In April 2021, Apple has rolled out a new software update iOS 14.5 through which it seeks to implement a global App Tracking Transparency (“ATT”) Policy. The central feature of this new policy requires app developers to show users a prompt before they start retrieving the Identifier for Advertisements (“IDFA”). To contextualise the same, Apple assigns a random device identifier to a user's device which, in turn, is known as the IDFA.
Primarily, Advertisers make use of this to track data in order to give personalised advertisements to the users. Although Apple claims privacy interest on behalf of end users, many application developers have opposed this policy including Facebook as it adversely affects their advertising opportunities. In fact, the above-stated concerns have already effectuated into two separate investigations by the French Autorité de la concurrence and the German Bundeskartellamt (Cartel Office).
*** Co-authored with Aniket Panchal and Diya Vaishnav, two young students of 2nd Year B.B.A. LL.B. (Hons.) & B.A. LL.B. (Hons.) respectively, at Gujarat National Law University, Gandhinagar, Gujarat, India.
While India has not had the opportunity to inquire into the conduct of Apple in this regard yet, the investigations under way in France and Germany are demonstrative of mounting concerns against this new privacy update at least in the European common market. In this blog, we examine the impact of this new privacy update on end users' data privacy and its effect on competition in India.
Readers may like to note that “data privacy” as a non-price factor affecting competition in the digital markets has recently been recognized in India after the release of a Market Study on Telecom Sector on 22 January 2021, in which, the CCI for the first time acknowledged the role of big data as a factor to assess “non-price competition” in the online medium.
Violation of Section 3, of the Act allows the CCI to inquire into any anti-competitive agreement, which causes or is likely to cause an appreciable adverse effect on the competition (“AAEC”) in India. Section 4 of the Act prohibits abuse of dominant position by proscribing certain unilateral conducts by dominant firms.
Under the Competition law, imposition of privacy policies upon the users can be assessed or regulated under the provisions relating to abuse of dominant position such as prohibition of imposition of unfair or discriminatory conditions for sale or purchase, including predatory pricing, limiting or restricting market for production of services and/or technical development, denying of market access to new players in any manner, leveraging dominance in one market to enter or capture another market or imposing unrelated supplementary obligations.
If at all Apple’s new policy i.e. ATT comes under scrutiny before the CCI, the following issues could be raised.
Whether Apple Is Dominant?
For invoking the provisions related to abuse of dominant position under Section 4 of the Act, the CCI will have to show that Apple is dominant in the “relevant market”, which will have to be first determined.
Hypothetically, assuming that the CCI determines the “Apple Smartphone sold in India” by itself as the relevant market, say, due to the unique features of an iPhone, which make it the most preferred choice of the majority of Smartphone buyers in India, then Apple will be held as dominant. In such a case, the following issues could be raised.
Imposition of Unfair/Discriminatory Condition ?
Section 4(2)(a)(i) of the Act proscribes an entity from imposing unfair or discriminatory condition in sale of goods or service. With regards to Apple’s conduct, some sources suggest that Apple is not applying the same privacy standard when it comes to its own applications.
Apple shows an additional prompt (apple designed) which seeks end-users’ permission to “track” their data. If a user gives express agreement within the app developer's tools first, but subsequently refuses Apple's tracking prompt, the second selection takes precedence over the first. This overriding effect is perplexing for the reason that the second prompt (by Apple) reduces the users’ decision to a “yes or no” choice while the app developers may have already employed detailed agreements. Thus, instead of a consent-based notification, this new permission appears to be a warning, discouraging consumers from allowing the app developers access to their data.
Further, Apple employs a totally different mechanism for consumers to opt out of its own data sharing— a complicated procedure wherein the users must navigate to a somewhat obscure option, to opt out of Apple’s “Personalized Advertisements”. While the prompt for other app developers uses a negatively connoted word “tracking”, Apple provides a detailed and very favourable information to users when they want to opt-out of its own applications.
