How the EU’s DMA and DSA Are Rewriting the Rules for Big Tech Worldwide
This article explains what these rules do, how they are already changing products from Apple, Google, Meta, Amazon, Microsoft, and others, and what comes next for innovation, competition, and user rights.
A wave of ambitious tech regulation—led by the European Union but increasingly echoed across the globe—is turning policy debates into concrete product changes. App store fees and rules, cross‑platform messaging, data portability, algorithmic transparency, and platform liability for illegal content are no longer abstract concerns; they are now central design constraints for every large digital platform.
The EU’s twin flagships, the Digital Markets Act (DMA) and the Digital Services Act (DSA), sit at the core of this transformation. Around them, antitrust lawsuits and sector‑specific rules in the US, UK, and other jurisdictions are creating a dense, evolving regulatory web that big tech must navigate. This article provides a structured, up‑to‑date overview of these developments and their implications.
Mission Overview: Why the DMA, DSA, and Antitrust Cases Matter
The broad mission behind current tech regulation is to rebalance power in digital markets—away from a handful of “gatekeeper” platforms and toward users, smaller competitors, and democratic institutions. Regulators argue that the largest platforms have become essential gateways for communication, commerce, and information, and that traditional competition rules were too slow or narrow to address these systemic dynamics.
The EU responded with a dual‑track strategy:
- Digital Markets Act (DMA) – ex‑ante competition rules for very large platforms (“gatekeepers”).
- Digital Services Act (DSA) – updated framework for online intermediary liability, content moderation, transparency, and systemic risk management.
At the same time, the US and UK have intensified antitrust enforcement, targeting app store policies, ad tech stacks, and alleged self‑preferencing behavior. These efforts complement (and sometimes conflict with) EU initiatives, creating a complex global landscape.
“We are moving from a world where platforms set the rules alone to one where democratic institutions codify baseline obligations for digital gatekeepers.”
— Margrethe Vestager, Executive Vice‑President, European Commission (Competition & Digital)
Technology and Market Architecture Under the DMA
The DMA targets platforms that meet specified size and reach thresholds—so‑called gatekeepers. As of 2024–2025, designated gatekeepers include firms such as Alphabet (Google), Apple, Meta, Amazon, Microsoft, and ByteDance. The regulation focuses on core platform services like app stores, search engines, social networks, operating systems, and online intermediation services.
Key Technical and Product Obligations
- Alternative App Distribution and Payments
- Mobile OS providers must allow third‑party app stores and, in many cases, direct app downloads (sideloading) under specified security conditions.
- Developers can offer alternative in‑app payment systems and steer users to external payment flows without being penalized in rankings.
- Interoperability and Data Portability
- Messaging services designated as gatekeepers must gradually support interoperability with third‑party messaging apps for basic features such as text and image messaging.
- Platforms must provide continuous data portability via APIs, enabling users and competing services to access user‑authorized data in near real time, subject to privacy safeguards.
- Self‑Preferencing and Default Settings
- Gatekeepers cannot unfairly rank their own services above rivals in search or marketplaces.
- Users must be able to easily change default apps and settings (e.g., default browser, search engine, navigation app).
These provisions are already driving concrete changes, particularly in the EU versions of mainstream products. For example, Apple and Google have introduced new flows to select default browsers and search engines, and both are experimenting with alternative app distribution and billing models to comply with DMA requirements while preserving security and revenue.
Technology: Content Governance and Risk Management Under the DSA
While the DMA focuses on market power, the Digital Services Act addresses how platforms handle content, recommender systems, and systemic risks. It applies to a wide range of intermediaries, but imposes the heaviest duties on Very Large Online Platforms (VLOPs) and Very Large Online Search Engines (VLOSEs)—typically services with more than 45 million users in the EU.
Systemic Risk Assessments and Mitigation
VLOPs must regularly assess and mitigate systemic risks related to:
- Disinformation and information manipulation (including during elections).
- Illegal content (terrorism, hate speech, CSAM, intellectual property violations, etc.).
- Algorithmic harms such as discriminatory outcomes, addictive design patterns, or negative effects on minors.
Transparency and User Controls
- Platforms must offer meaningful explanations of recommendation algorithms, including why specific content or ads are shown.
- Users should have options to view feeds using non‑profiling‑based or chronological ranking where feasible.
- Ad repositories must disclose the sponsors, targeting parameters, and reach of political and other high‑impact ads.
“Algorithmic transparency is not about disclosing source code. It is about enabling meaningful scrutiny of how platform decisions shape public discourse and individual rights.”
