Apple announces changes to iOS, Safari, and the App Store in the European Union

[TheLostSwede]

Apple today announced changes to iOS, Safari, and the App Store impacting developers' apps in the European Union (EU) to comply with the Digital Markets Act (DMA). The changes include more than 600 new APIs, expanded app analytics, functionality for alternative browser engines, and options for processing app payments and distributing iOS apps. Across every change, Apple is introducing new safeguards that reduce—but don't eliminate—new risks the DMA poses to EU users. With these steps, Apple will continue to deliver the best, most secure experience possible for EU users.

The new options for processing payments and downloading apps on iOS open new avenues for malware, fraud and scams, illicit and harmful content, and other privacy and security threats. That's why Apple is introducing protections—including Notarization for iOS apps, an authorization for marketplace developers, and disclosures on alternative payments—to reduce risks and deliver the best, most secure experience possible for users in the EU. Even with these safeguards in place, many risks remain.




Developers can learn about these changes on the Apple Developer Support page and can begin testing new capabilities today in the iOS 17.4 beta. The new capabilities will become available to users in the 27 EU countries beginning in March 2024.

"The changes we're announcing today comply with the Digital Markets Act's requirements in the European Union, while helping to protect EU users from the unavoidable increased privacy and security threats this regulation brings. Our priority remains creating the best, most secure possible experience for our users in the EU and around the world," said Phil Schiller, Apple Fellow. "Developers can now learn about the new tools and terms available for alternative app distribution and alternative payment processing, new capabilities for alternative browser engines and contactless payments, and more. Importantly, developers can choose to remain on the same business terms in place today if they prefer."

The changes for EU apps reflect the European Commission's designation of iOS, Safari, and the App Store as "core platform services" under the Digital Markets Act. In March, Apple will share new resources to help EU users understand the changes they can expect. That includes guidance to help EU users navigate complexities the DMA's changes bring—including a less intuitive user experience—and best practices for approaching new risks associated with downloading apps and processing payments outside of the App Store.

Available for developers' apps around the world, Apple also announced new options for streaming games, along with more than 50 forthcoming reports in areas like engagement, commerce, app usage, and more.

Changes to iOS
In the EU, Apple is making a number of changes to iOS to comply with the DMA. For developers, those changes include new options for distributing apps. The coming changes to iOS in the EU include:

• New options for distributing iOS apps from alternative app marketplaces — including new APIs and tools that enable developers to offer their iOS apps for download from alternative app marketplaces.
• New framework and APIs for creating alternative app marketplaces — enabling marketplace developers to install apps and manage updates on behalf of other developers from their dedicated marketplace app.
• New frameworks and APIs for alternative browser engines — enabling developers to use browser engines, other than WebKit, for browser apps and apps with in-app browsing experiences.
• Interoperability request form — where developers can submit additional requests for interoperability with iPhone and iOS hardware and software features.

As announced by the European Commission, Apple is also sharing DMA-compliant changes impacting contactless payments. That includes new APIs enabling developers to use NFC technology in their banking and wallet apps throughout the European Economic Area. And in the EU, Apple is introducing new controls that allow users to select a third-party contactless payment app—or an alternative app marketplace—as their default.

Inevitably, the new options for developers' EU apps create new risks to Apple users and their devices. Apple can't eliminate those risks, but within the DMA's constraints, the company will take steps to reduce them. These safeguards will be in place when users download iOS 17.4 or later, beginning in March, and include:

• Notarization for iOS apps — a baseline review that applies to all apps, regardless of their distribution channel, focused on platform integrity and protecting users. Notarization involves a combination of automated checks and human review.
• App installation sheets — that use information from the Notarization process to provide at-a-glance descriptions of apps and their functionality before download, including the developer, screenshots, and other essential information.
• Authorization for marketplace developers — to ensure marketplace developers commit to ongoing requirements that help protect users and developers.
• Additional malware protections — that prevent iOS apps from launching if they're found to contain malware after being installed to a user's device.

These protections—including Notarization for iOS apps, and authorization for marketplace developers—help reduce some of the privacy and security risks to iOS users in the EU. That includes threats like malware or malicious code, and risks of installing apps that misrepresent their functionality or the responsible developer.

However, Apple has less ability to address other risks—including apps that contain scams, fraud, and abuse, or that expose users to illicit, objectionable, or harmful content. In addition, apps that use alternative browser engines—other than Apple's WebKit—may negatively affect the user experience, including impacts to system performance and battery life.

