The UK’s DMCC Regime: Strategic Market Status and Conduct Requirements

The UK’s DMCC regime is the DMA’s most important sibling — and its philosophical rival. Where Brussels enacted one obligation catalogue for all gatekeepers, London built a discretionary system: designate a firm, then design its rules. For platforms and the businesses depending on them, the difference is strategic: the UK regime is more flexible, more participatory and less predictable. This guide explains SMS designation, conduct requirements, pro-competition interventions and the enforcement machinery — part of the digital-markets pillar of our Competition & Antitrust hub.

How does SMS designation actually work?

The CMA’s Digital Markets Unit opens a designation investigation into a defined digital activity — not a whole company — and must conclude within nine months. The test: substantial and entrenched market power (a forward-looking, five-year assessment) and strategic significance (size, gateway position, influence over other businesses’ access to markets), plus the turnover thresholds. Designation lasts five years, renewable, and immediately activates mandatory merger-reporting duties for the designated firm.

The first wave targeted the obvious gateways: general search (Google, designated after the January 2025 investigation) and the mobile ecosystems of Apple and Google (operating systems, app stores, browsers). Cloud services — after the CMA’s market investigation into AWS and Microsoft — and other activities sit in the pipeline. The activity-based design matters: rules attach to “general search” or “mobile ecosystem” as defined, so scoping fights (what counts as part of the activity) are the UK equivalent of the DMA’s designation appeals, fought before rules are ever written.

What are conduct requirements — and how are they set?

Bespoke rules drawn from a statutory menu organised under three objectives: fair dealing (no discriminatory or unreasonable terms for users and dependents), open choices (no self-preferencing, no restricting use of rivals, choice architecture that permits switching) and trust and transparency (notice of changes, complaint handling, data clarity). The CMA consults publicly on each requirement, tailors it to the firm’s activity, and can update it as markets move.

The design philosophy is participatory rulemaking: dependent businesses, rivals and the designated firm all shape the requirements through consultation — which makes UK conduct requirements slower to arrive than DMA obligations but potentially better fitted and harder to game. The first consultations (Google search: ranking transparency, fair ranking, data portability, publisher terms; mobile: app-store terms, steering, browser and default choices, interoperability) read as a case-law-informed remix of the DMA catalogue, adjusted for UK market facts. For affected businesses, consultation participation is not optional civic virtue — it is the only moment the rules are drafted, and gatekeeper-dependent firms that sit it out inherit rules negotiated by others.

What are pro-competition interventions (PCIs)?

The regime’s structural tool: where a factor related to a designated activity has an adverse effect on competition, the CMA can impose remedies beyond conduct rules — interoperability mandates, data-access schemes, choice screens, even ownership separation in principle — following a PCI investigation. It is the market-investigation tradition (the CMA’s power to restructure markets without any infringement finding) imported into the digital regime.

PCIs are the UK’s answer to the DMA’s Article 18 asymmetry: structural-grade intervention is available without waiting for repeated non-compliance, but each intervention must be evidenced, consulted and proportionate. Candidates flagged in CMA thinking include mobile browser-engine requirements (from the mobile study), search data access, and cloud switching remedies (egress fees and licensing practices from the cloud investigation). For strategy teams, PCI risk changes the calculus around entrenchment tactics: in the UK, a practice can be dismantled because the market needs it, not because the firm broke a rule — a lower and less controllable threshold than infringement-based systems.

How do mergers change for SMS firms?

Designated firms must report acquisitions meeting modest thresholds (broadly: 15%+ stakes, £25 million+ consideration, UK nexus) to the CMA before closing and observe a waiting period — a targeted answer to the killer-acquisition problem that leaves the general UK voluntary regime untouched. Combined with the share-of-supply test’s flexibility, the practical effect is that SMS firms’ deal-making operates under a de facto mandatory regime unique to them.