— Daphne Keller, Director, Program on Platform Regulation, Stanford Cyber Policy Center
Compliance has triggered visible interface changes: expanded reporting tools for illegal content, more detailed ad labels, explainers for recommender systems, and “why am I seeing this?” dialogs across major platforms operating in the EU.
Global Context: US, UK, and Other Jurisdictions
Outside the EU, regulators have taken a more case‑driven or sector‑specific approach, but the trajectory is similar: greater oversight of gatekeepers and more rules for data and ad ecosystems.
United States
- The US Department of Justice and Federal Trade Commission have pursued landmark antitrust cases against Google (search and ad tech), Meta (acquisitions and social dominance), and others.
- Several state‑level privacy laws (e.g., in California, Colorado, Virginia) impose rules on data collection, consent, and user rights, echoing elements of the EU’s GDPR.
- Proposed bills such as the American Innovation and Choice Online Act aim to curb self‑preferencing and app store restrictions, though progress has been uneven.
United Kingdom and Beyond
- The UK’s Digital Markets, Competition and Consumers (DMCC) regime gives the Competition and Markets Authority (CMA) targeted powers over firms with “Strategic Market Status.”
- Australia, South Korea, Japan, and India have introduced or proposed regulations on app store billing, online safety, and intermediary responsibility.
- Many jurisdictions are exploring AI‑specific rule sets (e.g., the EU AI Act) that will intersect with DMA/DSA obligations for large platforms.
Scientific and Societal Significance of Platform Regulation
Although these initiatives are legal and economic in nature, they have deep implications for computer science, data science, and human‑computer interaction. Researchers now have unprecedented access to platform data and documentation, enabling more rigorous study of algorithmic influence and online harms.
New Research Opportunities
- Recommender system auditing via mandated transparency APIs and researcher access programs.
- Network analysis of disinformation flows and intervention efficacy under DSA risk‑mitigation regimes.
- Econometric studies of competition impacts from DMA‑driven changes, such as alternative app stores and billing systems.
- Behavioral research on how consent flows, default changes, and interface nudges shape user choices.
Many of these efforts connect directly to academic work from institutions such as Harvard’s Berkman Klein Center, the Stanford Cyber Policy Center, and European networks like the Centre for a Digital Society.
Milestones: From Legislative Text to Product Changes
The regulatory story is not just about laws passed; it is about enforcement milestones and successive waves of platform adaptation. Key stages include:
- Legislative Adoption – The DMA and DSA were formally adopted in 2022 after years of negotiation.
- Gatekeeper and VLOP Designations – In 2023–2024, the European Commission designated specific services (e.g., iOS, Android, Google Search, Amazon Marketplace, TikTok) as being subject to enhanced obligations.
- Compliance Deadlines – By early 2024, gatekeepers had to ship compliant changes, such as:
- New choice screens for default apps and search engines.
- Revised app review and ranking policies.
- Transparency dashboards and ad repositories.
- Investigations and Fines – The Commission has opened formal proceedings against several gatekeepers to assess whether their new offerings (e.g., alternative fee structures, bundling of consent) genuinely comply with DMA/DSA requirements.
- Case Law and Clarifications – As disputes reach EU courts, case law will refine ambiguous concepts like “self‑preferencing” and “effective interoperability.”
Each enforcement step provides new data on how platforms respond—whether by embracing new business models, minimally complying, or challenging provisions in court. Tech media such as Ars Technica, The Verge, and Wired track these developments closely.
Developer, Business, and User Impact
For developers and digital businesses, the DMA and related rules are both an opportunity and a source of complexity. The headline promise is reduced dependency on a single app store and lower effective fees, but the reality is more nuanced.
Opportunities for Developers and Startups
- New third‑party app stores and direct distribution flows for mobile apps in the EU.
- Potentially lower commission rates or alternative billing options that preserve more margin for developers.
- Easier access to platform data and interoperability hooks, lowering barriers to building companion or competing services.
Added Complexity and Compliance Costs
- Need to adapt apps to multiple regional variants of app store rules and privacy consent flows.
- Increased obligations around data protection, transparency, and algorithmic accountability for larger services.
- Ongoing monitoring of updates to terms of service and developer policies as platforms iterate on their compliance strategies.
For users, the picture is similarly mixed. They gain more choice, better access to data, and stronger rights, but may also face:
- More complex settings and consent dialogs, especially around tracking, profiling, and cross‑service data sharing.
- Differences in app behavior between regions—features may launch first (or only) outside heavily regulated markets.
- Potentially higher subscription prices or new fees as platforms and developers re‑optimize their revenue models.
