Executive Vice-President Teresa Ribera, in a written answer on 22 July 2026, detailed the European Commission's approach to ensuring privacy and data protection in the mandatory sharing of search-related data under Article 6(11) of the Digital Markets Act (DMA), a provision aimed at boosting competition in online search markets. The answer, responding to a question from Renew MEP Cynthia Ní Mhurchú, outlines a framework combining technical and contractual measures, developed in collaboration with privacy experts and aligned with the General Data Protection Regulation (GDPR).
The Commission's approach is being developed in the context of the specification case against Alphabet (case DMA.100209), where the obligation to share ranking, query, click and view data with qualifying competitors is being operationalised. Ribera noted that the anonymisation methodology follows established practices under the GDPR's risk-based logic and is consistent with joint guidance drafted by the Commission and the European Data Protection Board (EDPB) on implementing the DMA coherently with data protection rules. The answer does not specify numerical targets or deadlines but sets out a multi-layered compliance framework: data will only be shared with online search engines meeting strict eligibility criteria, and recipients must adhere to contractual measures including data segregation, purpose limitation, and governance requirements. Before receiving data, recipients must undergo an independent audit to confirm compliance, followed by annual independent audits to ensure ongoing effectiveness. The Commission will also conduct continuous monitoring of Alphabet's compliance with its search data sharing obligations.
Ribera's answer signals a cautious, enforcement-driven approach to balancing the DMA's pro-competition goals with privacy safeguards, with the Alphabet case serving as a test bed. The reliance on case-by-case specification rather than horizontal guidance suggests the Commission will tailor anonymisation standards to each gatekeeper's data ecosystem. Institutional follow-up is expected as the Alphabet specification case progresses, with potential implications for other gatekeepers subject to Article 6(11). The answer provides regulatory certainty for stakeholders, including Alphabet and potential competitors, but leaves technical details to be refined in the ongoing procedure.