verified_user
Standardful
Homechevron_rightStandardschevron_rightDMA
ActiveInternational Standardupdate Last Updated: March 2024

DMA

Digital Markets Act — EU Regulation (EU) 2022/1925

apartmentPublishing Organization:European Union

Standard Introduction

The Digital Markets Act (DMA) is a landmark European Union regulation that came into full effect in March 2024. It aims to ensure fair and open digital markets by imposing specific obligations on large technology platforms designated as 'gatekeepers.' The DMA addresses anti-competitive practices in the digital sector, particularly concerning app stores, search engines, social media platforms, and operating systems. Companies with significant market power must allow interoperability, enable users to choose alternative services, and refrain from self-preferencing their own services over competitors. The regulation specifically requires gatekeepers like Apple to allow sideloading of apps and alternative app marketplaces, fundamentally changing how users can access and install software on their devices.

The DMA designates gatekeepers based on criteria including: providing core platform services to over 45 million monthly active EU users and over 10,000 yearly active business users, having an annual EEA turnover of at least €7.5 billion in the last three financial years or a market capitalization of at least €75 billion, and operating in at least three EU member states. Designated gatekeepers include Apple, Alphabet (Google), Meta, Amazon, Microsoft, and ByteDance (TikTok). These companies must comply with obligations such as allowing third-party app stores, enabling interoperability with competitors, providing business users with access to their own data, and not pre-installing certain apps. The European Commission can impose fines up to 10% of global turnover for non-compliance, with repeated infringements potentially reaching 20% of global turnover. Several investigations into potential non-compliance have already been initiated, particularly concerning Apple's implementation of the DMA requirements.

shield

Scope

Applicable to organizations of all sizes and industries, covering the protection of confidentiality, integrity, and availability.

account_tree

Structure

Follows the High Level Structure (HLS), ensuring seamless integration with other ISO management standards like ISO 9001.

verified

Certification

Organizations can achieve accredited certification after successfully completing an external audit of their ISMS.

list_alt Core Requirements (Clauses 4-10)

  • Context of the organization
  • Leadership & Commitment
  • Planning & Risk Assessment
  • Support & Awareness
  • Operation
  • Performance evaluation
  • Continual Improvement

Official Documentation

View All

Affected Companies (Gatekeepers)

phone_iphone

Apple

Gatekeeper
search

Google (Alphabet)

Gatekeeper
tag_faces

Meta

Gatekeeper
shopping_cart

Amazon

Gatekeeper
window

Microsoft

Gatekeeper
music_note

ByteDance (TikTok)

Gatekeeper

Implementation Timeline

gavel
May 2023
DMA came into force - Regulation entered into force 20 days after publication in Official Journal
corporate_fare
Sept 2023
First gatekeepers designated - European Commission designated Apple, Alphabet, Amazon, Meta, Microsoft, and ByteDance
check_circle
March 2024
DMA became fully applicable - All gatekeeper obligations became enforceable, including app sideloading requirements
warning
June 2024
Apple found potentially non-compliant - European Commission issued preliminary findings that Apple violated DMA Article 5(4)
update
Aug 2024
Apple updated compliance rules - Apple modified developer rules for external communication in response to Commission feedback

Related Categories