliance to need ongoing attention, not a one-time fix. For developers who have lived under the existing system since 2021, the practical question is whether fairer prompts actually change how many users say yes, and how quickly Apple can deliver the revised system across all iPhones within the four-month window. The developer testing requirement creates a feedback process that could surface disagreements, especially around what counts as "neutral" in practice.

This ruling lands within a wider European regulatory landscape where Apple's control over its ecosystem is under scrutiny on multiple fronts, but the Bundeskartellamt's decision is specifically scoped to the ATT consent mechanism under German competition law, not to ATT as a privacy measure per se.