Practical Tools and Resources for Navigating Compliance
Organizations building products on top of large platforms increasingly need a blend of legal, technical, and data‑governance tooling. A few practical approaches include:
Data and Consent Management
- Implementing robust Consent Management Platforms (CMPs) to handle granular user permissions across regions.
- Using privacy‑by‑design engineering patterns, such as data minimization, local processing, and differential privacy where appropriate.
Reading and Monitoring the Rules
- Following the European Commission’s official DMA and DSA guidance pages and enforcement reports.
- Subscribing to policy analysis from organizations like the Electronic Frontier Foundation and Access Now.
Helpful Reading Hardware and Accessories (Affiliate Suggestions)
For professionals spending long hours reviewing technical standards, regulatory texts, and compliance documentation, optimized reading setups can reduce strain:
- An e‑ink tablet like the Kindle Scribe can make long‑form regulation and standards documents easier on the eyes while allowing annotation.
- Ergonomic keyboards such as the Logitech MX Keys Advanced Wireless Keyboard can help developers and legal teams stay productive during extended compliance sprints.
Challenges, Trade‑offs, and Critiques
Despite broad support for many goals of the DMA and DSA, experts disagree sharply on implementation details and unintended consequences.
Key Concerns Raised by Critics
- Compliance favors incumbents: Large firms can absorb regulatory overhead more easily than startups, potentially entrenching the very players the rules target.
- Reduced agility: Heavy process requirements may slow product iteration and experimentation, especially in fast‑moving fields like AI.
- Over‑broad removal incentives: Fear of penalties might push platforms toward over‑moderation of borderline or controversial content.
- Fragmentation risk: Divergent rules between the EU, US, and other regions may lead to balkanized digital experiences and increased friction for global users.
“The challenge is to curb abuses of power without freezing innovation. Getting that balance right will require iterative calibration, not one‑off grand designs.”
— Tim Wu, Professor of Law, Columbia University, former White House technology advisor
Supporters counter that many of these costs are necessary investments in a healthier digital ecosystem and that long‑term benefits—more competition, safer platforms, and greater user autonomy—will outweigh short‑term adjustment pains.
The Future of Big Tech: Scenarios for the Next Decade
As enforcement ramps up and court decisions accumulate, several plausible trajectories for the global digital ecosystem are emerging.
Scenario 1: Regulated but Resilient Gatekeepers
Gatekeepers adapt, margins compress somewhat, but existing giants remain dominant. Competition improves at the margins; users gain more choice and control, yet core platform structures persist.
Scenario 2: Genuine Unbundling and New Entrants
Interoperability, data portability, and loosened app store rules slowly erode lock‑in. New intermediaries emerge—specialized app stores, cross‑platform messaging layers, independent identity providers—leading to a more modular ecosystem.
Scenario 3: Regulatory Overreach and Innovation Slowdown
Excessive rigidity and fragmented rules push investment and innovation away from heavily regulated sectors or regions. Startups avoid building on top of platforms whose compliance obligations are unpredictable or burdensome.
In reality, the outcome will likely be a mix of these scenarios, varying by region and sector. The interaction between platform regulation and emerging AI‑specific rules will be particularly important to watch: AI foundation model providers may become the “next gatekeepers,” subject to similar ex‑ante constraints.
Conclusion: From Code Is Law to Law Shapes Code
Over the past decade, the mantra that “code is law” captured how platform design effectively governed digital life. The DMA, DSA, and global antitrust actions mark a turning point: law is now reshaping code. Design decisions about defaults, interoperability, app distribution, and algorithmic curation are increasingly constrained by statutory obligations and formal oversight.
For engineers, product managers, researchers, and policymakers, this era demands cross‑disciplinary fluency. Understanding systems architecture, economic incentives, and legal frameworks is no longer optional; it is central to building and governing technology at scale.
Whether these regulatory experiments ultimately foster a more open, competitive, and rights‑respecting digital ecosystem will depend on careful enforcement, empirical evaluation, and ongoing dialogue between regulators, industry, and civil society. But one thing is already clear: the future of big tech will be co‑written by lawmakers and engineers together.
Additional Resources and Further Learning
For those who want to dive deeper into EU and global tech regulation, the following resources provide detailed, regularly updated analysis:
References / Sources
The information in this article synthesizes public documents and expert commentary available as of early 2026. Key sources include:
- Regulation (EU) 2022/1925 – Digital Markets Act
- Regulation (EU) 2022/2065 – Digital Services Act
- US Department of Justice – Antitrust Division Announcements
- UK Competition and Markets Authority – Cases
- Ars Technica – Tech Policy Coverage
- The Verge – Technology News
- Wired – Online Privacy and Regulation
- Stanford Center for Internet and Society