Within the DMA's constraints, Apple is committed to protecting the privacy, security, and quality of the iOS user experience in the EU as much as possible. For instance, App Tracking Transparency will continue to work with apps distributed outside of the App Store — asking a user's permission before a developer tracks their data across apps or websites. However, the DMA's requirements mean that App Store features — including Family Purchase Sharing and Ask to Buy — will not be compatible with apps downloaded from outside of the App Store.

When these changes come into effect in March, Apple will share more detailed resources explaining the options available to users — including best practices for protecting their privacy and security.

Changes to Safari
Today, iOS users already have the ability to set a third-party web browser—other than Safari—as their default. Reflecting the DMA's requirements, Apple is also introducing a new choice screen that will surface when users first open Safari in iOS 17.4 or later. That screen will prompt EU users to choose a default browser from a list of options.

This change is a result of the DMA's requirements, and means that EU users will be confronted with a list of default browsers before they have the opportunity to understand the options available to them. The screen also interrupts EU users' experience the first time they open Safari intending to navigate to a webpage.

Changes to the App Store
On the App Store, Apple is sharing a number of changes for developers with apps in the EU, affecting apps across Apple's operating systems—including iOS, iPadOS, macOS, watchOS, and tvOS. The changes also include new disclosures informing EU users of the risks associated with using alternatives to the App Store's secure payment processing.

For developers, those changes include:

• New options for using payment service providers (PSPs) — within a developer's app to process payments for digital goods and services.
• New options for processing payments via link-out — where users can complete a transaction for digital goods and services on the developer's external website. Developers can also inform EU users of promotions, discounts, and other deals available outside of their apps.
• Business planning tools — for developers to estimate fees and understand metrics associated with Apple's new business terms for apps in the EU.

The changes also include new steps to protect and inform EU users, including:

• App Store product page labels — that inform users when an app they're downloading uses alternative payment processing.
• In-app disclosure sheets — that let users know when they are no longer transacting with Apple, and when a developer is directing them to transact using an alternative payment processor.
• New App Review processes — to verify that developers accurately communicate information about transactions that use alternative payment processors.
• Expanded data portability on Apple's Data & Privacy site — where EU users can retrieve new data about their usage of the App Store and export it to an authorized third party.

For apps that use alternative payment processing, Apple will not be able to issue refunds, and will have less ability to support customers encountering issues, scams, or fraud. Helpful App Store features—like Report a Problem, Family Sharing, and Ask to Buy—will also not reflect these transactions. Users may have to share their payment information with additional parties, creating more opportunities for bad actors to steal sensitive financial information. And on the App Store, users' purchase history and subscription management will only reflect transactions made using the App Store's In-App Purchase system.

New Business Terms for Apps in the EU
Also today, Apple is sharing new business terms available for developers' apps in the European Union. Developers can choose to adopt these new business terms, or stay on Apple's existing terms. Developers must adopt the new business terms for EU apps to use the new capabilities for alternative distribution or alternative payment processing.

The new business terms for apps in the EU are necessary to support the DMA's requirements for alternative distribution and payment processing. That includes a fee structure that reflects the many ways Apple creates value for developers' businesses—including distribution and discovery on the App Store, the App Store's secure payment processing, Apple's trusted and secure mobile platform, and all the tools and technology to build and share innovative apps with users around the world.
Developers operating under either set of business terms can continue to use the App Store's secure payment processing and share their apps on the App Store in the EU. And both sets of business terms reflect Apple's long-standing work to make the app ecosystem the best opportunity for all developers.

Developers operating under the new business terms will have the option to distribute their iOS apps from the App Store and/or alternative app marketplaces. These developers can also choose to use alternative payment processors in their EU apps on the App Store, across Apple's operating systems.

The new business terms for iOS apps in the EU have three elements:

• Reduced commission — iOS apps on the App Store will pay a reduced commission of either 10 percent (for the vast majority of developers, and subscriptions following their first year) or 17 percent on transactions for digital goods and services.
• Payment processing fee — iOS apps on the App Store can use the App Store's payment processing for an additional 3 percent fee. Developers can use a payment service provider within their app or link users to their website to process payments for no additional fee to Apple.
• Core Technology Fee — iOS apps distributed from the App Store and/or an alternative app marketplace will pay €0.50 for each first annual install per year over a 1 million threshold.

