**Google Faces EU Mandate: Opening Android to Rival AI Assistants and Search Data Sharing**
The European Commission has issued a landmark ruling against Google, mandating significant changes to how its Android operating system and Search services operate. The decision, rooted in the EU’s Digital Markets Act (DMA), aims to curb the dominance of tech “gatekeepers” and foster competition in the markets for generative AI and search.
### A Two-Part Order
The Commission’s order consists of two core components, both delivered as binding “specification proceedings” under the DMA.
**1. Opening Android to Rival AI Assistants**
The most significant part of the ruling compels Google to allow third-party AI assistants equal access to the core functions of Android. Previously, Google’s own Gemini assistant had privileged integration, capable of seeing what’s on screen, listening via a wake word even when the screen is off, and controlling other apps by simulating taps.
* **The Requirement:** Google must ship new capabilities for “screen automation” and “context-aware intelligence” into its next major Android update (Android 18) and have them fully implemented by **August 1, 2027**.
* **The “Five Gatekeepers”:** Google can demand a security certification before an app can use five sensitive OS features. For a certified assistant, these features include:
* Centralized access to on-device user data.
* Context-aware features for proactive suggestions (like “Magic Cue”).
* Structured on-device integration for app actions.
* Screen automation (the ability to see and control the device).
* Deep system integration for settings, media, notifications, and more.
* **The “Six Open Doors”:** Crucially, six other features, including ambient data access (microphone, camera, screen content) and always-on hotword detection, **cannot** be restricted. Any developer’s app will be able to use them. While Google can still request consent or process isolation for privacy, it cannot bar anyone from accessing these sensors.
* **A New Program:** To manage this, Google must create a “Qualified AI Assistant Programme.” Independent “Trusted Certification Authorities” can certify assistants into this program for free. Google must accept these certifications and cannot revoke them, although it can remove a certification body if it fails to meet objective standards.
**2. Sharing Search Data with Competitors**
The second part of the order addresses Google Search. The Commission has ordered Google to share anonymized Search query, click, and ranking data with rival search engines and AI chatbots (Large Language Models) that perform search functions.
* **The Data:** This data will be rigorously anonymized. Direct identifiers like usernames and IP addresses will be stripped, rare terms suppressed, and metadata generalized so that every user belongs to a group of at least 1,000 people.
* **The Recipients:** Companies wanting access must have at least 50,000 monthly active EU users on average over the past year and cannot be sanctioned or pose a severe cybersecurity risk controlled by a country the EU deems hostile.
* **The Timeline:** The anonymization methods are published, with eligible request forms due by the end of August 2027, a finalized dataset ready by November 2027, and pricing established by January 2027.
### Google’s Pushback and Security Concerns
Google has strongly objected to the ruling. Kent Walker, President of Global Affairs at Google, argued that the changes “threaten device security by granting external apps sensitive and powerful device permissions.” He pointed to the phone-maker vetting that currently occurs and warned that the decision removes that safeguard.
Google’s primary security argument centers on “input risk”—the danger that a malicious prompt injected into an AI assistant could cause it to perform harmful actions. The company cited a recent incident where SafeBreach accessed the Gemini Android Utilities agent via a notification prompt without needing a malicious app on the device. Google has since hardened its systems against this specific vector and states that input risk is now a key criterion for its own assistant certification.
### FAQ
**Q: What is the Digital Markets Act (DMA)?**
The DMA is a European Union regulation designed to curb the market power of large “gatekeeper” tech companies. It forces these companies to be more open and interoperable with competitors, fostering fair competition.
**Q: What is a “Qualified AI Assistant Programme”?**
It’s a new certification system that Google must set up. Independent third-party “Trusted Certification Authorities” will be able to certify AI assistants. Once certified, these assistants will be granted special access to Google’s sensitive Android features. Google cannot favor its own services in this process.
**Q: Why is Google required to share its search data?**
The EU wants to ensure that competitors can build their own competitive search and AI products. By providing anonymized data on what Europeans are searching for, the EU hopes to lower the barrier to entry for rivals, promoting innovation and consumer choice.
**Q: When do these changes take effect?**
The requirements for Android’s screen automation and context-aware features must be shipped by **August 1, 2027**. The search data sharing program has a final dataset deadline of **November 2027**, with pricing set by **January 2027**.
### Conclusion
The European Commission’s ruling is a significant step in reining in the power of Big Tech. By forcing Google to open its Android fortress and share the treasure trove of its search data, the EU is attempting to create a more level playing field. While Google has raised valid security concerns, the DMA’s strict timeline leaves it little room for delay. The coming years will be defined by how Google adapts its ecosystem and how these new, open capabilities reshape the landscape of AI assistants and search on Android.
