Google Appeals EU Digital Markets Act Orders Requiring Search Data Sharing and Android Access for AI Rivals

Start inside the disagreement. The European Commission argues that forcing Google to share anonymized search data and open Android's core features to rival AI assistants is the only way to break a monopoly and give users genuine choice.[2][5]

Google argues that handing over the search histories of millions of Europeans and granting deep system permissions to third-party AI agents will cause irreversible harm to user privacy and device security. That fundamental clash over who controls the boundary between market competition and system security is now heading to court.[6]

On September 28, 2026, Google formally appealed two binding orders issued under the Digital Markets Act (DMA), escalating a high-stakes regulatory battle. The appeal challenges mandates handed down by the European Commission in July 2026.[4][6]

The first order requires Google to share anonymized search-and-click data with competing search engines and artificial intelligence developers by January 2027. This specific mandate targets the massive historical data advantage that currently powers Google Search.[7]

The second order demands that Google open 11 specific Android features to third-party AI assistants by August 2027. This mandate is designed to give competing chatbots the same system-level access currently enjoyed by Google's own Gemini assistant.[6]

The Data Sharing Mandate

The European Commission's data-sharing requirement targets the massive query logs that train modern search and AI models. Regulators assert that without access to real-world search data, rival search engines and emerging AI chatbots cannot effectively refine their algorithms to compete with Google's dominant market position.[2][7]

The mandated data sharing covers anonymized information about user queries, search rankings, clicks, and views. The European Union explicitly does not require Google to hand over user account details or full, unredacted search histories, focusing instead on the aggregated behavioral signals that allow a search engine to understand which results actually satisfy a given query.[7]

To mitigate the obvious privacy risks, the Commission developed a multi-layered anonymization framework in collaboration with the European Data Protection Board. The regulator insists this method strips identifying signals before any query ever reaches a competitor, ensuring compliance with the General Data Protection Regulation.[6]

Google rejects that assurance entirely, framing the regulatory mandate as a reckless exposure of user data. Oliver Bethell, Google's senior director for competition, stated that the order forces the company to pass sensitive data to commercial entities without sufficient anonymization, user knowledge, or explicit consent.[6]

"People use Search for their most personal questions, from medical worries to close relationships," Bethell said in a public statement. "Mandating we share these personal queries without adequate safeguards would cause irreversible harm to user privacy."[6]

Deep System Access

The second front of the appeal centers on the architecture of the Android operating system. Currently, Google's Gemini assistant can listen for a wake word while the screen is off, read on-screen content, and execute actions inside other applications by simulating taps and typing.[4][6]

The DMA order requires Google to grant those exact capabilities to competing AI agents, such as OpenAI's ChatGPT or Perplexity. The Commission views this parity as essential for consumer choice, arguing that users should be able to replace Gemini entirely with a third-party alternative.[4][6]

Google counters that granting such powerful permissions to downloaded applications that have not been vetted by hardware manufacturers introduces severe vulnerabilities. The company claims the mandate weakens vital security protections that keep malicious actors from hijacking device microphones or reading sensitive screen contents.[4][6]

The technical reality of autonomous AI agents complicates the debate. While the Commission focuses on the competitive disadvantage of restricting third-party applications, granting an external AI model persistent access to a phone's screen and microphone fundamentally alters the device's threat model.[6]

An agent capable of booking a taxi on a user's behalf must also possess the permissions required to read banking details or intercept two-factor authentication codes. Google argues that forcing the operating system to accommodate these integrations inherently degrades the sandbox protections that isolate applications from one another.[6]

The Compliance Timeline

Filing an appeal with the General Court in Luxembourg does not automatically pause the Commission's orders. Under European Union law, the compliance deadlines remain legally binding unless the court explicitly grants interim relief, which Google would need to request and win separately.[2][4]

That means Google must still engineer the infrastructure to share search data by January 2027 and implement the Android interoperability changes by the summer of 2027. The company faces the dual burden of fighting the mandates in court while simultaneously building the technical capacity to comply with them.[4][6]

Failure to comply with the DMA carries severe financial penalties that scale with the size of the targeted gatekeeper. Companies can face fines of up to 10% of their annual global revenue, which can rise to 20% for repeated infringements, alongside periodic penalty payments of up to 5% of average daily sales.[2]

A Broader Regulatory Clash

The appeal represents the latest escalation in a prolonged battle between American technology giants and European regulators over the boundaries of the Digital Markets Act. The law was designed to dismantle the structural advantages of dominant platforms, but tech firms increasingly argue those advantages are actually security features.[3][5]

Competitors have already weighed in on the dispute, largely dismissing Google's privacy defense. Search rival DuckDuckGo publicly backed the European Commission, stating that the anonymization framework is robust and characterizing Google's appeal as a delay tactic designed to protect its monopoly.[2]

The court's eventual ruling will establish a critical precedent for how the DMA is enforced across the technology sector. It will determine whether a dominant platform's security and privacy architecture can legally override a regulatory mandate designed to dismantle its market advantage.[2][5]