For apps on iPadOS, macOS, watchOS, and tvOS in the EU, developers who process payments using a PSP or by linking out to their website will get a 3 percent discount on the commission they owe to Apple.
Apple is also sharing a fee calculator tool and new reports to help developers estimate the potential impact of the new business terms on their app businesses. Developers can learn more about the changes for EU apps on a new Apple Developer Support page and can begin testing these capabilities today in the iOS 17.4 beta.

View at TechPowerUp Main Site | Source

 

[Ferrum Master]

I'll grab some popcorn.

 

[sethmatrix7]

The EU regulatory body does a lot of good for it's constituents, but this isn't one imo. Forcing a manufacturer to open up the best software ecosystem in the world to third parties who won't be regulated by the commission establishing the regulations is a pretty big can of worms for both the manufacturer and the end user.

 

[Shihab]

This is just bs.

This notarization ridiculousness makes third party stores pointless. Cook will censor you and control your choice regardless of where you shop. And the core technology fee is just a f*** you and a blade to the neck to any possibly successful application, from big publisher games to great FOSS projects, that would dare display their wares on any other shelf.

If the EU lets this slide, it's just one more evidence that they are useless in anything but making regulations that do nothing but confuse the consumer, burden small players, and insignificant overheads to the big fishes.

 

[ThrashZone]

Hi,
IDK
EU does a pretty good job of collecting fines from the bigs

Maybe apple will make these third parties use a apple logo with two bites in it so everyone will know to stay away

 

[NC37]

This is just bs.

This notarization ridiculousness makes third party stores pointless. Cook will censor you and control your choice regardless of where you shop. And the core technology fee is just a f*** you and a blade to the neck to any possibly successful application, from big publisher games to great FOSS projects, that would dare display their wares on any other shelf.

If the EU lets this slide, it's just one more evidence that they are useless in anything but making regulations that do nothing but confuse the consumer, burden small players, and insignificant overheads to the big fishes.

Notarization for the Mac side is the sole reason a lot of devs are ending development on Mac titles. I can release a game on iOS easily but Mac OS is a different bumbling mess. Why that is so is because Apple has only added on and hasn't fixed anything or overhauled it in a long time. They have more than one system functioning so when you start to notarize it can be a nightmare to complete the process. iOS apps need frameworks to function and Apple has the same system in place for the Mac OS store. However, Mac OS titles often don't need those. The system they have knows this and starts to register your title by scanning it. However, when they have both systems in place, they often fight each other because the titles are made on PC and then ported to Mac which causes even more problems to crop up. So devs wanting to be confirmed as a "safe" developer by Apple have to fight trying to make both systems happy and some just find it not worth the time because they have to redo parts of the game engine to do it.

What's worse is that sometimes the Mac Notarization process won't tell you what is exactly wrong. It needs a complete overhaul/redo and Apple doesn't seem to want to invest any resources in doing it. If 3rd party apps need to go through this process then the EU ruling is moot at best. Apple could also intentionally make it difficult with the process so that 3rd parties simply don't want to invest in it. Like you point out, they can then just say,"See, we opened our store like you wanted! Have fun getting notarized!"

 

[Shihab]

And it keeps getting even more ridiculous!
Anyone wishing to start a market place on iOS needs to provide Apple with a letter of credit worth 1mil euros!

Getting started as an alternative app marketplace in the European Union - Support - Apple Developer

developer.apple.com

Edit: Spotify calling this bs what it is: an extortion!

Spotify accuses Apple of ‘extortion’ with new App Store tax

Spotify is the latest to call out Apple’s new rules in the EU.

www.theverge.com

Apple could also intentionally make it difficult with the process so that 3rd parties simply don't want to invest in it.

Expect even more draconian requirements. Heck, they already control the only platform one can use to develop any code that can run on these damned smartphones!

At some point, someone will reach the conclusion that the only way to open up anything Apple controls is to break up Apple itself.

 

[Easy Rhino]

Hi,
IDK
EU does a pretty good job of collecting fines from the bigs

Maybe apple will make these third parties use a apple logo with two bites in it so everyone will know to stay away

That is the only reason why they do it. If the EU could not collect money they certainly wouldn't bother "helping the people."

 

[Lucas_]

worst thing to be enforced, welcome IOS To the world of Bugs sponsored by Android cr"§ap......
I hope it stays an option and not something you cannot opt-out from....

 

[thesmokingman]

EU does a pretty good job of collecting fines from the bigs

Collecting fines... what like our SEC clowns do? Like the fine below will stop Shitadel, as Griffin just added another super mega $238 million mansion to his collection. Maybe they're in cahoots, these are really just payoffs cuz it is definitely not making a dent into Shitadel.