Following such a self-preferential practice would entail a “status quo bias” which will nudge the users to exclusively use Apple application over other apps. It would mean that Apple imposes discriminatory and unfair conditions on its App developers (in terms of service) and this squarely falls under section 4(2)(i)(a) i.e., imposition of discriminatory or unfair conditions in sale of goods/services.
Leveraging of Apple’s Dominant position ?
Further, another question for deliberation is if Apple is using its App Store market dominance to penetrate other applications market. Such a conduct would fall within the bounds of section 4(2)(e) of the Act which prohibits an entity from abusing its dominant position in one relevant market to enter into another relevant market.
In this regard, in MCX Ltd. v. NSE, the CCI concretized the requirement for building a case under section 4(2)(e). It was held that identifying two distinct relevant markets and showing an “associational link” between them is a condition for establishing abuse of dominance under this provision.
In the case of Apple, these two relevant markets would be “the market for Apple’s own developed applications listed in the Apple’s App Store” and the “Market for other applications” (which are also listed on App Store). As for the second requirement of an associational link, these applications are intertwined for the reason that the former provides an input for the latter. Such a conduct could be attributed to Apple trying to leverage its dominant position in App Store market in order to achieve increased sales in the market for other apps, thereby extending its market power.
Implications of the allusive “prompt”
Apple’s new ATT policy, rather than being a step toward bolstering its consumers’ privacy, merely hampers competition without providing additional privacy protection to its consumers. There are many stumbling blocks for its competitors- loss of user data for targeted advertising, a marked decrease in revenue, and a transition to a paid-model, which affect consumers by forcing them to pay for the previously-free apps without any additional privacy enhancement.
As per assessments, revenue reductions of 50-65% will be experienced by the afflicted businesses, notably the small-sized developers, which rely heavily on the personalized advertising market. Even with Apple’s extensive privacy-protection measures, around 75% of end users accepted monitoring prior to the policy's implementation.
The manifestation of this change could be witnessed from the allowance rate which dropped drastically- it fell to 4% within a week of its introduction in the United States. As a result, these app-developers will be forced to migrate from ad-supported to paid models to make up for the loss of revenue, in turn forcing the consumers to pay for the previously-free applications.
The Prompt: A Consumer Deception?
Without the scope for any personalized advertisements, these app-developers will be forced to monetize their applications by shifting to paid models, which will increase Apple’s earnings with a surcharge of up to 30% for every single transaction that takes place through the App Store. These applications migrating to the paid versions, will be made more expensive relative to Apple’s own applications, which are not subject to its own commission.
The higher the third-party applications charge to cover their costs, the more consumers would contemplate moving to Apple’s premium services. Resultantly, this would raise the cost of switching to another platform like Android for the user will lose out on the paid Apple content. Hence, Apple entrenches its dominances over the iOS ecosystem by possessing a greater share of the users’ data and the ability to monetize it.
Furthermore, Apple's prompt creates the deceiving narrative that customers may choose between using a free application with tracking or a free application without tracking. This tactic hides the fact that disabling tracking by free applications with relevant advertisements will force these developers to move to a paid-model with irrelevant advertisements to meet their expenses.
An Obstacle or a Necessity?
Against the backdrop of Apple’s determination to enhance consumer privacy-protection, the necessity of this additional prompt appears to be questionable, since it adds nothing to Apple's existing data privacy standards. This measure seems unnecessary even by the high standards of European Union’s General Data Protection Regulations (“GDPR”), for the reason
 Refer to https://www.cci.gov.in/sites/default/files/whats_newdocument/Market-Study-on-the-Telecom-Sector-In-India.pdf (para 70 &71).
 CCI Order dated 01 June 2017 in Case No. 99 of 2016 Order available at http://www.cci.gov.in/sites/default/files/26%282%29%20Order%20in%20Case%20No.%2099%20of%202016.pdf.
 Competition Commission of India vs. Steel Authority of India Ltd. & WP(C) Nos.4378/2021 & 4407/2021 Page 8 Anr., (2010) 10 SCC 744.
 Refers to Section 26(1) of the Act.
 Case No. 13/2009 decided on 23 June 2011.