Google Warns EU Digital Markets Act Could Spike Cybercrime and Fraud
Google's top security and privacy officials are sounding the alarm over proposed changes under the European Union's **Digital Markets Act (DMA)**. They contend that plans to open up **Google Search** data and the **Android** operating system to competitors could inadvertently create significant security vulnerabilities, leading to increased cybercrime and fraud across the continent.
Mountain View's concerns emerge as the **European Commission** prepares to finalize decisions next month regarding **Google Search** and **Android** interoperability. The **DMA**, enacted in late 2022, aims to curb the market dominance of tech giants, foster competition, and reduce reliance on a select few firms.
**Heather Adkins**, Google's Vice President of Security Engineering and a founding member of its security team, has voiced serious reservations. "If implemented as described today, I think within a short period of time on Android, weβd see a significant increase in fraud in the EU," Adkins told WIRED. She anticipates fraudsters exploiting new avenues within weeks of implementation.
### Proposed Changes and Security Risks
In April, the **European Commission** detailed proposals for **Google** to share anonymized search data with rivals and grant other AI services greater access to the **Android** operating system. Adkins argues that these changes could lead to the de-anonymization of search queries by malicious actors and make shared search data a prime target for criminal hackers.
### The Digital Markets Act and Gatekeepers
The **DMA** empowers European officials to designate tech companies with substantial market shares as "gatekeepers," compelling them to open their systems and data. **Alphabet** (Google's parent company), **Amazon**, **Apple**, **Booking**, **ByteDance**, **Meta**, and **Microsoft** are all classified as gatekeepers, with products ranging from **LinkedIn** and **TikTok** to **Instagram** and **YouTube** falling under the regulations.
**Google's** search business, commanding an estimated 90 percent of the worldwide market, is uniquely affected. While **Google** already shares some data with search engine competitors under the **DMA**, the upcoming changes are designed to significantly alter this dynamic.
### Data Sharing Specifics
The proposals broadly mandate that **Google** provide online search engines with access to search data "on par" with its own collection, including "any query input" and associated metadata. This encompasses what users type into **Google**, click data, and search result rankings.
**Alissa Cooper**, executive director of the **Knight-Georgetown Institute**, emphasized the uniqueness of this dataset. "This is a unique data set which only Google has had access to for many, many years, and thereβs not a straightforward way for any other competitor to build or obtain access to something similar," Cooper stated.
### Industry Response and Ongoing Debate
As the **European Commission's** July 27 deadline for final decisions approaches, **Google** has become increasingly vocal in its opposition to specific parts of the plan. Conversely, some competitors, independent researchers, and academics who stand to benefit from data access argue that the privacy and security impacts are overstated, presenting their own analyses and potential solutions. The debate continues as competition law intersects with complex privacy and security implications.