EU Digital

DMA compliance, fair and contestable markets

Track gatekeeper obligations and structure the compliance reports the European Commission expects.

The Digital Markets Act (Regulation (EU) 2022/1925) sets obligations for gatekeepers: large platforms the European Commission designates for core platform services such as app stores, search, messaging and operating systems. Gatekeepers must comply within six months of designation and report annually. Fines reach 10% of worldwide turnover, or 20% for repeat infringements.

TL;DR

  • Designation thresholds: €7.5bn EU turnover or €75bn market value, plus 45 million monthly EU end users.
  • Obligations apply six months after designation.
  • Gatekeepers file compliance reports with the Commission and update them at least annually.
  • Fines up to 10% of worldwide turnover, or 20% for repeat infringements.

Reviewed by the ComplyEasyAI compliance teamLast reviewed

Sources: EUR-Lex, Regulation (EU) 2022/1925 (DMA)European Commission, Digital Markets Act

Key requirements

What does the DMA require?

The requirements below define the DMA. ComplyEasyAI maps your environment to each one.

01

Gatekeeper designation

Determine whether your core platform services meet the thresholds.

02

Interoperability

Enable interoperability and data portability where required.

03

No self-preferencing

Avoid ranking your own services above rivals unfairly.

04

Data-use limits

Respect limits on combining and using business-user data.

05

Compliance reporting

Report on measures implemented to comply.

How it works

How do you prepare for the DMA?

  1. Scope

    Define the systems, boundaries and requirements your program will cover.

  2. Connect your stack

    Link cloud, identity, code and ticketing systems, read-only for evidence collection; controls are discovered and mapped.

  3. Collect evidence

    AI agents gather configuration and activity evidence on a schedule, building a versioned trail.

  4. Monitor & remediate

    Continuous monitoring flags drift the moment it happens and routes it to an owner.

  5. Track effectiveness

    Operating effectiveness is recorded over time, ready for your observation window.

  6. Report & hand off

    Organized, current evidence is packaged for auditors and stakeholders.

How ComplyEasyAI helps

How does ComplyEasyAI automate DMA compliance?

Control mapping

Your environment is mapped to each requirement, so you see exactly which control satisfies what.

Automated evidence

Integrations build a versioned, timestamped evidence trail instead of manual screenshots.

Continuous monitoring

Drift surfaces as soon as it happens, not during fieldwork.

Readiness dashboards

Real-time views highlight failing or unmapped controls with owners attached.

Multi-framework reuse

Shared controls are mapped once and reused across every framework you run.

Audit-ready reporting

Export organized, current evidence packages on demand.

Related frameworks

Which frameworks are related to the DMA?

FAQ

DMA FAQ

Who are gatekeepers?

Platforms the European Commission designates for a core platform service because they meet size thresholds: €7.5bn EU turnover or €75bn market value, plus 45 million monthly end users and 10,000 yearly business users in the EU.

What are core platform services?

Services named in the Act, such as search engines, app stores, messaging, social networks, operating systems, browsers and online advertising.

What are the penalties?

Up to 10% of worldwide annual turnover, or 20% for repeated infringements, plus periodic penalty payments of up to 5% of average daily worldwide turnover.

How do you help?

The platform tracks the obligations that apply to you and structures the compliance reporting gatekeepers must file.

Start your DMA program.

Map the requirements, automate the evidence, stay audit-ready.