The EU Digital Markets Act (DMA): A Guide to Mandatory Interoperability, Anti-Steering Rules, and the Gatekeeper Compliance Deadline

The digital economy has long been dominated by a handful of technology giants whose sprawling ecosystems act as impenetrable walled gardens. For years, consumers and independent software developers had little choice but to accept the non-negotiable terms, mandatory fees, and restrictive data policies dictated by these platforms. Operating as the ultimate arbiters of digital commerce, these companies controlled the primary gateways to the internet, stifling competition, extracting massive rents, and locking users into proprietary hardware and software loops that were nearly impossible to escape.[9]

The European Union’s Digital Markets Act (DMA) represents a fundamental paradigm shift in how the global internet is regulated. Rather than waiting for antitrust harms to occur and fighting years-long battles in court, the DMA imposes a proactive, ex ante regulatory framework. It establishes a strict, non-negotiable list of "dos and don'ts" designed specifically to pry open these walled gardens, ensuring that digital markets remain fair, contestable, and open to new entrants.[3][9]

At the heart of this sweeping legislation is the legal concept of the "gatekeeper." The European Commission designates specific multinational corporations as gatekeepers if they operate "core platform services"—such as search engines, mobile operating systems, app stores, web browsers, or social networks—that serve as critical, unavoidable bottlenecks between business users and everyday consumers. To qualify, a company must also meet massive financial thresholds and demonstrate an entrenched, durable position in the European market, ensuring the law targets only the most powerful monopolies.[1][3]

The initial wave of gatekeepers, formally designated in late 2023, included Alphabet, Amazon, Apple, ByteDance, Meta, and Microsoft. These companies were given a strict six-month transition period, ending in March 2024, to bring their core platform services into full compliance. This deadline marked the beginning of a new era, fundamentally altering how these tech behemoths handle user data, app distribution, and digital payments across the European continent.[2][3]

One of the DMA’s most consequential and fiercely debated pillars is the "anti-steering" prohibition. Historically, platform operators like Apple and Google strictly restricted third-party app developers from informing users about cheaper subscription rates or alternative payment options available outside of their proprietary app stores. This forced developers to process all transactions through the platform's native billing systems, subjecting them to mandatory commission fees of up to 30 percent and preventing them from establishing direct financial relationships with their own customer base.[7]

The DMA explicitly bans this restrictive practice, mandating that developers must be allowed to freely "steer" their customers to external offers and process payments without platform interference. The enforcement of this rule has been remarkably swift and severe; in April 2025, the European Commission levied a historic €500 million fine against Apple for systematically violating these anti-steering obligations.[1][2]

Regulators determined that Apple’s revised contractual terms still prevented developers from fully and freely communicating alternative purchasing options, thereby denying consumers access to potentially better deals and stifling price competition. Alphabet has faced similar regulatory scrutiny, with the Commission issuing preliminary findings in early 2025 regarding persistent steering restrictions within the Google Play ecosystem. Regulators are also investigating Alphabet for alleged self-preferencing in Google Search, demonstrating the broad, multi-front approach the EU is taking to enforce market fairness.[2]

Beyond the economics of app stores, the DMA mandates unprecedented levels of technical interoperability. The legislation requires dominant messaging platforms, such as Meta’s WhatsApp and Messenger, to allow third-party messaging services to seamlessly interoperate with their networks upon request. This breaks down the artificial barriers that keep users locked into a single application, ensuring that the utility of a communication tool is based on its features and privacy standards rather than merely the sheer size of its captive user base.[3]

This interoperability mandate directly neutralizes the power of network effects, which have historically insulated dominant platforms from meaningful competition. Under the DMA, a user on a smaller, privacy-focused European messaging app can theoretically send a secure text message or image to a WhatsApp user without ever needing to download Meta’s software or agree to its overarching terms of service. This forces legacy platforms to compete on product quality and data protection rather than relying on the inertia of their existing networks.[9]

The push for open digital infrastructure is now expanding rapidly into enterprise technology and backend systems. In late 2025, the European Commission opened formal market investigations to determine whether Amazon Web Services (AWS) and Microsoft Azure should be officially designated as gatekeepers for the foundational cloud computing sector. This move recognizes that cloud infrastructure has become the ultimate control plane for modern software, artificial intelligence development, and public-sector resilience, requiring the same regulatory oversight as consumer-facing app stores.[4][6]

