Article 6 sets obligations that may be further specified by Commission decision (Article 8 process). Highlights: (1) no use of non-public business-user data to compete against business users on the CPS; (2) allow end users to uninstall pre-installed apps + change defaults; (3) allow installation and effective use of third-party app stores + sideloaded apps (operating systems); (4) no self-preferencing in ranking, indexing, crawling; (5) interoperability access to hardware and software features used or controlled through the OS / virtual assistant (Article 6(7)); (6) free and effective end-user data portability (continuous + real-time where applicable); (7) free + effective business-user data access (incl. data generated through end-user interaction on the CPS); (8) advertiser/publisher performance-data access (impressions, clicks, billing rates); (9) FRAND access to app stores / online search engines / online social networks; (10) termination conditions must not be disproportionate and may be exercised easily and at no undue cost.
This control maps to 2 controls across 2 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 2 it maps to, and the evidence behind each claim, over MCP and REST.