Law & Regulation

Apple's Tracking Prompt Now Runs on a Four-Month Clock

The Bundeskartellamt closed its case against Apple's App Tracking Transparency Framework with binding commitments: a neutral consent prompt, a seven-year monitoring trustee, and a four-month deadline to comply.

Law & RegulationBy Servola Tech Desk2026-08-223 min read

AI-assisted, edited by humans. | Editor-in-Chief: Leon Soliman | Editorial standards

Apple's Tracking Prompt Now Runs on a Four-Month Clock

A Four-Month Clock, Not a Fine

Germany's Bundeskartellamt closed its investigation into Apple's App Tracking Transparency Framework on August 13, 2026, with a package of binding commitments rather than a fine. The regulator announced the decision publicly on August 17, 2026, four years after opening the case in June 2022 under Section 19a of the German Competition Act (GWB) and Article 102 of the Treaty on the Functioning of the European Union (TFEU), the EU's prohibition on abusing a dominant market position.

The case turned on a structural asymmetry the Bundeskartellamt had flagged since its preliminary assessment in February 2025: Apple requires third-party apps to display its own predefined tracking-consent prompt before requesting permission for cross-company data use, while Apple's own advertising business relies on a separate, self-designed consent flow for comparable data use. Bundeskartellamt president Andreas Mundt said the point of the ruling is to protect personal data and privacy effectively by making Apple align its own consent requests with those it imposes on outside developers, and by giving those developers more room to combine the requests they are obligated to show users.

What Apple Must Actually Change

Apple must strip the warning-hand symbol and the word tracking from its own consent prompt, the same discouraging design elements third-party apps have had to show users since 2021 while Apple's own prompt used softer language. The redesigned prompt must match the wording, layout, and order of selection options used in Apple's existing prompt for personalized advertising, so a user sees a neutral choice regardless of whether the request originates from Apple or from an outside developer.

Beyond the prompt's design, Apple must let publishers combine its mandated consent request with the separate consent notices they already have to show under data protection law, instead of forcing two disconnected prompts on the same user in the same session. An independent monitoring trustee will oversee compliance for seven years, mediate disputes between Apple and third-party publishers over how the new rules are applied, and report back to the Bundeskartellamt, giving the regulator a standing channel into implementation long after the four-month deadline for the redesign itself expires.

Why Ad Budgets Should Watch the Opt-In Rate, Not the Ruling

Every business that buys personalized mobile advertising in the EU is now planning around a moving opt-in baseline, not a fixed one. Independently tracked opt-in rates for Apple's tracking prompt ran near 11 to 15 percent in 2021 through 2023 and had climbed to an industry average close to 38 percent by the first quarter of 2026, the baseline advertisers have been building targeting and measurement assumptions on for years.

That baseline was set by a prompt the Bundeskartellamt has now ordered rebuilt from the symbol up, and a neutral design carries no guarantee it lands anywhere near 38 percent once it ships within Apple's four-month window. App developers, e-commerce sellers, and publishers who depend on personalized ad revenue should treat current opt-in assumptions as provisional, not stable, and build contingency into targeting budgets and measurement models before Apple's redesigned prompt reaches German users, since the same design choices will likely shape whatever Apple ships across the rest of the EU next.

Frequently asked questions

What exactly did the Bundeskartellamt decide?

On August 13, 2026, the Bundeskartellamt closed its investigation into Apple's App Tracking Transparency Framework with binding commitments rather than a fine, announced publicly on August 17, 2026, under Section 19a GWB and Article 102 TFEU.

What must Apple change in its tracking prompt?

Apple must remove the warning-hand symbol and the word tracking, align wording, layout and option order with its own personalized-advertising prompt, let publishers use up to 4,000 characters to explain their request, and allow combining its prompt with data-protection consent notices.

Who checks that Apple follows through?

An independent monitoring trustee will oversee compliance for seven years, mediate disputes between Apple and third-party publishers, and report to the Bundeskartellamt; Apple has four months from service of the decision to implement the changes, testing them with publishers first.

Does this apply outside Germany?

The binding commitments cover users with a German billing address or device location, but the Bundeskartellamt has said its decision could shape how Apple redesigns the same framework elsewhere in the EU.

Apple settled without a fine and without admitting an infringement, but it did not settle without a clock: four months to rebuild the prompt, seven years of a trustee reading its mail. For any business whose ad budget still assumes the old prompt's opt-in math, that clock is now the more urgent number than the ruling itself.

AppleBundeskartellamtApp Tracking TransparencyGDPRDigital Advertising

Automated Firings Just Cost Uber 825 Million Euros

The Dutch data protection authority fined Uber 825 million euros on August 21, 2026 for deactivating driver accounts by algorithm alone, the second-largest GDPR fine on record and a warning for any business automating consequential decisions.

4 min read

Law & Regulation

The Met Police Breach Every Business Could Repeat

The ICO reprimanded the Met Police after a bulk email and an unredacted document exposed sensitive people. The same failure pattern applies to any business.

3 min read

Decisions

The Third Pivot Was the Warning Magic Leap Missed

Magic Leap filed a WARN notice for 193 layoffs effective 1 October 2026, its fourth strategic pivot after $4 billion raised. The lesson is the pattern, not the pivot.