The Digital Markets Act centers around 6 large tech companies (referred to as "gatekeepers") that currently dominate the digital world. The DMA law is meant to protect the data privacy of users online and help ensure fair competition in digital markets.
However, as a user of these online platforms, it is not always easy to sift through the information and figure out what this means for you.
Who does DMA apply to?
If your business relies on the gatekeepers’ platforms or services, you need to be ready for the DMA. First step is to check whether you are using services from one of the companies below. If you own a website or app, the answer is most likely yes.
- Alphabet (parent company of Google and Android)
- ByteDance (parent company of TikTok)
- Meta (parent company of Facebook, Instagram and WhatsApp)
- Microsoft (parent company of LinkedIn)
*Several other companies and a number of additional platforms and services are being considered as additions to this list, and so these may change in the future.
What does DMA mean for my business?
If you collect or use personal data through these gatekeepers platforms or services, it is essential to obtain consent for it and signal the gatekeeper accordingly.
Obtain explicit user consent
A consent management platform, like Cookiebot CMP, enables you to obtain consent for cookies and tracker usage that access personal data.
Store user consent
You as a website or app owner must be able to document that your website users from the EU have given consent for processing their personal data. You can read more about how we do this: Logging and demonstration of user consents.
Signal user consent to gatekeepers
Per the DMA requirements, the users consent choice must also be passed on to the gatekeepers, e.g. via Google Consent Mode for Google's platforms and IAB Europe's Transparency and Consent Framework (TCF v2.2).
You can get ready for the DMA now by implementing Cookiebot CMP on your business website. Start your free 14-day trial and see how easy it is to achieve and maintain compliance with the most important privacy regulations.