Digital Markets Act
The DMA designates large online platforms as 'gatekeepers' and imposes obligations to ensure contestable and fair digital markets. Targets the largest tech platforms operating in the EU.
What does DMA require and when does it apply?
DMA applies to Large Online Platforms and Search Engines organisations across all EU member states. The key deadline is May 2023 (enforcement ongoing). Non-compliance carries a maximum penalty of €20M or 10% of global turnover; 20% for repeat infringements. Core obligations include allow third-party interoperability and prohibit self-preferencing own services.
- Allow third-party interoperability
- Prohibit self-preferencing own services
- Ensure data portability for users
- Obtain explicit consent for data combination
- Notify acquisitions to Commission
| Deadline | May 2023 (enforcement ongoing) |
| Max fine | €20M or 10% of global turnover; 20% for repeat infringements |
| Primary sectors | Large Online Platforms, Search Engines, Social Networks |
DMA: €20M or 10% of global turnover; 20% for repeat infringements max fine
DMA applies to Large Online Platforms and Search Engines organisations in all EU member states. Key deadline: May 2023 (enforcement ongoing).
Source: Official Journal of the European Union — Digital Markets Act
May 2023 (enforcement ongoing)
€20M or 10% of global turnover; 20% for repeat infringements
Large Online Platforms, Search Engines, Social Networks
The highest penalty for non-compliance with DMA in the EU.
EU Official Journal
How do I comply with DMA?
- Allow third-party interoperability
- Prohibit self-preferencing own services
- Ensure data portability for users
- Obtain explicit consent for data combination
- Notify acquisitions to Commission
Does DMA apply to your business?
Find out in 2 minutes with our free regulation checker.
Check now — freeDMA by Country
Related Regulations
AI Act
The EU AI Act classifies AI systems by risk level and imposes obligations on providers and deployers. High-risk systems face mandatory conformity assessments, documentation, and human oversight requirements.
GDPR
GDPR governs the processing of personal data of EU residents. It requires lawful basis for processing, data subject rights, breach notification, and accountability measures.
NIS2
NIS2 expands cybersecurity obligations to essential and important entities across critical sectors. It mandates risk management, incident reporting, and supply chain security.
Next step — classify
Classify your AI systems
Use the free regulation checker to find out exactly which DMA obligations apply to your business in 2 minutes.
For informational purposes only. This is not legal advice — consult qualified legal counsel.
Last updated: · Editorial policy