UK Digital Markets Bill Receives Royal Assent

The United Kingdom's Digital Markets, Competition and Consumers Act has received Royal Assent, formally entering the statute book and granting the Competition and Markets Authority sweeping new powers to regulate the behaviour of the world's most powerful technology companies. The legislation, described by officials as among the most significant interventions in digital competition policy in a generation, is expected to reshape how platforms including Google, Apple, Meta, Amazon, and Microsoft operate within the British market.

What the Law Actually Does

At its core, the Digital Markets, Competition and Consumers Act creates a bespoke regulatory regime specifically designed for large technology companies — a departure from general competition law, which critics had long argued was too slow and too reactive to address the structural dominance that platforms have built over years. The new framework operates on designation: the CMA must first formally investigate and designate a company as holding Strategic Market Status in a specific digital activity before any conduct requirements apply.

Strategic Market Status, or SMS, is the central mechanism of the law. A firm qualifies if it has a "substantial and entrenched" position in a digital activity and possesses "significant financial resources, technology, or data" — characteristics that, according to officials, insulate it from normal competitive pressure. Once designated, companies become subject to legally binding conduct requirements that the CMA can tailor to the specific market failure identified. These requirements might include prohibitions on self-preferencing — where a platform prioritises its own products in search results or app stores — or mandates around data access and interoperability, which refers to the ability of rival services to connect and exchange information with a dominant platform.

Designated Conduct Requirements Explained

Conduct requirements under the Act fall into three broad categories: those promoting fair dealing, those promoting open choices, and those promoting trust. Regulators can require designated firms to give business users and consumers the ability to switch between services more easily, to ensure that competitors are not systematically disadvantaged, and to prevent the leveraging of dominance in one market to distort competition in another. The CMA may also impose pro-competitive interventions — structural or behavioural remedies — after a specific investigation, potentially including requirements around data sharing, default settings, or the way in which services are presented to consumers.

The legislation also introduces new consumer protection powers that sit alongside the digital markets provisions. These empower the CMA to directly enforce consumer law without needing to go through the courts, significantly accelerating the regulator's ability to act against harmful commercial practices such as subscription traps and drip pricing — the practice of adding mandatory fees incrementally through a checkout process, obscuring the true cost of a product or service.

The Road to Royal Assent

The journey of the legislation through Parliament was neither swift nor without controversy. The bill was introduced as part of a broader package of economic legislation and spent considerable time in both the House of Commons and the House of Lords, attracting intense lobbying from technology companies concerned about the scope of CMA powers and the risk of regulatory divergence with the European Union's Digital Markets Act.

For readers following the bill's legislative history, earlier coverage tracked its progress through the bill's final parliamentary vote, which illustrated the scale of cross-party support the measures ultimately attracted despite industry resistance. A subsequent analysis examined Parliament's passage of the Digital Markets Bill to curb Big Tech power, outlining the key amendments that shaped the final text.

Industry Opposition and Concessions

Major technology companies argued during the legislative process that the designation regime created regulatory uncertainty, that the CMA's powers were disproportionately broad, and that the absence of robust appeal rights undermined due process. Officials and parliamentary committees disagreed, pointing to built-in safeguards: the requirement for the CMA to carry out a formal five-year designation investigation, the availability of judicial review, and explicit duties on the regulator to consider innovation and investment impacts before imposing requirements.

Some concessions were made during the Lords stages. The final text includes enhanced requirements for the CMA to consult designated firms before implementing conduct requirements and provisions intended to provide greater legal certainty for companies seeking to understand in advance whether proposed business practices would be permissible. Whether these adjustments meaningfully constrain the CMA's operational flexibility remains a matter of debate among competition lawyers.

How the UK Framework Compares to Global Approaches

Analysis from Gartner has consistently highlighted the European Union's Digital Markets Act as the most aggressive existing framework for platform regulation, given its prescriptive list of obligations for designated gatekeepers. The UK model, by contrast, is explicitly designed to be flexible and case-specific — a feature that officials argue allows the CMA to address emerging harms more responsively, but which critics caution may produce slower and less predictable outcomes (Source: Gartner).

