Página traduzida e verificada automaticamente. Prevalece a versão em inglês. Algumas partes ainda estão em inglês enquanto a tradução é verificada. Ver em inglês · Informar um erro de tradução
DMA
Regulamento dos Mercados Digitais, Regulamento (UE) 2022/1925
Limites à forma como os gatekeepers combinam dados pessoais entre serviços sem consentimento, entre outras regras de conduta.
The law in brief
The Digital Markets Act sets conduct rules for the largest digital platforms, which the European Commission designates as gatekeepers. Among its obligations are limits on how gatekeepers combine personal data across their services without consent, and duties to give business users and end users access to data and to allow portability and interoperability.
Only designated gatekeepers are directly bound. For everyone else, the DMA matters as a source of rights in dealings with those platforms.
A quem se aplica
- Gatekeepers designated by the Commission for specific core platform services, such as online search, app stores, operating systems, browsers, social networks, messaging, video sharing, online advertising and marketplaces.
- Designation follows thresholds on EU turnover or market value, user numbers and entrenchment, or a market investigation.
- Business users and end users of those services benefit from the obligations.
What it requires
No combining personal data without consent
Gatekeepers may not process end users' personal data from third-party services for ads, or combine or cross-use personal data across core platform services and other services, unless the end user has given GDPR consent.
Data portability and business user access
Gatekeepers must provide effective data portability for end users and give business users free, real-time access to the data generated through their use of the platform.
Audited description of profiling
Gatekeepers must submit an independently audited description of the consumer profiling techniques they apply, and publish an overview.
Report acquisitions
Gatekeepers must inform the Commission of intended concentrations involving digital services or data collection, whether or not they need merger approval.
Direitos das pessoas
End users can refuse consent to the combination of their personal data across a gatekeeper's services and still get a less personalized equivalent service, port their data, uninstall preinstalled apps and change defaults. Business users can access the data generated by their use of the platform and use alternative payment and distribution channels where the rules allow.
Enforcement and penalties
Multas de até 10% do faturamento anual mundial, ou até 20% em caso de infrações reiteradas, e sanções pecuniárias periódicas (arts. 30 e 31). Em caso de descumprimento sistemático, a Comissão pode impor medidas corretivas comportamentais ou estruturais. Ela multou dois controladores de acesso em abril de 2025.
What to do first
- Check whether you are a gatekeeper; almost every organization is not.
- If you are a business user of a gatekeeper, identify the data access, portability and interoperability rights you can use.
- Review ad and measurement arrangements that depend on gatekeeper data combination, since consent now limits it.
- Track Commission decisions on specification and non-compliance that change platform terms.
Checked against the official text on 28 September 2026. Quotations are the operative words of the law, linked to the article they come from; the official text is the authority. This brief is written by the Association for practitioners and is not legal advice.
Novidades recentes
-
Ninth Circuit rejects Google’s security argument against interoperability
The ruling clears a major legal obstacle to mandated interoperability, reinforcing privacy‑friendly competition. The U.S. Court of Appeals for the Ninth Circuit ruled that Google’s claim opening its platform to third‑party app stores would harm security, rejecting the argument. The decision supports enforcement of interoperability requirements such as those in the EU Digital Markets Act.
Source: EFF updates. DMA in the regulations library.
Fontes
- Regulamento (UE) 2022/1925 EUR-Lex · Texto oficial ou regulador
Biblioteca de regulamentações
Todas as leis estaduais de privacidade dos EUA em um só mapa
24 estados têm uma lei abrangente de privacidade na biblioteca, ao lado das leis da UE, do Reino Unido, federais dos EUA e globais: 102 no total, cada uma explicada em linguagem simples com suas fontes. Selecione um estado para ver o que se aplica lá.
- Em vigor
- Entrando em vigor
- Leis setoriais