Back to Frameworks

EU Digital Markets Act

European Union
vRegulation (EU) 2022/1925
7 domains
26 controls

Regulation (EU) 2022/1925 (the Digital Markets Act, DMA) creates EU ex-ante rules for the largest digital platforms ('gatekeepers') providing 'core platform services' (CPS): online intermediation, search engines, social networks, video-sharing platforms, number-independent interpersonal communication services (N-IICS), operating systems, web browsers, virtual assistants, cloud computing services, online advertising services. Applied from 2 May 2023; gatekeepers were first designated September 2023 with the 6-month obligation-compliance deadline of 6 March 2024. Article 3 sets the quantitative + qualitative designation criteria (turnover thresholds, EUR 7.5B annual EU revenue or EUR 75B market cap; >=45M monthly active end users and >=10K monthly active business users in EU; entrenched and durable position over the past three financial years). Article 4 reviews designation. Article 5 lists the 'self-executing' obligations (e.g. no cross-service personal-data combining without consent, allow business users to offer cheaper elsewhere, allow free communication with end users acquired through the CPS, no anti-steering, transparency in advertising). Article 6 lists obligations susceptible to specification (no use of non-public business-user data, allow uninstallation + default changes + third-party app stores, non-discriminatory ranking, interoperability with hardware/software, effective data portability, FRAND access to app stores / search / N-IICS / social networks, fair termination conditions). Article 7 specifically imposes phased N-IICS interoperability. Article 14 imposes acquisition-notification obligations. Article 23 sets dawn-raid inspection powers. Article 28 mandates a compliance function. Article 30 sets the penalty regime (up to 10% of worldwide annual turnover; 20% for repeat infringements). The DMA operates alongside competition law and is enforced centrally by the European Commission.

Verified

Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (7)

DMA - Article 5 Self-Executing Obligations (Ch III)

1 controls
Controls in the DMA - Article 5 Self-Executing Obligations (Ch III) domain of EU Digital Markets Act1 controls
CodeTitle
DMA-Art.5Article 5 self-executing obligations (Article 5)

DMA - Article 6 Obligations Susceptible of Specification (Ch III)

1 controls
Controls in the DMA - Article 6 Obligations Susceptible of Specification (Ch III) domain of EU Digital Markets Act1 controls
CodeTitle
DMA-Art.6Article 6 obligations susceptible to specification (Article 6)

DMA - Article 7 N-IICS Interoperability and Compliance Obligations (Ch III)

6 controls
Controls in the DMA - Article 7 N-IICS Interoperability and Compliance Obligations (Ch III) domain of EU Digital Markets Act6 controls
CodeTitle
DMA-Art.11_12_13Reporting, updating obligations and anti-circumvention (Articles 11-13)
DMA-Art.14Notification of concentrations (Article 14)
DMA-Art.15Audit obligation (Article 15)
DMA-Art.7N-IICS interoperability (Article 7)
DMA-Art.8Compliance with obligations - Article 8 specification process (Article 8)
DMA-Art.9_10Suspension and exemption (Articles 9-10)

DMA - Cooperation, Penalties, Final Provisions (Ch V-VI)

10 controls
Controls in the DMA - Cooperation, Penalties, Final Provisions (Ch V-VI) domain of EU Digital Markets Act10 controls
CodeTitle
DMA-Art.29Non-compliance (Article 29)
DMA-Art.30_31Fines and periodic penalty payments (Articles 30-31)
DMA-Art.32_33_34Limitation periods and right to be heard (Articles 32-34)
DMA-Art.36Professional secrecy (Article 36)
DMA-Art.37_38_39_40Cooperation with national authorities, competition authorities and courts; high-level group (Articles 37-40)
DMA-Art.41_42_43_44_45Market-investigation requests, representative actions, whistleblower protection, publication of decisions, judicial review (Articles 41-45)
DMA-Art.46_47_48Implementing acts, guidelines and standardisation (Articles 46-48)
DMA-Art.49_50Delegation and committee procedure (Articles 49-50)
DMA-Art.51_52Amendments to Directives 2019/1937 and 2020/1828 (Articles 51-52)
DMA-Art.53_54Review and entry into force (Articles 53-54)