This sits atop the CMA’s established willingness to review — and unwind — completed platform deals, and its jurisdictional reach demonstrated in Microsoft/Activision. Acquirers designated (or plausibly designatable) should treat UK reporting as a standing workstream: deal pipelines screened against the reporting duty, integration planning gated on the waiting period, and the strategic recognition that serial small acquisitions in the designated activity are precisely what the reporting regime was built to see. The broader global scrutiny of tech acquisitions is mapped in our killer-acquisitions guide.

How is the regime enforced — and appealed?

The CMA enforces directly: investigation, decision, penalties to 10% of global turnover plus daily fines, all without going to court first. The DMCC adds personal accountability — senior managers can be named responsible for compliance, with individual exposure for information failures — and a distinctive countervailing benefits exemption: conduct breaching a requirement escapes enforcement if the firm proves consumer benefits that outweigh the harm and cannot be achieved less restrictively, a structured efficiency defence the DMA deliberately omitted.

Appeals go to the Competition Appeal Tribunal, predominantly on judicial-review principles (penalties on the merits) — a standard chosen to protect the CMA’s discretion, and itself contested in early litigation. The institutional bet differs from Brussels’: the UK trades some legal certainty for regulatory judgment, wagering that a well-informed unit making tailored rules will beat both slow litigation and rigid statutes. Whether the bet pays depends on execution discipline — and on the DMU resisting the capture and delay dynamics that consultation-heavy regimes invite.

What does the DMCC mean for global compliance architecture?

Parallel regimes, divergent details. A platform designated in both systems faces the DMA’s uniform duties plus UK requirements that may differ in scope, definition and timing — choice screens specified differently, data-access rights with different perimeters, steering rules with different fee tolerances. Engineering teams need a compliance matrix by feature and jurisdiction; legal teams need to track two rule-making cycles; and strategy teams should expect regulatory arbitrage to shrink as the regimes cross-reference each other’s findings.

For the rest of the world, the DMCC matters as the leading alternative model: jurisdictions drafting platform rules — Türkiye among them — are choosing between the DMA’s catalogue and the UK’s designation-plus-discretion architecture, or hybridising. The compliance investments that transfer best across all variants: activity-level data maps, self-preferencing audits, interoperability-ready architectures and documented fairness rationales for rankings and terms. Those are the invariants; everything else is jurisdiction-specific configuration, tracked in our DMA enforcement guide and this pillar’s updates.

What happened to the UK’s consumer-law half of the DMCC?

It travels with the competition half and bites the same businesses: the Act gave the CMA direct consumer-enforcement powers — fines to 10% of global turnover for unfair commercial practices, without court proceedings — and modernised rules on subscription traps, drip pricing and fake reviews. For platforms, the consumer and SMS tracks converge: choice architecture, defaults and transparency sit in both, and the CMA has signalled joined-up enforcement where dark patterns implicate both regimes.

The practical consequence for any consumer-facing digital business trading into the UK — SMS-designated or not — is that UK compliance reviews can no longer split ‘competition’ from ‘consumer’ workstreams: pricing displays, cancellation flows, review moderation and renewal mechanics now carry turnover-percentage exposure enforced by the same regulator that writes the conduct requirements. Multinationals aligning global flows to the strictest regime should note that on consumer mechanics, the UK now frequently is that regime.

How are the first conduct-requirement packages shaping up?

As targeted, evidence-anchored rule-sets rather than DMA transplants. The search package’s consultation centred on fair ranking and transparency for businesses dependent on Google traffic, publisher bargaining terms, and data portability supporting rival engines; the mobile packages address app-store terms and fees, steering freedom, browser-engine choice and interoperability — each requirement traceable to findings in the CMA’s own market studies. The DMU has signalled phased introduction: foundational transparency and fairness duties first, deeper structural asks (choice screens, interoperability mandates) as evidence and capacity allow.

Two features deserve business attention: requirements bind only within the designated activity’s defined perimeter, making scoping submissions as valuable as substantive ones; and the countervailing-benefits defence invites gatekeepers to pre-build efficiency evidence, meaning dependent businesses should pre-build the rebuttals. The UK’s first-cycle choices will also preview its temperament for the cloud and AI designations queued behind — flexibility’s price is that every package is a fresh negotiation.

Frequently Asked Questions