Germany Locks Neutral Apple ATT Prompts Across Most of Europe

Germany’s Bundeskartellamt on August 17 declared Apple’s commitments binding, closing a four-year probe into the App Tracking Transparency Framework. Apple must redesign the third-party consent prompts so they no longer discourage users relative to the company’s own Personalized Ads requests. The changes take effect within four months of formal service and last seven years under an independent monitoring trustee. They apply first in Germany and are expected to shape ATT design across almost all of the European Union.

Apple still maintains the framework complied with competition law. It chose the settlement path rather than a fight that could have produced a formal finding of infringement.

What Changes in the New Neutral Prompts

The core problem was unequal design. Third-party apps had to show an Apple-controlled prompt that used a warning hand symbol, the word “tracking,” limited explanation space and button order that put refusal first. Apple’s own apps used a separate Personalized Ads prompt with friendlier wording, layout and choice order that made consent easier.

Under the commitments Apple will align the two systems. Specific fixes drawn from the regulator and subsequent reporting include:

• Removal of discouraging symbols such as the warning hand and the term “track” or “tracking” from both the ATT and Personalized Ads prompts
• Shift of the ATT graphic element from orange to blue and expansion of the prompt to a full page
• Button labels changed from “Allow” / “Ask App Not to Track” to “Allow” / “Reject,” with order adjusted so Allow sits higher
• Developers gain a customizable purpose string of up to 4,000 characters to explain why personalized ads matter to their business model
• Formatting options (bold, italics, bullets) inside the prompt and an option to surface an extra GDPR information page directly from it
• Greater freedom to combine or sequence the ATT request with the separate data-protection consent required under GDPR, cutting duplicate hurdles
• Right to re-prompt users one year after any decision, whether yes or no
• Minor clarifying language tweaks to Apple’s own Personalized Ads prompt without changing its effect

App publishers will test the new flows with Apple before the full rollout. The design must be neutral in content, wording and layout.

Why the Dual Design Failed the Fairness Test

Andreas Mundt, president of the Bundeskartellamt, stated the agency’s line clearly. Apple may protect privacy above the legal minimum. But extra rules inside its ecosystem cannot treat its own offerings better than rivals’ under Germany’s special rules for large digital firms.

It is key that personal data and privacy are protected effectively when using apps. Apple is allowed to provide for a level of protection for its users that exceeds the minimum legal requirements. However, if Apple sets up additional rules within its ecosystem for the use of data, these rules must, under Germany’s special abuse provision for large digital companies, not treat its own offerings better than those of its competitors.

Andreas Mundt, President, Bundeskartellamt

The preliminary assessment found the differences exceeded what data-processing distinctions could justify. Third-party apps sometimes faced multiple consent steps even after users had already given GDPR-compliant permission. Apple controls both the App Store distribution channel and its own advertising inventory, creating a dual role that triggers heightened obligations against self-preferencing.

The agency consulted Germany’s federal data protection commissioner and Bavaria’s state office so the case stayed inside competition law and did not spill into privacy enforcement.

Section 19a Powers and the Long Road to Settlement

The case rested on Section 19a of the German Competition Act plus Article 102 TFEU. Section 19a lets the Bundeskartellamt first designate a firm as being of paramount significance for competition across markets, then prohibit specific conduct. Apple received that designation in April 2023. Germany’s Federal Court of Justice upheld Apple’s paramount significance finding in March 2025.

Timeline of the proceeding:

1. June 2022, Bundeskartellamt opens investigation into ATTF
2. April 2023, Apple designated of paramount significance under Section 19a
3. February 2025, Authority shares preliminary legal assessment with Apple and intervening associations
4. March 2025, Federal Court of Justice confirms the designation
5. December 2025, Market test of Apple’s offered commitments
6. August 13, 2026, Commitment decision dated; four-month clock starts on service
7. August 17, 2026, Public announcement that commitments are binding and the case is closed

Industry associations representing branded goods, media and advertising had complained as early as 2021. They argued a gatekeeper should not impose extra-statutory rules that restrict rivals’ advertising models while Apple’s own services faced lighter treatment. Apple countered that ATT protects users and helps it stand out on privacy. The settlement avoids a formal infringement decision while locking in the design changes.

