DMA Compliance Guide
The Digital Markets Act (DMA) revolves around six major tech corporations, known as "gatekeepers," that currently hold significant influence in the digital realm. Enacted with the aim of safeguarding online user data privacy and fostering equitable competition within digital markets, the DMA has substantial implications for businesses and users alike.
Who Does DMA Apply To?
If your business relies on the platforms or services provided by these gatekeepers, compliance with the DMA is imperative. Begin by assessing whether your operations involve any of the following companies:
- Alphabet (parent company of Google and Android)
- Amazon
- Apple
- ByteDance (parent company of TikTok)
- Meta (parent company of Facebook, Instagram, and WhatsApp)
- Microsoft (parent company of LinkedIn) Note: The list of companies subject to DMA may expand, with additional platforms and services under consideration.
What Does DMA Mean for My Business?
For businesses utilizing personal data through the gatekeepers' platforms or services, adherence to DMA regulations is paramount. Here are key actions to consider:
Obtain Explicit User Consent: Utilize a consent management platform such as Cookiebot CMP to secure consent for cookies and trackers accessing personal data.
Store User Consent: Document user consent, particularly for website users within the EU, ensuring compliance with data processing regulations.
Signal User Consent to Gatekeepers: Fulfill DMA requirements by transmitting user consent preferences to gatekeepers. This can be accomplished through mechanisms like Google Consent Mode for Google platforms and IAB Europe's Transparency and Consent Framework (TCF v2.2).
By understanding and adhering to DMA guidelines, businesses can navigate the digital landscape responsibly while prioritizing user privacy and fair competition.