- The EU has ordered Google to share search data and open Android AI features under the Digital Markets Act (DMA).
- The DMA requires Google to open 11 Android features to rival AI assistants and share search data with competitors, subject to security assessments.
- The commission can deny a company's access to Europe's dominant mobile ecosystem on security grounds.
- The decision addresses an asymmetry where Gemini runs as an OS feature while rivals get only an app.
- The EU has long treated cybersecurity as a prerequisite for digital participation, with laws like NIS2 and the Cyber Resilience Act.
- Within 18 months, multiple AI assistants will have deep OS access on European phones, requiring enterprises to manage them as vendors.
- EU AI governance is a portfolio of laws including DMA, AI Act, GDPR, etc., with DMA dictating AI architecture.
- Europe governs AI through market structure, and organizations should manage ecosystems not just models.
Security has become a condition of market access in the EU, as the commission can deny companies access to its mobile ecosystem based on security concerns. This shift is evident in the new regulations, including the Cyber Resilience Act and the Digital Markets Act (DMA), which treat cybersecurity as essential for participating in the digital economy.
The EU's latest directives require Google to share anonymized search data with competing AI services, while also opening up 11 Android features to rival AI assistants. However, Google retains the right to assess the security risks posed by recipients before sharing data, potentially limiting access to sensitive information.
Google argues that these decisions could weaken privacy and security protections for millions of Europeans, exposing private searches to unfamiliar companies and granting external software sensitive device permissions. The implications are significant, as AI assistants from various companies are expected to be integrated into the operating systems of most European phones within 18 months, raising concerns about data security and user privacy.
The EU's approach to AI governance encompasses multiple regulations, including the AI Act for trustworthy AI, GDPR for personal data, and the Digital Services Act for platform accountability. This comprehensive framework aims to ensure that AI technologies are developed and deployed responsibly, with a focus on security and competition.
“The DMA requires Google to open 11 Android features to rival AI assistants and share anonymized ranking, query, click and view data on fair terms, including for AI chatbot providers. The decision aims to end an asymmetry where Gemini runs as an OS feature while rival assistants are confined to an app.”
