Illustration by Alex Castro / The Verge
Google’s plan to phase out third-party cookies and replace them with a bundle of new standards referred to as the “Privacy Sandbox” just overcame a key regulatory hurdle. The UK’s competition regulator, the Competition and Markets Authority (CMA), has formally accepted Google’s commitments about how it’ll develop the new standards so they don’t harm competition or unfairly benefit the search giant’s own advertising business, the regulator announced today.
Google’s plans are still in flux, and it’s not yet clear exactly what technologies Privacy Sandbox will use to replace third-party cookies. Just last month, Google abandoned one planned approach, FLoC, in favor of a new system called Topics API. Today’s approval is for Google’s approach, rather than any one specific technology. The regulator notes that in the next phase it will “supervise Google to ensure the Privacy Sandbox is developed in a way that benefits consumers.”
Now that they’ve been formally accepted, Google’s commitments become legally binding, and the search giant has said it’ll apply them globally. The commitments include developing the Privacy Sandbox proposals transparently, and to publish test results. Google has also said it won’t remove third-party cookies until the CMA is satisfied that the new alternatives don’t raise competition concerns, and Google has also said it won’t unfairly share data within its business to gain an advantage over competitors.
“The commitments we have obtained from Google will promote competition, help to protect the ability of online publishers to raise money through advertising and safeguard users’ privacy,” the CMA’s chief executive Andrea Coscelli said in a statement. “While this is an important step, we are under no illusions that our work is done. We will keep a close eye on Google as it continues to develop these proposals.”
The proposals have been controversial, with critics claiming that they could entrench Google’s dominance of the digital advertising market and make it harder for online publishers and other advertising companies to make money. As a result, at the beginning of 2021 the CMA said it would be formally investigating the proposals, and later started working with Google directly to design and develop them in a way that wouldn’t harm competition.
The result of the collaboration was a series of commitments from Google, which the CMA provisionally approved in late November. Google will appoint a CMA-approved monitoring trustee who will have access to Google’s systems to verify it’s not unfairly harming rivals. Last June, Google said it would not use first-party data collected from Chrome or Android to track users across the web after third-party cookies are phased out, the Financial Times previously noted.
Problems with Google’s approach have already led it to abandon one of its ideas for replacing third-party cookies called FLoC, or Federated Learning of Cohorts. In January the company proposed an alternative called Topics API, which attempts to pinpoint five of your interests, and store them in your browser. Critics claimed that FLoC could have created privacy risks, and competing browsers including Edge and Firefox refused to use it.
Google’s Chrome won’t be the first browser to phase out third-party cookies (others like Safari and Firefox already block them by default), but Chrome’s dominate market share means it’s likely to have the largest impact on the digital advertising market. The current plan is to block third-party cookies by default by the end of 2023.