Digital Markets Act

The Digital Markets Act (DMA) is an EU regulation enacted in 2022 to ensure contestable and fair digital markets by regulating 'gatekeeper' platforms. It targets large digital services that act as essential gateways between business users and consumers. The DMA's obligations include ensuring data portability, interoperability of messaging services, and prohibiting the prioritization of own products over competitors. This regulation complements the GDPR (General Data Protection Regulation) by ensuring that the data-driven advantages of gatekeepers do not infringe on consumer privacy or fair competition. For enterprises, this means a shift from proprietary ecosystems to more open digital environments, requiring robust data governance and technical interoperability standards. Companies must be closely monitored by the European Commission, with fines up to 10% of total worldwide annual turnover for first-time violations, and up to 20% for repeated infringements. This makes DMA compliance a critical component of any digital enterprise's risk management strategy, especially those operating within the EU market.

Implementation of DMA compliance typically follows a three-phase approach. Phase 1: Identification and Assessment. Companies must audit their digital services against the DMA's gatekeeper criteria, including user numbers, turnover, and market position. Phase 2: Technical and Operational Implementation. This involves ensuring data portability, interoperability, and non-discriminatory practices. For example, a platform must allow third-party apps to be installed on its OS. Phase 3: Monitoring and Reporting. Continuous monitoring of compliance status and establishment of reporting lines to the European Commission. A real-world example is Apple's introduction of alternative app stores in the EU to comply with DMA. Key Performance Indicators (KPIs) to track include the number of third-party integrations, data-sharing requests fulfilled, and the time-to-resolution for regulatory inquiries. Companies should integrate these requirements into their existing ISO 42001 AI Management System and ISO 27701 frameworks to ensure a unified approach to digital risk and privacy management.

Taiwan enterprises face three primary challenges: Regulatory Ambiguity, Technical Complexity, and Supply Chain Pressure. First, the definition of 'gatekeeper' remains subject to interpretation, making it difficult for SMEs to be certain of their status. Second, the technical requirement for interoperability often necessitates significant architectural changes to existing platforms, which can be costly and time-consuming. Third, as many Taiwan companies are part of the global supply chain for larger EU-based tech firms, they face pressure to be DMA-compliant even if they are not direct gatekeepers themselves. To overcome these, enterprises should: 1. Partner with international legal experts specializing in EU digital law; 2. Adopt a 'privacy-by-design' and 'open-by-design' approach in all new digital product development; 3. Establish a clear compliance roadmap with milestones for each DMA obligation. The priority should be on data-centric architecture that allows for flexible access-control-based interoperability, ensuring long-term compliance and competitiveness in the EU market.

Winners Consulting Services Co., Ltd. specializes in Digital Markets Act for Taiwan enterprises, delivering compliant management systems within 90 days. Free consultation: https://winners.com.tw/contact