More broadly, but not unconditionally. They can apply reasonable (definition of that can be another point of contention) restrictions via their app review process as long as the restrictions are applied consistently to all applicants.
There are several reasons for a platform to not want to offer 3p interop, from security to privacy to competition, but the DMA is targeted EU regulation to mandate interop specifically for the big tech cos’ platforms and this is one of the first major tests of the law.
Meta’s request for interoperability is regarding their hardware, not their flagship apps, if you take it at face value.
They want their glasses and headsets to integrate as tightly as an Apple Watch or Vision Pro to show messages and other notifications, connect to WiFi, and share files with an iPhone, but Apple uses private APIs for their own devices. Meta says that is anticompetitive and the APIs should be public.
If AI can help an advertiser get the outcome they want in 1000 ad impressions instead of 5000 ad impressions (with more precise targeting or more appealing creative), Meta can 5x the price of those 1000 ad impressions, keep the advertiser happy with the same ROI they had before, and sell 4000 additional impressions to someone else as incremental profit.
Or they could 4.9x the price to show the current advertiser a better ROI and encourage higher spend from them, while still having the 4000 extra impressions to sell.
The financial companies got higher performing ads delivered to the right people, as well as the ability to measure the actions taken from the ads. In exchange, they gave away your data for free.
Every company running ads on the internet is making this value exchange, but these financial companies screwed up by pouring protected data into Google's and Meta's dumb pipes.
They don't. There is no semantic value to this data for them. To Google and Meta, it's an arbitrary data point. To tax companies, it is data that can utilized to either target the delivery or measure the performance of their own ads.
That said, there doesn't need to be semantic value for this to feed into an ML model that ends up associating tax data attributes with other attributes.
The EU issued fines to Google and Meta for billions of dollars a few weeks before they decided this data transfer would be allowed. Wonder if they'll actually be required to pay the full fines now.
Businesses choose to send this data to the ad platforms for their own benefits - better targeting, measurement, and ML optimization of their ad campaigns.
The businesses are legally accountable for the data they're sending and complying with privacy laws, but to most platforms it's a dumb pipe for whatever data the business chooses to send.
"Decimated" is a bit of an overstatement for a business on track for over $!00b in revenue and $40b of profit this year. The growth rate took a huge hit, but it's not like they're on the verge of collapse.
Apple enables system wide tracking of all app usage, installs, and in-app purchases for themselves with a prompt to "Turn On Personalized Ads" while third-parties must show a prompt that says "Ask App Not To Track". For third-party ads to operate effectively, you need to reject the "Ask App Not To Track" prompt in both the app that displayed the ad and the app that was being advertised.
The antitrust probe is not strictly regarding the privacy changes themselves, but that Apple did not subject themselves to the same new policy and opt-in UI. They've preferenced their own services and built a multi-billion dollar ad network using data that's dark pattern opted-in for themselves and dark pattern opted-out for third-parties.
In isolation, this may seem like a standard competitive advantage for a platform, but Apple has drawn attention to their own power by wiping out nearly a trillion dollars of public market cap from other tech and ecommerce companies with the change.
Not coincidentally, Apple quietly announced that they are relaxing some of their privacy restrictions during WWDC last week.
The ruling is focused on Meta, but the order establishes a precedent that applies to ALL American companies. I'm sure Facebook, Google, and Twitter can eventually re-architect their systems and data centers in some way to comply with this, but this is going to be an expensive and technically complex piece of regulation for your standard American company to comply with if they want to operate in the EU.
IAB Europe is the entity being fined, not their participating partners. The linked PDF says their fine is 250k euros, which is "proportionate to the infringment" and less than the maximum.
The data being collected is a random identifier and a consent opt-in for tracking/cookies. These businesses use this framework as their source-of-truth declaring whether an internet user consented to cookies or tracking, and their ad systems behave according to the user's preferences.
So now they're being asked to delete their records of who opted in or out, because that data was illegitimately acquired.
[edit] This could also have implications regarding data collected through other systems based on the assumption that an opt-in was valid.
Mobile app advertising on iOS has long relied on Apple's IDFA - Identifier for Advertisers - a random, device-unique, resettable identifier that was available to all apps.
An app like Candy Crush would tell ad networks like FB that "IDFA 123456 just installed the app" or "IDFA 654321 just made a $5 in-app purchase." FB could then recognize that IDFA as a user who installed the FB app, and they could use that data to target, optimize via ML, and measure the audience and results of Candy Crush's marketing campaign.
Apple's recent iOS update made IDFA an app-level opt-in, so in order for this existing advertising mechanism to work, you needed to opt-in to tracking on FB (so they could associate your IDFA to a FB user) AND to opt-in to tracking on the other apps (so they could send ad networks data with your IDFA). This double opt-in obviously has a super low rate.
FB wasn't impacted nearly as much as other advertising businesses because they already have identifiers for their users (email, phone number, etc), have a ton of first-party interest/behavioral data, and they mostly run ads on their own properties. Apps who used third-party ad networks to sell and place ads in their apps had their business completely destroyed.
I think this is all fair in terms of user choice and to give Apple control of their own platform, but it opens Apple up for a lot of regulatory scrutiny given that they were able to flip a switch that annihilated a $50b mobile advertising industry, while making their own equivalent data collection opt-out (vs their competitors' opt-in). Even then, Apple frames their data collection option as "Personalize your experience" while forcing other apps to use the phrase "Allow this app to track you." Apple's own ads product has tripled its market share since this launched. [0]
There are many immoral players in the industry, but there's nothing inherently immoral about advertising.
I help people discover products and services that they love.
I help thousands of business owners find more customers, so they can support their families and create jobs for others.
There's a lot of bad behavior from marketers and sketchy business owners, but I know the work that I'm personally doing has a tangible, positive impact on the lives of thousands of people.
The data is sent from the advertiser to the ad platform, not from the publisher to the ad platform. The advertiser is incentivized to send accurate data for both performance optimization and for campaign measurement purposes.
Ad fraud is a real problem in the ecosystem, but the server-side APIs are actually more secure. You have a private signed backend endpoint rather than public JS that can be injected anywhere and fed fake data by a malicious party.