Full Breakdown
Google Warns EU DMA Proposals Could Heighten Fraud and Privacy Risks
6/30/2026, 9:56:35 PM
EU DMA Proposals Target Android AI Integration and Search Data
The Commission’s amendment to the Digital Markets Act would force Google to permit third-party AI assistants on Android and to share anonymized search queries, click data, and ranking signals with rivals, ending Gemini’s exclusive status.
Regulatory Context
The Digital Markets Act obliges major platforms—including Alphabet, Apple, Amazon, Meta, Microsoft, and ByteDance—to open core functions. The Commission aims to finalize decisions on Google Search and Android by 27 July.
Key Stakeholders
Google’s search and Android unit is represented by Heather Adkins, VP of security engineering. Commission drafts the rules. DuckDuckGo, a privacy-focused search engine, and the Knight-Georgetown Institute, a research group, have commented. Apple supports Google’s stance.
Technical Concerns and Data Scope
Gemini accesses user files, screen content, and voice inputs. The draft would require Google to provide anonymized search data with query text, click rates, and ranking information—details not disclosed. Google warns exposure could affect millions of EU users.
Implications for Users and Competition
Proponents argue search metrics will help smaller search engines and AI tools improve relevance and challenge Google’s 90 % search share. Critics warn AI permissions could expand the attack surface for fraud, phishing, and data exfiltration on Android.
Official Statements & Responses
Google calls the DMA changes a privacy threat, saying it cannot protect sensitive search data after it leaves its infrastructure. The Commission says anonymization methods and contractual safeguards mitigate reidentification risk while fostering competition. Apple has backed parts of Google’s view on limiting immediate OS-level access.
Criticism & Opposition
DuckDuckGo contends the proposal already reduces reidentification risk to an insignificant level. Researchers at the Knight-Georgetown Institute deem the technical safeguards robust enough for competition without compromising privacy. Some academics, however, argue Google’s identified risks merit further scrutiny.
Conflicting Reports & Gaps
Google predicts a rapid rise in fraud if data sharing proceeds, whereas DuckDuckGo and the Knight-Georgetown Institute view the risk as minimal. The draft does not disclose specific anonymization algorithms or audit procedures, leaving enforcement uncertainty.
Verbatim Quotes
- “If implemented as described today, I think within a short period of time on Android, we’d see a significant increase in fraud in the EU,” — Heather Adkins, VP of Security Engineering, Google
- “She said fraudsters would likely start exploiting the new system within weeks, especially if Android gives outside AI services more access to sensitive permissions like microphones, cameras, on-screen content, and installed apps.” — Heather Adkins, VP of Security Engineering, Google
- “Adkins also warned that more sophisticated AI models could make it easier to de-anonymize large datasets if they fall into the wrong hands.” — Heather Adkins, VP of Security Engineering, Google
Next Steps
The Commission will issue rulings on the Google Search and Android cases by 27 July. Google plans to file an implementation plan, and affected parties may seek judicial review.
