Public DMA enforcement continued to gain momentum in 2025, reaching its preliminary peak with the first fines imposed on Meta (€200 million) and Apple (€500 million). Further proceedings initiated by the EU Commission are gradually paving the way for private enforcement of the DMA before civil courts. In Germany, the first DMA rulings were issued.
The Digital Market Act (DMA) aims to limit the market power of large digital platforms (so-called gatekeepers) and thus to ensure fair competition in the digital sector. In addition to the public enforcement by the EU Commission, which started in March 2024, aggrieved economic operators such as app developers, competing digital players and also consumers can bring civil actions before civil courts in Member States. The German legislature has facilitated private enforcement by integrating DMA claims into the existing framework for antitrust damages in the German Act against Restraints of Competition (ARC), thereby giving claimants a procedural head start.1
In 2025, the EU Commission issued a number decisions against four designated gatekeepers:
In its ruling of 12 August 2025, the Regional Court of Mainz prohibited Google (subsidiary of gatekeeper Alphabet) from giving preferential treatment to its own email service Gmail when setting up Android devices and using other platform services (including, inter alia, YouTube, Google Maps). The claimant, 1&1 Mail & Media, operator of the email services GMX and WEB.DE, challenged Google’s practice of requiring users to register a Gmail account when setting up AndroidOS. In the claimant’s opinion, the design of the setup process violated Art. 5 (8) DMA (prohibition of tying other services with CPS’).
From a procedural perspective, the Regional Court rejected a stay of proceedings under Article 39(5) DMA even though the practice at issue was simultaneously subject of a dialogue between Google and the EU Commission. The Regional Court held that Google had failed to demonstrate which decision the EU Commission intended to adopt.
On the merits, the Regional Court dismissed the action insofar as it was directed against Google’s German subsidiary. Referring to the ECJ’s antitrust ruling in Sumal12, the Regional Court found that while a subsidiary may, in principle, be held liable, the relevant conditions had not been established in the present case. In particular, Google’s German subsidiary did not operate the CPS’ at issue, and there was therefore no sufficiently concrete link between its economic activity and the alleged DMA infringement.
However, the Regional Court ruled that the action against Google’s Irish subsidiary as the operator of the relevant CPS’ was admissible and (for the most part) well-founded. Relying on Section 33 ARC in conjunction with Article 5(8) DMA, the Regional Court prohibited Google from making the use of Android, Google Play, Chrome, or YouTube conditional upon the creation of a Gmail account, notably, throughout the EU.
The Higher Regional Court of Cologne adopted a more cautious approach in its Facebook AI training ruling of 6 October 2025.13 The interim proceedings concerned Meta’s announcement that, from May 2025 onwards, it would use content publicly shared by users on Facebook and Instagram to train its proprietary AI model. According to the Consumer Centre of North Rhine-Westphalia, which had brought the action, this practice violated not only data protection laws but also Article 5(2) DMA, which prohibits the impermissible combination of personal data from different core platform services. The Higher Regional Court dismissed the application.
On the procedural side, the Higher Regional Court held that the class action was admissible under the German Act on Injunctions (UKlaG) and confirmed the international jurisdiction of German courts pursuant to Article 7(2) of the Brussels I Regulation, as the data processing in question intentionally concerned users located in Germany.
On the merits, following a summary assessment, the Higher Regional Court held that Meta had not infringed Article 5(2) subparagraph 1(b) DMA by using data from Facebook and Instagram in a single dataset for AI training purposes. In the court’s view, Meta did not “combine” personal data in the legal sense, as there was no targeted linking of individual users’ personal data across different CPS’.
Comment
The first German civil court decisions demonstrate that the combination of public and private enforcement can enable effective and swift application of the DMA. Germany is assuming a pioneering role in this respect. Notably, the first two German civil proceedings were stand-alone actions rather than follow-on claims, i.e., they were brought without a prior non-compliance decision by the EU Commission and without a stay of proceedings pursuant to Article 39(5) DMA. The latter had previously been discussed as a potential obstacle to private enforcement.
The application of established ARC principles on antitrust damages and, as illustrated by the Regional Court of Mainz, the transfer of antitrust case law to private DMA actions underscore why Germany is particularly well suited as a forum for such litigation.
This publication has been prepared for informational purposes only. It does not claim to be complete and does not constitute legal advice. Any liability in connection with the use of the information and its accuracy is excluded.