For ex.
SEC slaps Citadel Securities LLC with $7 million fine to settle short selling regulations charges

 

[bug]

What did you expect? The AppStore is Apple's cash cow and their means to protect their walled garden. They will fight tooth and nail to protect it.

 

[RayneYoruka]

Android

Anyway

 

[freeagent]

Android

If you want a second rate OS, sure

 

[R0H1T]

Forcing a manufacturer to open up the best software ecosystem in the world to third parties who won't be regulated by the commission

Let's try that again slowly

 

[Easo]

while helping to protect EU users from the unavoidable increased privacy and security threats this regulation brings

Oh shut the hell up. You were forced to kneel because you mistakenly thought you can do whatever, now you are pissy about that.
Sometimes I have a feeling these are not marketing speeches, but what the suits actually believe in.

 

[mb194dc]

No one is forcing you to use Apple proprietary technology. I'd rather use anything else. Not withstanding the "Apple Tax" you pay.

Can always head over to xda and root the device if needed ax well, to take control of your own technology.

 

[Rahnak]

The EU regulatory body does a lot of good for it's constituents, but this isn't one imo. Forcing a manufacturer to open up the best software ecosystem in the world to third parties who won't be regulated by the commission establishing the regulations is a pretty big can of worms for both the manufacturer and the end user.

It absolutely is a wonderful thing. Apple mobile devices are the only (relevant in size) ecosystem that is locked down. Are Macbooks less secure or worse because you can install software from anywhere? Not really. And this would be an optional thing. You don't have to go outside the App Store if you don't want/need to. But it would be nice to have that option, like you have on Android.

Like bug said, this is just Apple fighting tooth and nail to protect its cash cow and this malicious compliance is absolutely disgusting. I hope the EU doesn't let it slide.

Everyone cheered when the EU forced MS to stop shoving IE down everyone's throat, everyone should be cheering on them forcing the end of the lockdown on iOS/iPadOS as well.

 

[Vayra86]

No one is forcing you to use Apple proprietary technology. I'd rather use anything else. Not withstanding the "Apple Tax" you pay.

Can always head over to xda and root the device if needed ax well, to take control of your own technology.

Wrong. We live in a society where employers want you to carry an Apple phone. Like mine. It has opened up a bit more recently, but still. This is exactly why its considered a core service

Either way, shots were fired, and this isnt over. Apple's fighting a lost battle here and the EU winning it is in our best interests. This is about the power of big tech and killing the arrogance of it. Progress has been made.

 

[Ferrum Master]

Even here some folks treat Apple like religion. It is hilarious. You think it is safe because internet told you . It ain't, there are tools for any platform to crack it open, let it be government or privates, stop being delusional. I work in the mobile industry for almost 20 years and know it inside out. My suggestion - don't ever hold any sensitive data in your damn mobiles. Ever.

Oh shut the hell up. You were forced to kneel because you mistakenly thought you can do whatever, now you are pissy about that.

Someone gets it. The best part comes when someone brakes their device, screen replacement etc... why so expensive they ask? Why you had to jump over your arse and take a device above your pay and class? And there the closed down ecosystem really shines... you have no choice and they never learn.

Wrong. We live in a society where employers want you to carry an Apple phone. Like mine.

They can enforce to use it at job, but not outside of it, ain't it?


But Tim Sweeney already commented about this farce already... the thing is, no bloody corporation can act as they wish and someone has to spank them, no matter what the motive is.

 

[Vayra86]

They can enforce to use it at job, but not outside of it, ain't it?


But Tim Sweeney already commented about this farce already... the thing is, no bloody corporation can act as they wish and someone has to spank them, no matter what the motive is.

Sure, but the fact is, you need a mobile phone these days and you havent got many options other than Apple or Android. Market isnt healthy.

 

[Ferrum Master]

Sure, but the fact is, you need a mobile phone these days and you havent got many options other than Apple or Android. Market isnt healthy.

Well mobiles are in much better state than for example our GPU/CPU market competition wise. We have plenty of choice... ie pick our poison. You have to understand that it is pretty hard to get them working with network. For example some Google Pixels almost do not work because they didn't care to send to us and validate them so they can enable the right profile depending on our network equipment. Things ain't that simple anymore. For example imagine what pain could be make banking apps to work everywhere.