Divergence from the EU Digital Markets Act

The question of regulatory divergence is particularly significant given that several of the firms most likely to face SMS designation in the UK operate under DMA obligations in the EU simultaneously. Research from IDC suggests that dual compliance burdens for major platforms could reach hundreds of millions of pounds annually once both regimes are in full operation, creating pressure on companies to seek some degree of policy alignment where possible (Source: IDC). However, officials have maintained that the UK's independent framework is a deliberate feature of post-Brexit regulatory sovereignty, not a flaw to be engineered away.

Wired has reported extensively on the operational differences between the two regimes, noting that the DMA designates services rather than companies at a structural level, while the UK approach ties designation to a firm's overall capabilities and resources — a distinction with meaningful implications for how obligations cascade across a conglomerate's product portfolio (Source: Wired).

Implications for Consumers and Businesses

For ordinary consumers, the most immediate impacts are likely to be felt not in the digital markets provisions — which will take time to operationalise through CMA investigations — but in the new consumer enforcement powers. The CMA's ability to directly impose fines and require redress without court proceedings is expected to make enforcement faster and more credible. Subscription trap protections, which require clearer pre-contract information, easier cancellation, and mandatory reminders before paid trials convert to full subscriptions, are expected to take effect on a defined timetable following Royal Assent.

App Stores and Browser Defaults: Priority Targets

Market observers widely expect Apple's App Store and Google's Play Store to be among the earliest candidates for SMS designation investigations, given the CMA's existing work in both areas. The regulator has previously identified concerns about the terms on which developers access app distribution, the commissions charged, and restrictions on alternative payment systems. Similarly, Google's dominance in search and its agreements with device manufacturers and browser developers to maintain default positions have been the subject of CMA scrutiny, mirroring parallel investigations by the European Commission and the United States Department of Justice.

MIT Technology Review has noted that the interoperability provisions within the UK framework — if applied to messaging services or social platforms — could have particularly significant structural consequences, potentially requiring large platforms to allow third-party applications to communicate with their services, a step that companies including Meta have argued poses serious privacy and security risks (Source: MIT Technology Review).

The CMA's New Mandate and Capacity

The Competition and Markets Authority's digital markets unit has been preparing for this moment since its shadow launch several years ago. Officials confirmed that the unit will now begin the formal process of identifying which firms and which digital activities to prioritise for SMS designation investigations. Each investigation carries a statutory nine-month time limit, with a possible three-month extension, meaning that the first designations — and the conduct requirements that follow — could realistically be in place within approximately a year of the Act coming into full force.

The CMA has indicated it intends to operate transparently, publishing its prioritisation decisions and engaging with designated firms on the design of conduct requirements before they are imposed. Whether the regulator has sufficient technical expertise and staffing to manage several concurrent designation investigations while also exercising its expanded consumer enforcement powers is a question that parliamentary committees have flagged as requiring ongoing scrutiny.

This legislation does not exist in isolation. The broader arc of UK digital governance — from the protracted debates over the Online Safety Bill to the emerging frameworks for artificial intelligence oversight — reflects a consistent legislative ambition to establish the UK as a jurisdiction that sets credible rules for the digital economy rather than importing standards from Brussels or Washington. The relationship between competition regulation and AI governance is already becoming apparent: the CMA has flagged concerns about AI foundation model markets, and the interplay between market power in AI infrastructure and the new SMS regime is expected to be a live issue. Readers tracking that thread will find context in coverage of the UK's landmark AI Safety Bill becoming law and earlier reporting on how Parliament advanced its AI regulation bill.

The Digital Markets, Competition and Consumers Act represents the most structurally significant change to UK competition enforcement in the digital sector since the CMA itself was created. Its ultimate effectiveness will be determined not by the text of the statute but by the rigour, speed, and consistency with which the regulator deploys the powers Parliament has now formally granted it.