The European Commission is finalizing regulations under the Digital Markets Act (DMA) that would require Google to increase the interoperability of its Android operating system and share search data with competitors.

歐盟委員會正在完成《數位市場法案》（DMA）下的法規，要求 Google 提高其 Android 作業系統的互操作性，並與競爭對手分享搜尋數據。

The current regulatory trajectory is predicated on the DMA's designation of Alphabet as a 'gatekeeper,' a status necessitating the reduction of market dominance to facilitate competition. Central to this effort is a proposal requiring Google to provide rival search engines with access to granular search data, including query inputs, click rates, and ranking results. While the Commission has mandated the use of anonymization protocols and contractual safeguards to protect user identity, Google executives contend that these measures are technically insufficient. Specifically, Google's security personnel assert that 'linkage attacks' could permit the re-identification of users within a two-hour window, thereby rendering the data non-anonymous. Furthermore, Google posits that the dissemination of such data to smaller entities would expand the attack surface for cybercriminals, potentially escalating fraud across the Union.

目前的監管軌跡是基於 DMA 將 Alphabet 指定為「門戶守門人」（gatekeeper），此身分要求其減少市場主導地位以促進競爭。此舉的核心是一項要求 Google 向競爭對手的搜尋引擎提供詳細搜尋數據的提案，包括查詢輸入、點擊率和排名結果。雖然委員會要求使用匿名化協定和合約保障來保護使用者身分，但 Google 高層認為這些措施在技術上並不充分。具體而言，Google 的安全人員主張「關聯攻擊」可能在兩小時窗口內重新識別使用者，從而使數據失去匿名性。此外，Google 認為將此類數據分發給較小實體將擴大網路犯罪者的攻擊面，可能導致歐盟內詐騙行為升級。

Parallel to the search data dispute, the Commission seeks to decouple the Android operating system from the exclusive integration of Google's Gemini AI. This would permit third-party AI agents to utilize 'wake words' and access system-level permissions, such as microphone and camera data. Google and Apple have expressed mutual concern that such expanded access would compromise established mobile security paradigms and facilitate the deployment of malicious software. Conversely, some competitors and academic observers argue that the proposed risks are theoretical and that the framework is sufficiently robust to catalyze market competition.

與搜尋數據爭議平行，委員會尋求將 Android 作業系統與 Google Gemini AI 的獨家整合解耦。這將允許第三方 AI 代理使用「喚醒詞」並獲取系統級權限，例如麥克風和相機數據。Google 和 Apple 均表達了共同擔憂，認為此類擴大權限將損害已建立的行動安全範式，並促成惡意軟體的部署。相反，部分競爭對手和學術觀察者認為，所提出的風險僅為理論性的，且該框架已足夠強健以催化市場競爭。

Concurrent with these competition-focused measures, the European Council has adopted the 'Omnibus VII' simplification package. This legislative action postpones the compliance deadlines for high-risk AI systems—shifting stand-alone system obligations to December 2027 and embedded system requirements to August 2028—to alleviate administrative burdens on industry stakeholders. Additionally, the framework now explicitly prohibits the generation of non-consensual intimate imagery, effective December of the current year.

與這些專注於競爭的措施同時，歐盟理事會通過了「Omnibus VII」簡化方案。此立法行動推遲了高風險 AI 系統的合規期限——將獨立系統義務移至 2027 年 12 月，將嵌入式系統要求移至 2028 年 8 月——以減輕產業利害關係人的行政負擔。此外，該框架現在明確禁止生成非經同意的親密影像，將於今年 12 月起生效。

The European Commission is expected to issue a legally binding final decision regarding Google's data and system access obligations on July 27.

歐盟委員會預計將於 7 月 27 日就 Google 的數據和系統存取義務發布具有法律約束力的最終決定。