Apple has spent years making privacy one of the defining features of the iPhone. The company has turned “privacy” into a product selling point, built entire advertising campaigns around it, and made App Tracking Transparency, or ATT, one of the clearest examples of that philosophy in practice.

But ATT is becoming something of a headache for Apple.

The company is now facing a £2 billion ($2.7 billion) lawsuit in the UK over the very privacy framework it introduced to give iPhone users more control over tracking. The claim, filed with the UK’s Competition Appeal Tribunal, alleges that Apple imposed tougher tracking requirements on third-party developers while giving its own services more favorable treatment.

That distinction matters. The argument isn’t really that asking users for permission to be tracked is a bad idea. In fact, regulators have repeatedly acknowledged that the underlying privacy goal is legitimate.

The growing criticism is about whether Apple plays by the same rules it imposes on everyone else.

That is a much harder problem for Apple to brush aside.

ATT arrived with iOS 14.5 in April 2021. Under the system, apps that want to track a user across other companies’ apps and websites for advertising or measurement purposes generally have to ask for permission through Apple’s standardized prompt. If the user says no, the app loses access to the IDFA, Apple’s advertising identifier, and is also restricted from using other information to track that person in the way covered by Apple’s rules.

For ordinary iPhone users, it was a pretty straightforward proposition: an app shouldn’t quietly follow you around the internet and across other apps without your knowledge.

That sounds difficult to argue with.

And that is precisely why the controversy around ATT is more complicated than the usual Big Tech antitrust fight.

The issue isn’t whether users deserve privacy. They clearly do. The issue is what happens when the company controlling the operating system, the App Store and parts of the advertising ecosystem gets to decide how that privacy system works.

The latest UK lawsuit is being brought on behalf of thousands of app developers by ATT Collective Action Limited, whose director is Ann Pope, a former senior director for antitrust at the UK’s Competition and Markets Authority. The claim argues that Apple’s implementation of ATT disadvantaged third-party businesses and caused substantial financial harm.

Apple, unsurprisingly, disagrees.

The company has told Reuters that it is subject to the exact same requirements as other developers.

That is likely to become one of the central questions in the case: what does “the same requirements” actually mean when Apple controls the operating system and can design the user experience surrounding consent?

European regulators have already been asking essentially the same question.

Germany’s Federal Cartel Office raised concerns about Apple’s ATT framework in February 2025, saying the stricter requirements applied to third-party app providers but not to Apple itself. The regulator said this could potentially violate German and European competition rules.

Then came France.

In March 2025, France’s competition authority fined Apple €150 million over its implementation of ATT. Importantly, the regulator did not say that the idea behind ATT was inherently problematic. Instead, it concluded that the way Apple implemented the framework was neither necessary nor proportionate to its stated privacy objective.

French regulators were particularly concerned about what happens when ATT interacts with other consent mechanisms.

For many third-party apps, ATT does not necessarily replace the developer’s own consent process. That can mean users encounter multiple privacy prompts, making the experience more complicated. France’s competition authority said this complexity disproportionately affected smaller publishers that rely heavily on third-party data collection and advertising to fund their businesses.

That gets to the heart of the complaint against Apple.

Imagine you run a small free app funded by advertising. You depend on being able to understand your audience, measure advertising campaigns and provide advertisers with useful targeting information.

Then Apple changes the rules.

Suddenly, you have to ask users for another permission before you can access information that was previously available for advertising purposes. A large number of users say no. Your advertising becomes less effective, your revenue can fall, and you have fewer resources to invest in the product.

Meanwhile, Apple operates its own enormous ecosystem, has direct relationships with users and has access to vast amounts of first-party data generated within its services.

From Apple’s perspective, ATT is about protecting users.

From the perspective of a small developer, the same system can look like the platform owner changing the economics of the platform in a way that favors itself.

That’s the tension regulators are increasingly interested in.

And it isn’t going away.

Germany’s investigation moved forward again in August 2026, when the Federal Cartel Office said Apple would change its data-consent rules following concerns that Apple’s own apps could receive more favorable treatment. The German regulator had concluded that Apple’s consent prompts for its own services could encourage users to grant permission, while prompts shown to third-party apps could discourage consent.

