Cupertino, California Apple announced changes to iOS, Safari and the App Store in the European Union to comply with the Digital Markets Act (DMA). The changes affect developers’ apps and include over 600 new APIs, expanded app analytics, support for alternative browser engines, and new options for app payments and iOS app distribution. Apple said it would introduce safeguards to reduce, though not eliminate, the new risks and maintain the safest experience possible for EU users.

New options for iOS payments and app downloads may create opportunities for malware, fraud, harmful content and other privacy or security threats. Apple said safeguards such as iOS app notarization, authorization of marketplace developers and alternative payment disclosures would reduce these risks, although many risks would remain.

The developers can do it. Apple Developer Support PageDevelopers can review the changes and test the features in iOS 17.4 beta. The features will reach users in all 27 EU countries from March 2024.

Apple Fellow Phil Schiller said the announced changes were designed to comply with the EU’s DMA while helping protect users against increased privacy and security risks. He said Apple remained focused on a secure experience for users in Europe and worldwide. Developers could review tools and terms for alternative distribution and payments, browser engines and contactless payments, while retaining their existing business arrangements if they preferred.

The EU app changes reflect the European Commission’s designation of iOS, Safari and the App Store as core platform services under the DMA. Apple said it would provide resources in March to help users understand the changes, more complex experiences and risks of downloading apps or making payments outside the App Store.

Apple also published for global developersNew game streaming optionsand more than 50 upcoming reports covering areas such as engagement, commerce and app usage.

Apple will make several EU changes to iOS under the DMA, including new app distribution options for developers. The changes include:

• New options to distribute iOS apps through alternative app marketplaces— Includes APIs and tools for offering downloadable iOS apps through marketplaces outside the App Store.

• New frameworks and APIs for alternative app marketplaces— Allows marketplace developers to install apps and manage updates for other developers through their marketplace app.

• New frameworks and APIs for alternative browser engines— Lets developers use browser engines other than WebKit for browser apps and in-app browsing experiences.

• Interoperability application form— Lets developers request additional interoperability with iPhone and iOS hardware and software features.

Apple also outlined contactless payment changes to meet DMA requirements, as previously announced by the European Commission. New APIs allow developers in the European Economic Area to use NFC in banking and wallet apps. In the EU, new controls will let users choose a third-party contactless payment app or an alternative app marketplace as their default.

Apple said the new options for developers’ EU apps would introduce risks to users and devices. Although it could not eliminate those risks, it would take steps to reduce them within the DMA’s requirements. The safeguards would become available with iOS 17.4 or later from March, including:

• Notarization for iOS apps— A baseline review for apps across all distribution channels, intended to check platform integrity and protect users. Notarization combines automated checks and human review.

• App installation sheets— Uses information from notarization to give users an at-a-glance description before downloading, including the developer, screenshots and other key details.

• Marketplace developer authorization- Ensure that market developers comply with the continuing requirements to protect users and developers.

• Additional malware protection— Prevents an installed iOS app from launching if malware is detected in it.

Apple said measures such as iOS app notarization and authorization of marketplace developers would reduce some privacy and security risks for EU users, including malicious code and apps that conceal their functionality or the identity of the developer responsible.

Apple said its ability to address some other risks would be limited, including fraud, abuse and inappropriate, offensive or harmful apps. Apps using browser engines other than WebKit could also affect the user experience, including system performance and battery life.

Apple said it would protect EU users’ privacy, security and experience as far as possible within the DMA’s requirements. App Tracking Transparency will still apply to apps distributed outside the App Store, requiring permission before tracking users across apps or websites. However, App Store features such as Family Purchase Sharing and Ask to Buy will not apply to apps downloaded elsewhere.

After the changes take effect in March, Apple will share more resources explaining the options and recommended privacy and security practices.

iOS users can already choose a third-party browser instead of Safari as their default. To comply with the DMA, Apple will add a choice screen when EU users first open Safari on iOS 17.4 or later, prompting them to select a default browser from a list.

The DMA-required choice screen presents EU users with a browser list before they explore the options and interrupts their first Safari launch before opening a webpage.

Apple outlined App Store changes affecting developers distributing apps in the EU across iOS, iPadOS, macOS, watchOS and tvOS. The changes include disclosures explaining the risks of using payment methods outside the App Store’s secure payment processing.

• New options for payment service providers (PSPs)— Processes payments for digital goods and services inside a developer’s app.

• New options for processing payments through external links— Lets users complete digital purchases on developers’ external websites. Developers can also communicate promotions, discounts and offers outside the app to EU users.

• Business planning tool— Helps developers estimate fees and understand metrics associated with Apple’s new EU app business terms.

These changes also include new measures to protect and inform EU users, including:

• App Store product page labels— Informs users when an app they are about to download uses alternative payment processing.

• In-app disclosure sheets— Informs users when a transaction is not handled by Apple and when a developer directs them to alternative payment processing.

• New App review process— Verifies that developers accurately present information about transactions using alternative payment processing.

• Apple Expands Data Portability on Its Data and Privacy Website— Gives EU users new data about their App Store use and lets them export it to authorized third parties.

Apple will be unable to provide refunds for apps using alternative payment processing, and its ability to assist customers facing problems or fraud will be limited. Report a Problem, Family Sharing and Ask to Buy will not apply to those transactions. Sharing payment details with additional parties may create more opportunities for theft of financial information. App Store purchase history and subscription management will show only transactions using Apple’s in-app purchase system.

Apple also shared new business terms for developers distributing apps in the EU. Developers can adopt the new terms or retain the existing ones. Using the new alternative distribution or payment processing options for EU apps requires accepting the new terms.

Apple said the new EU app business terms were needed to support the DMA’s alternative distribution and payment requirements. The fee structure reflects areas in which Apple provides value to developers, including App Store distribution and discovery, secure payment processing, its mobile platform, and tools and technologies for building apps and reaching users worldwide. 

Developers using either set of business terms can continue distributing apps through the App Store and using its secure payment processing in the EU. Apple said both sets reflect its long-standing efforts to create opportunities for developers through its app ecosystem.

Developers adopting the new terms can distribute iOS apps through the App Store, alternative app marketplaces, or both. They can also choose alternative payment processing for apps distributed through Apple’s operating-system App Stores in the EU.

The new business terms for iOS apps in the EU include three elements:

• Lower fees— Reduces App Store commissions on digital goods and services in iOS apps to 10% for most developers and subscriptions after the first year, or 17%.

• Payment processing feeFor iOS apps distributed through the App Store, developers can use Apple’s payment processing for an additional 3% fee. Alternatively, they can use a payment service provider within the app or link to their website to process payments without an additional fee to Apple.

• Core Technology Fee— For iOS apps distributed through the App Store and/or other marketplaces, an annual fee of €0.50 applies to each first annual installation beyond 1 million.

For iPadOS, macOS, watchOS and tvOS apps distributed in the EU, developers using a payment service provider or linking to their own website for payment processing will receive a 3-percentage-point reduction in Apple’s commission.

Apple also outlined contactless payment changes to meet DMA requirements, as previously announced by the European Commission. New APIs allow developers in the European Economic Area to use NFC in banking and wallet apps. In the EU, new controls will let users choose a third-party contactless payment app or an alternative app marketplace as their default.Fee Calculatorand new reports to help developers estimate how the terms could affect their app businesses. Developers can use the new Apple Developer Support PageLearn about the EU app changes and test the features in iOS 17.4 beta.