UK's CMA says Google has agreed to expanded oversight in the development of Privacy Sandbox as part of the regulator's antitrust investigation
Context & Ripple Effects
Google had already committed to involve UK competition and privacy regulators in its cookie-replacement work through an earlier regulator-engagement commitment. The expanded CMA oversight turns that engagement into a more formal antitrust constraint on how Privacy Sandbox is developed.
The related coverage later records the CMA's acceptance of Google's phase-out plan with continued monitoring, placing this agreement in a longer sequence of regulator-supervised implementation rather than a one-off consultation.
First-order effects
- Google must develop Privacy Sandbox under expanded CMA oversight, giving the regulator a continuing role in reviewing the changes central to its antitrust investigation.
- The CMA gains a mechanism to scrutinize Privacy Sandbox's development before the replacement for third-party cookies is fully implemented.
Second-order effects
- Privacy Sandbox participants must plan around a Chrome privacy transition whose design and rollout are subject to CMA review, rather than Google’s product timetable alone.
- Google's commitments make regulatory process part of the product-development path, raising the importance of satisfying both competition and privacy concerns in the same proposal.
Third-order effects
- If this oversight model holds, dominant-platform changes to advertising infrastructure will increasingly be governed as market-access decisions, with regulators monitoring implementation as well as announcing remedies.
- The CMA's approach points toward competition supervision that follows technical design choices over time, particularly where a platform’s privacy changes also reshape dependent businesses.
The trend: Privacy-driven changes to dominant digital platforms are becoming subject to ongoing competition governance, not just conventional after-the-fact antitrust review.