Apple & Meta Fined €700m By EU Commission

The Commission of the European Union (EU) has fined Apple and Meta a combined total of €700m (£599m). These fines are for the companies' violation of the Digital Markets Act (DMA) and are the first penalties to be applied since the 2024 legislation came into force.

It is aimed at reducing the market power of big technology firms and both companies have 60 days to comply or risk further fines.

The penalties threaten to cause more tension between the EU and US President Trump, as the two sides discuss a deal to avoid imposition of sweeping tariffs on the EU.

Apple has been fined €500 million for stopping app developers from offering cheaper deals outside the App Store. Meta has a €200 million fine for its “pay or share data” model on Facebook and Instagram, which the EU said violated users’ rights. "We have a duty to protect the rights of citizens and innovative businesses in Europe," Commissioner Henna Virkkunen said in a statement.

The two tech firms have reacted angrily, with Meta accusing the EU of "attempting to handicap successful American businesses" and Apple saying it was being "unfairly targeted" and forced to "give away our technology for free."

The fines are lower than some of those issued by the EU in the past but come at an extremely sensitive time, with trade tensions with the US heightened.

The European Commission started both investigations in 2024 following introduction of the DMA. 

  • This case against Apple was over its App Store. The Commission says it must freely offer alternative app marketplaces to users and app developers, and says Apple was in breach of this.

Apple said the Commission had made "a series of decisions that are bad for the privacy and security of our users, bad for products, and force us to give away our technology for free." It also accused the Commission of moving the goal posts during their meetings.

  • Meta's fine was over the way it handled cookies, the bits of code embedded into websites, which collect information data about users. Meta introduced a "consent or pay" model on Facebook and Instagram, which meant users had to choose between allowing cookies to track them, or pay a monthly subscription. 

The Commission says this model did not allow users to freely consent to how their data was used.
In both cases, the Commission says the size of the fine takes into account "the gravity and duration of the non-compliance". 

Meta said the ruling means Chinese and European companies are allowed to operate to different standards compared to American businesses. "This isn't just about a fine; the Commission forcing us to change our business model effectively imposes a multi-billion-dollar tariff on Meta while requiring us to offer an inferior service," it said in a statement.

Both organisations strongly denied wrongdoing. Apple said it will appeal, calling the fine unfair and harmful to user privacy and security. Meta also hit back, saying the EU was hurting successful US firms while giving others easier treatment. They claimed the rules force them to change their business models unfairly.

The size of the fines highlight the EU’s seriousness about data and technology regulation, even though it risks upsetting trade talks with the US. Despite vocal criticism, the EU has been resolute in requiring US  companies operating in EU jurisdictions to follow the law and treat their European users fairly. 

EU Commission  |   WSJ   |    BBC   |   Zero Hedge   |    Arab News   |   Daily Times   |   IT Daily  

Image: Ideogram

You Might Also Read: 

Google's Online Advertising Technology Ruled Illegal:


If you like this website and use the comprehensive 7,000-plus service supplier Directory, you can get unrestricted access, including the exclusive in-depth Directors Report series, by signing up for a Premium Subscription.

  • Individual £5 per month or £50 per year. Sign Up
  • Multi-User, Corporate & Library Accounts Available on Request

Cyber Security Intelligence: Captured Organised & Accessible


 





 

« How CISOs Can Speak The Language Of Risk & Resilience 
M&S Chaos: Leading British Retail Chain Attacked »

Infosecurity Europe
CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

TÜV SÜD Academy UK

TÜV SÜD Academy UK

TÜV SÜD offers expert-led cybersecurity training to help organisations safeguard their operations and data.

ManageEngine

ManageEngine

As the IT management division of Zoho Corporation, ManageEngine prioritizes flexible solutions that work for all businesses, regardless of size or budget.

Syxsense

Syxsense

Syxsense brings together endpoint management and security for greater efficiency and collaboration between IT management and security teams.

CYRIN

CYRIN

CYRIN® Cyber Range. Real Tools, Real Attacks, Real Scenarios. See why leading educational institutions and companies in the U.S. have begun to adopt the CYRIN® system.

Alvacomm

Alvacomm

Alvacomm offers holistic VIP cybersecurity services, providing comprehensive protection against cyber threats. Our solutions include risk assessment, threat detection, incident response.

Acumin Recruitment

Acumin Recruitment

Acumin is an internationally established Cyber Security recruitment specialist.

CYBER 1

CYBER 1

CYBER 1 provides cyber security solutions to customers wanting to be resilient against new and existing threats.

CyberESI

CyberESI

CyberESI is a Managed Security Service Provider providing 24x7 remote security monitoring and management of your mission-critical networks.

Cowbell Cyber

Cowbell Cyber

Cowbell Cyber™ offers continuous risk assessment, comprehensive cyber liability coverage, and continuous underwriting through an AI-powered platform.

Glocomp Systems

Glocomp Systems

Glocomp Systems is one of Malaysia’s premier ICT infrastructure distributor offering a comprehensive portfolio of solutions including cybersecurity and privacy.

Mandiant

Mandiant

Mandiant deliver dynamic cyber defense solutions powered by industry-leading expertise, intelligence and innovative technology.

AutoSec

AutoSec

AutoSec supports the FFI program Electronics, Software and Communication by dissemination and exploitation of the results of projects related to automotive cybersecurity.

LimaCharlie

LimaCharlie

LimaCharlie gives security teams full control over how they manage their security infrastructure. Get full visibility, build what you want, control your data, get the security capabilities you need.

Lumifi

Lumifi

Lumifi provide end-to-end cybersecurity resilience solutions with a specialty in managed detection and response (MDR) services.

Recast Software

Recast Software

Recast Software exists to simplify the work of IT teams and enable them to create highly secure and compliant environments.

Convergence Networks

Convergence Networks

Convergence Networks is one of North America's leading Managed Services & Security Providers.

Acumenis

Acumenis

At Acumenis, we help organisations of all sizes to manage information security effectively. Our key services are penetration testing, ISO 27001 implementations, and security

Cyber Advisors

Cyber Advisors

Cyber Advisors offers customizable cyber security solutions and IT services for businesses of all sizes across the nation from experts you can trust.

Datos Insights

Datos Insights

Datos Insights is a leading global provider of insights, data, and advisory services to the financial services, insurance, and retail technology industries.

VPNBlade

VPNBlade

VPNBlade is your go-to resource for expert reviews and advice on VPN services.

ecfirst

ecfirst

ecfirst's mission is to establish AI platforms and service capabilities to assess and manage client compliance with global mandates on a continual basis to secure business data and assets.