Who Gains From the Levelled Consent Path

Ad-funded apps and media publishers stand to benefit most. Personalized advertising typically yields higher revenue than non-targeted campaigns. ATT, introduced with iOS 14.5 in 2021, drove opt-out rates of 60-80 percent in many markets and was linked by Meta to roughly $10 billion in lost advertising revenue the following year. Smaller developers and publishers felt the squeeze harder because they lack Apple’s first-party data scale.

With more explanation space, formatting tools, combined consent flows and the chance to re-ask after a year, those publishers can present a clearer case for why a yes helps keep the app free or low-cost. Advertisers and measurement providers also gain from reduced friction. Apple itself keeps ATT alive in Europe and continues to control the technical implementation. It simply loses the design tilt that regulators said favored its own ads business.

Users retain the final choice. Mundt stressed the goal is free and informed decisions in either direction, not higher consent rates. Privacy campaigners who welcomed the original ATT still have the opt-out button; it just sits in a less loaded frame.

The seven-year duration and trustee monitoring give the remedy unusual staying power compared with one-off fines.

How This Fits the Wider European Pattern

France fined Apple €150 million and Italy €98.6 million last year over related ATT issues. Those cases punished past conduct. Germany’s approach is forward-looking: fix the design, monitor compliance, and influence the framework elsewhere. The Bundeskartellamt coordinated throughout with other national authorities and the European Commission inside the European Competition Network.

The outcome sits alongside the Commission’s broader App Store cases that began in 2020, the DMA gatekeeper designation, and the €500 million fine Apple received in April 2025 for anti-steering rules. Each action chips at the dual role of platform owner and competing service provider. The ATT settlement is distinctive because it rewrites a privacy interface rather than a payment or distribution rule.

Readers following the German process can find earlier coverage of the EU-wide neutral prompt push and additional details on the German FCO ATT prompt overhaul already published on this site.

The Implementation Clock and What Developers Should Watch

Apple has four months from service of the August 13 decision to ship the changes in iOS and iPadOS. It will run technical tests with app publishers first. The commitments bind for seven years after implementation. An independent monitoring trustee will oversee compliance. The geographic trigger is App Store billing address plus device location in Germany, yet the authority expects the redesign to inform ATT presentation in other EU member states as well.

Developers whose monetization depends on personalized ads should prepare new purpose strings, evaluate combined consent UX, and watch the test builds. Measurement partners will need to confirm attribution still functions under the revised flows. Apple’s public statement framed the move as preserving the tool:

“While we believe the current ATT prompt provides a clear, easy-to-understand and effective way to keep users in control of their data-an opinion shared by the German data protection authorities-we have agreed to make changes to the text and formatting of the prompt at the FCO’s request. These commitments ensure we can continue to provide this important privacy tool in Europe and keep users, not ad tech companies and data brokers, in control of their data.”

Further technical specifics appear in the authority’s accompanying FAQ on the ATTF changes. The practical test begins once the first developer builds land and users start seeing the new screens. Consent rates, ad revenue recovery for smaller publishers, and whether other jurisdictions copy the neutral template will show whether the second-order effects match the design ambitions.

Frequently Asked Questions

What is Apple’s App Tracking Transparency Framework?

ATTF, introduced with iOS 14.5 in 2021, requires third-party apps to obtain an extra user consent, via an Apple-designed prompt, before using cross-app or cross-site data for personalized advertising. Apple’s own apps use a different Personalized Ads prompt and are not subject to the same ATT gate because the company states it does not link third-party app data for its ad targeting in the same way.

How long do the German commitments last and who monitors them?

The binding commitments run for seven years from implementation and are supervised by an independent monitoring trustee appointed for that purpose. Apple must also complete developer testing before full rollout.

Do the changes apply only in Germany or across the EU?

They are triggered for users with German App Store billing addresses and devices located in Germany. The Bundeskartellamt has stated the solution may influence ATT design in other EU member states, and multiple reports describe the redesign reaching almost all of the European Union in practice.

How does this differ from the French and Italian ATT fines?

France and Italy imposed monetary penalties (€150 million and €98.6 million) for past conduct. Germany accepted forward-looking commitments that redesign the prompts, add developer flexibility and impose multi-year oversight without a fine or formal infringement finding.

When must Apple finish implementing the new prompts?

Apple has four months from the date the August 13, 2026 decision is formally served. Implementation includes prior testing with app publishers, after which the seven-year monitoring period begins.