Google has lodged appeals against two European Union regulatory orders that would compel the company to share its search data with rival search engines and open its Android ecosystem to competing artificial intelligence developers. The appeals, filed Monday with the General Court in Luxembourg, represent more than a procedural manoeuvre: they reveal the central tension structuring digital competition law in Europe — namely, whether the world’s most powerful information intermediary can simultaneously claim to protect users while resisting the very measures designed to limit its structural advantages.
The thesis here is not subtle. Google is deploying the language of privacy and security as a shield against accountability, in a regulatory environment where its dominance over search, mobile operating systems, and AI interfaces has been systematically documented. That the company’s appeals may have some legitimate technical merit does not alter the underlying dynamic: a corporation facing meaningful competition obligations has chosen litigation over compliance, invoking user welfare while the clock on implementation runs.
What the Orders Actually Require
The two orders, issued in July by the European Commission under the Digital Markets Act, address distinct but related concentrations of power. The first requires Google to grant competing search engines access to its vast repository of user search data — the accumulated product of decades of market dominance that no rival could plausibly replicate. The second targets the Android operating system, specifically the privileged position currently enjoyed by Google’s Gemini AI model, which benefits from deep integration features — voice activation, cross-application task execution — unavailable to competing AI services.
Together, the orders reflect the DMA’s foundational logic: that dominant platforms, designated as gatekeepers, must not use their control over one layer of the digital stack to entrench themselves across adjacent markets. The Commission has stated explicitly that both measures incorporate robust safeguards for user privacy, device integrity, and security. Google disputes this characterisation with force.
Oliver Bethell, Google’s senior director of competition, argued that the orders would force the company to share users’ private search histories without sufficient anonymisation, and to weaken security protections on Android. “People turn to Search with their most personal questions,” he said, citing health concerns and personal relationships as examples of the sensitive terrain involved. The argument is not without weight — search queries are among the most intimate data points a platform collects. But the Commission’s position is that adequate technical safeguards exist, and that Google’s framing conflates genuine privacy risk with competitive inconvenience.
A Pattern of Regulatory Friction
This appeal does not occur in isolation. Google currently faces an €890 million EU fine also issued in July, alongside a separate process in the United Kingdom where the Competition and Markets Authority has proposed requiring Google to present Android and Chrome users with a genuine choice of search services — including AI assistants such as ChatGPT and Perplexity — with a final determination expected before the end of 2026. The accumulation of proceedings across jurisdictions points to a structural problem that individual companies and regulators have spent years trying to name precisely: the self-reinforcing nature of data advantages in platform markets.
Critically, an appeal does not suspend a Commission decision. The implementation deadlines remain in force unless the General Court intervenes with interim relief — a separate and difficult threshold to meet. Google is therefore simultaneously appealing and, in principle, obligated to prepare for compliance. The company’s argument that Android is already open and interoperable, and that the search data requirements lack adequate user consent mechanisms, will be tested against the Commission’s detailed technical findings, not merely asserted in press statements.
A ruling from the General Court is not expected for some time. Either party retains the right to escalate further to the Court of Justice of the European Union, extending the legal timeline well beyond the dates when the measures were intended to reshape market conditions. That gap — between the moment regulation is ordered and the moment it actually takes effect — is itself a form of competitive advantage, one that litigation strategies are well-designed to exploit.
The Limits of Privacy as an Argument
There is a serious version of Google’s privacy argument, and it deserves engagement. Forcing any company to share granular user data with third parties carries genuine risks, and the history of data-sharing regimes in other sectors — financial services, telecommunications — shows that interoperability mandates can create new attack surfaces if poorly designed. Regulators are not infallible, and the Commission’s assurances about safeguards require independent scrutiny, not deference.
But the serious version of the argument is not the argument Google is making in public. The company’s framing positions its own proprietary control over data as the only available guarantee of user safety — a claim that conveniently aligns the interests of users with the interests of shareholders. International human rights frameworks, including the right to an effective remedy and the right to access information in a competitive marketplace, do not treat corporate market control as a precondition for privacy protection. They treat it, rather, as a potential threat to both.
What the DMA proceedings ultimately test is whether a legal framework can meaningfully constrain a gatekeeper that has spent two decades accumulating structural advantages — in data, in distribution, in vertical integration across the AI supply chain. Google’s appeals will delay that test. They will not resolve it.