EU orders Google to open Android to AI assistants by 2027

Google must expose 11 Android system features to rival AI assistants such as ChatGPT and Claude, and share anonymized search‑query data with competing search engines, under the EU’s Digital Markets Act [2]. The rulings aim to curb Google’s default advantage and give European users genuine choice, while raising new security and compliance challenges for enterprises.

EU enforcement under the Digital Markets Act

The European Commission issued two related orders on Thursday: one compelling Google to let third‑party AI assistants reach system‑level capabilities currently reserved for its Gemini model, and another obliging the company to provide anonymized search data to rival search services [1][2]. The 11 features include wake‑word activation, screen‑context access, cross‑app actions, and background execution, which will let users invoke a non‑Google assistant to book a taxi or look up a location just as they can with “Hey Google.” The Commission says the measures include “robust safeguards” for privacy and device security, and that Google may assess rivals for cybersecurity risk before granting access [2].

Implications for security and competition

Industry experts warn that the new parity erodes a long‑standing security model in which the OS controls what apps can do. Once multiple assistants obtain system‑level permissions, CISOs will need to treat AI assistants as a distinct risk category, applying device‑policy controls similar to those used for app stores and mobile‑device‑management solutions [1]. Google argues the changes could “undermine vital privacy and security guardrails for millions of Europeans” and has offered alternative safeguards, though the Commission’s order discounts those proposals [1][2].

For competitors, the order levels the playing field: AI providers like OpenAI, Anthropic, and Claude can now integrate deeply with Android without relying on Google’s proprietary APIs. This could accelerate the emergence of alternative search and assistant experiences in the EU, a market that represents a significant share of global smartphone usage. At the same time, the requirement to share search‑query data—subject to anonymisation—provides rivals with insights that Google has historically kept to itself, potentially reshaping the search‑advertising ecosystem [2][5].

What to watch

• Rollout timeline: The Commission expects the Android changes to be live for users by July 2027, with data‑sharing mechanisms beginning in January 2027 [2].
• Security assessments: Google’s ability to vet AI rivals for cybersecurity risk before granting access could become a bottleneck and a point of regulatory scrutiny.
• Competitive response: Rival AI firms may prioritize compliance to secure Android integration, while Google may seek to influence the EU’s “price formula” for shared search data or pursue additional safeguards.

The EU orders mark a concrete step toward dismantling Google’s default advantage on Android, forcing the company to balance regulatory compliance, user privacy, and enterprise security while opening the door for AI assistants to compete on equal technical footing. The ultimate impact will hinge on how quickly rivals can meet the security criteria and how effectively the safeguards protect European users.