The best option is to regulate and enforce those players to play with rules... unlike US style by default opt in and print me some tip money in the bill also by default. It has to be always opt out and without any wit to accidentally enable, hidden costs etc. GDPR for example is the next best thing since sliced bread in EU, it saved us from not being a product and give some sort of freedom.

 

[TheLostSwede]

We have plenty of choice...

Sorry, I can't agree there. I wouldn't buy a single device from the xinese brands, which leaves what, a handful of companies? That's hardly plenty of choice. Out of that handful, there are only select devices that get updates past the two year cut-off most devices still have, regardless of brand, Apple and Google excluded. Apart from Samsung and Sony, who else is left? Asus and HMD/Nokia maybe, but Asus has a couple of devices a year now and HMD/Nokia is only doing mediocre devices these days. Everyone else have pulled out. I guess HTC is limping by as well, but their current crop of hardware is meh at best.

Also, if you don't want a massive 6.7-inch-ish or larger display on your phone, you end up with the same issue, there aren't any phones with sub 6-inch displays any more. I want a pocket friendly phone I can use with one hand and no-one makes those any more, at least not outside of the budget segment.

On top of that, why do most phone still have USB 2.0 connectivity?!

 

[Ferrum Master]

Sorry, I can't agree there. I wouldn't buy a single device from the xinese brands, which leaves what, a handful of companies? That's hardly plenty of choice. Out of that handful, there are only select devices that get updates past the two year cut-off most devices still have, regardless of brand, Apple and Google excluded.

Swede... even Volvo is China owned these days...

There is OnePlus/OPPO, Sony, I hope your beloved ex shitSUS phone divisions engineering team will be tortured in hell by using their own devices, but you can buy it. So you have a choice from Pixel, Samsung, SONY, OnePLUS, ASUS. And that's more than AMD or Nvidia, or AMD or Intel situation.

LG is dead, HTC dead, despite there are some weird new devices. Original NOKIA is dead, thanks Microsoft, Activision/Blizzard you are next.

Looking at the maker share and what really goes in the air ie what people use, we cannot ommit China, we have fans even here on TPU for those. So the real amount of choice is okayish.

Huawei without google framework is a choice for those who don't want it also, so a valid option, let them be, their HW is really fine actually, it is a mature maker, if not there is the legal sister in law - Honor, I don't know about the software side, but they develop, are pretty responsive.

Xiaomi/POCO is the the third largest player now, they took Huawei place behind Apple and Samsung, and you cannot close your eyes on those, people buy them, despite being utter crap, but people buy Ford too. The weird crap HMD devices and CAT that are acutally popular also, or any other COMPEQ/ARIMA etc wonders, I cannot explain it, why people pick them up. It is pick your poison situation. You already know what phone is my main driver, but I have to play with most of them either way.

That's the market represantion here... and at your turf IMHO too, whole nordics are mostly covered by one distributor + grey imports.

 

[TheLostSwede]

Swede... even Volvo is China owned these days...

I know and I would never buy one.

There is OnePlus/OPPO, Sony, I hope your beloved ex shitSUS phone divisions engineering team will be tortured in hell by using their own devices, but you can buy it. So you have a choice from Pixel, Samsung, SONY, OnePLUS, ASUS. And that's more than AMD or Nvidia, or AMD or Intel situation.

OnePlus/OPPO is xinese. I've given up on Asus after the Zenfone 6, as they drop their phones as a hot turd after two years of semi-regular updates.

LG is dead, HTC dead, despite there are some weird new devices. Original NOKIA is dead, thanks Microsoft, Activision/Blizzard you are next.

Agreed.

Looking at the maker share and what really goes in the air ie what people use, we cannot ommit China, we have fans even here on TPU for those. So the real amount of choice is okayish.

For me personally, it's not an option. Motorola, maybe, as the phone division is still semi-US, but they don't have any devices that fits my criterias anyhow

That's the market represantion here... and at your turf IMHO too, whole nordics are mostly covered by one distributor + grey imports.

Yeah, there seem to be fewer choices here than in Taiwan somehow, but it's kind of arbitrary and not based on any kind of logic.

 

[mb194dc]

Wrong. We live in a society where employers want you to carry an Apple phone. Like mine. It has opened up a bit more recently, but still. This is exactly why its considered a core service

Either way, shots were fired, and this isnt over. Apple's fighting a lost battle here and the EU winning it is in our best interests. This is about the power of big tech and killing the arrogance of it. Progress has been made.

Why do they want you to have an Apple phone? I mean if they're paying for it, I can understand.

They surely can't dictate what personal phone you use?