If designated, AWS and Azure would face strict, legally binding requirements to ensure technical interoperability between competing cloud services and to facilitate seamless data portability for enterprise customers. Stakeholder roundtables, scheduled for July 2026, are currently assessing the complex technical feasibility of these cloud interoperability mandates. Regulators are particularly focused on eliminating exorbitant egress fees and restrictive software licensing practices that currently make it economically punishing for businesses to migrate their data to competing cloud providers.[6]

Another critical component of the DMA is its severe restriction on internal data combination. Gatekeepers are strictly prohibited from combining personal data collected across their various distinct services—such as merging a user's Instagram engagement data with their Facebook profile, or linking WhatsApp metadata to broader advertising profiles—without obtaining explicit, uncoerced user consent. This vital provision prevents tech giants from leveraging their dominance in one sector to automatically conquer another through insurmountable, opaque data advantages. It fundamentally changes the economics of digital surveillance.[4][5]

This rule directly challenges the highly lucrative targeted advertising models that rely on vast, cross-platform data pooling. In April 2025, Meta was fined €200 million for failing to offer users a genuinely equivalent service that uses less personal data, highlighting the Commission’s uncompromising interpretation of what constitutes valid, freely given consent under the new law. The ruling established that users cannot be penalized with degraded service simply for refusing to surrender their cross-platform behavioral data. This sets a powerful precedent for digital privacy rights.[1][4]

The DMA also strictly prohibits the practice of "self-preferencing," ensuring a level playing field for independent businesses. Gatekeepers can no longer rank their own proprietary products or services higher than those of third-party competitors on their platforms. For instance, Google is barred from automatically placing its own shopping aggregator, flight tracker, or local business reviews at the top of its search results ahead of rival platforms that may offer better or more relevant information to the consumer. This ensures that merit, rather than platform ownership, determines market success.[3][5]

To enforce these sweeping structural changes, the European Commission has been armed with unprecedented punitive powers that command the attention of corporate boardrooms. Gatekeepers found in violation of the DMA can face staggering financial penalties of up to 10 percent of their total worldwide annual turnover. For a company like Apple or Alphabet, this translates to tens of billions of dollars. Furthermore, that penalty ceiling rises to a massive 20 percent for repeated, systemic infringements of the law.[9]

In extreme cases of persistent non-compliance, the Commission possesses the ultimate authority to impose structural remedies upon the offending corporations. This means regulators could theoretically force a tech giant to divest entire divisions or sell off specific core platform services to restore market balance. This existential threat of being broken up has prompted massive, albeit reluctant, compliance efforts across Silicon Valley, forcing companies to fundamentally re-engineer products that were previously considered untouchable. The era of unregulated digital expansion has definitively ended.[9]

Critics of the DMA, including several of the designated gatekeepers and industry lobbying groups, argue that the strict interoperability and sideloading mandates inherently compromise user security and data privacy. They contend that vetting apps and maintaining tightly controlled, closed ecosystems is the only reliable way to protect consumers from malware, financial scams, and catastrophic data breaches. These companies warn that forcing platforms to open their architecture introduces vulnerabilities that malicious actors will inevitably exploit. This debate between open competition and closed-system security remains highly contentious.[3]

However, the European Commission’s comprehensive April 2026 review of the legislation concluded that the DMA remains entirely "fit for purpose" and resilient against these industry critiques. The regulatory report found that the law is successfully opening up digital markets to smaller developers and competitors, while simultaneously giving users unprecedented, granular control over their digital lives and personal data. Regulators maintain that security can be achieved through open standards rather than monopolistic control. The Commission views these early results as a validation of their ex ante approach.[8]

The ultimate impact of the Digital Markets Act extends far beyond Europe’s geographic borders. Through a phenomenon known as the "Brussels Effect," global technology companies are increasingly applying these strict European compliance standards worldwide. Because maintaining fundamentally different technical infrastructures and business models for different regions is often economically and logistically impractical, the EU's regulations effectively become the default global standard, granting users in North America and Asia the same digital rights. This dynamic cements Europe's role as the world's leading technology regulator.[3][8]

As the DMA transitions from its initial compliance phase into an era of rigorous, uncompromising enforcement in late 2026, it serves as the definitive global blueprint for digital regulation. By proactively dismantling entrenched monopolies and mandating interoperability, the framework is fundamentally rewriting the rules of the internet. It shifts power away from centralized gatekeepers and back to consumers and independent creators, ensuring that the next generation of technology prioritizes fairness, choice, and open competition.[9]