That is a particularly awkward finding for Apple.

The wording and presentation of a consent prompt can sound like a tiny interface detail. But when that prompt determines whether an advertising-supported business can access valuable measurement and targeting tools, the design of that screen can have real economic consequences.

And that is why ATT has evolved from a privacy feature into a competition issue.

The French case is especially revealing because the regulator essentially separated the principle from the implementation. It did not reject the idea that users should be protected from unwanted tracking. Instead, it questioned whether Apple needed to implement those protections in the particular way it chose.

That distinction is important because Apple cannot simply respond to every ATT challenge by saying, “But privacy is good.”

Of course privacy is good.

The harder question is whether Apple can use privacy protections as justification for rules that potentially make life harder for competitors while leaving its own business in a stronger position.

That is also why the £2 billion figure attached to the new UK case is getting so much attention. It is not simply another regulatory fine. The claim seeks compensation on behalf of developers who argue that they suffered financial losses because of Apple’s approach.

There is, however, a big caveat: this is a lawsuit, not a final judgment.

The UK claim still has to go through the legal process, including certification before it can proceed as a collective action. So it would be premature to treat the £2 billion figure as money Apple is about to hand over.

Still, the case matters even before that point.

Taken individually, a lawsuit in the UK, a French competition decision or a German regulatory investigation might be manageable for a company the size of Apple. Put them together, however, and they start to suggest a broader problem with the way regulators view Apple’s control over the iOS ecosystem.

And that’s probably the part Apple should be paying closest attention to.

The company has historically been very good at framing privacy as a simple battle between Apple and the advertising industry: Apple protects your data, while other companies want to collect it.

But the regulatory debate is becoming less binary.

Governments aren’t necessarily asking Apple to abandon privacy. They are asking whether the rules used to protect privacy are being applied neutrally.

That is a much more uncomfortable question.

It also highlights one of the unintended consequences of Apple’s privacy strategy. ATT fundamentally changed the mobile advertising market when it launched. Developers had to adapt, advertisers had to rethink measurement and companies such as Meta publicly warned that Apple’s changes would hurt their advertising businesses.

Apple, meanwhile, continued building its own advertising business.

That doesn’t automatically prove that ATT was designed to benefit Apple. Establishing that would require much more evidence than simply pointing out that Apple’s advertising operation exists alongside its privacy rules.

But competition regulators don’t necessarily need to prove a secret motive. The bigger question is whether Apple’s conduct gives its own services an unfair advantage because of the company’s control over the platform.

That is why the latest UK lawsuit is more significant than its headline number suggests.

Apple isn’t being challenged simply because it made tracking harder.

It’s being challenged over whether the company that controls the rules of the iPhone ecosystem can simultaneously be a participant in the markets affected by those rules.

That problem extends far beyond advertising.

The same basic debate has appeared repeatedly around the App Store, payment systems, default apps, search distribution and other parts of Apple’s ecosystem. Regulators increasingly see Apple’s control over iOS as something that needs to be examined through a competition lens, rather than simply accepted as part of Apple’s product design.

ATT is now another chapter in that much larger story.

For Apple, the irony is obvious. One of the company’s strongest arguments in its battles with regulators has always been that its tightly controlled ecosystem allows it to provide better security and privacy.

That argument has real merit. Apple’s ability to control iOS does let it introduce privacy protections that would be difficult to implement consistently across a more fragmented ecosystem.

But control comes with responsibility.

Once a company becomes the gatekeeper for a huge developer economy, seemingly small design decisions can determine who gets access to users, data and advertising revenue. A privacy rule can therefore become a competition rule almost without changing its wording.

And that is where Apple finds itself now.

The company may ultimately convince courts and regulators that ATT is fair, necessary and applied consistently. But after years of scrutiny in Europe and another multibillion-dollar legal challenge in the UK, it is getting harder to treat the controversy as a one-off complaint from unhappy developers.

The bigger question is no longer whether Apple should protect iPhone users from unwanted tracking.

It should.

The question is whether Apple can protect those users without giving itself a competitive advantage along the way.

That is the argument Apple now has to win.