DMA - Gatekeeper Designation (Ch II)

2 controls
Controls in the DMA - Gatekeeper Designation (Ch II) domain of EU Digital Markets Act2 controls
CodeTitle
DMA-Art.3Designation of gatekeepers (Article 3)
DMA-Art.4Review of gatekeeper status (Article 4)

DMA - Market Investigation, Investigative Powers and Enforcement (Ch IV-V)

4 controls
Controls in the DMA - Market Investigation, Investigative Powers and Enforcement (Ch IV-V) domain of EU Digital Markets Act4 controls
CodeTitle
DMA-Art.16_17_18_19Market investigation (Articles 16-19)
DMA-Art.20_21_22_23Investigative powers (Articles 20-23)
DMA-Art.24_25_26_27Interim measures, commitments, monitoring and third-party information (Articles 24-27)
DMA-Art.28Compliance function (Article 28)

DMA - Subject Matter, Scope and Definitions (Ch I)

2 controls
Controls in the DMA - Subject Matter, Scope and Definitions (Ch I) domain of EU Digital Markets Act2 controls
CodeTitle
DMA-Art.1Subject matter and scope (Article 1)
DMA-Art.2Definitions (Article 2)

Maps to 2 other frameworks

26 total controls
EU Data Act
2 source controls mapped|1 target controls covered
8%
GDPR
1 source controls mapped|2 target controls covered
4%

Frequently Asked Questions

What is EU Digital Markets Act?

EU Digital Markets Act is a compliance framework from European Union with 7 domains and 26 controls. Regulation (EU) 2022/1925 (the Digital Markets Act, DMA) creates EU ex-ante rules for the largest digital platforms ('gatekeepers') providing 'core platform services' (CPS): online intermediation, search engines, social networks, video-sharing platforms, number-independent interpersonal communication services (N-IICS), operating systems, web browsers, virtual assistants, cloud computing services, online advertising services. Applied from 2 May 2023; gatekeepers were first designated September 2023 with the 6-month obligation-compliance deadline of 6 March 2024. Article 3 sets the quantitative + qualitative designation criteria (turnover thresholds, EUR 7.5B annual EU revenue or EUR 75B market cap; >=45M monthly active end users and >=10K monthly active business users in EU; entrenched and durable position over the past three financial years). Article 4 reviews designation. Article 5 lists the 'self-executing' obligations (e.g. no cross-service personal-data combining without consent, allow business users to offer cheaper elsewhere, allow free communication with end users acquired through the CPS, no anti-steering, transparency in advertising). Article 6 lists obligations susceptible to specification (no use of non-public business-user data, allow uninstallation + default changes + third-party app stores, non-discriminatory ranking, interoperability with hardware/software, effective data portability, FRAND access to app stores / search / N-IICS / social networks, fair termination conditions). Article 7 specifically imposes phased N-IICS interoperability. Article 14 imposes acquisition-notification obligations. Article 23 sets dawn-raid inspection powers. Article 28 mandates a compliance function. Article 30 sets the penalty regime (up to 10% of worldwide annual turnover; 20% for repeat infringements). The DMA operates alongside competition law and is enforced centrally by the European Commission. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.

How many controls does EU Digital Markets Act have?

EU Digital Markets Act has 26 controls organised across 7 domains. The largest domains are DMA - Cooperation, Penalties, Final Provisions (Ch V-VI) (10 controls), DMA - Article 7 N-IICS Interoperability and Compliance Obligations (Ch III) (6 controls), DMA - Market Investigation, Investigative Powers and Enforcement (Ch IV-V) (4 controls). Each control defines specific requirements that organisations must implement to achieve compliance.

What frameworks does EU Digital Markets Act map to?

EU Digital Markets Act maps to 2 other compliance frameworks. The top mapping partners are EU Data Act (8% coverage), GDPR (4% coverage). Use our comparison tool to explore control-level mappings between frameworks.

How do I get started with EU Digital Markets Act compliance?

Start your EU Digital Markets Act compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about EU Digital Markets Act requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 26 controls and track your progress.

Start Your Compliance Journey

Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 700 frameworks.

Get Started Free →

Free forever — no credit card required