The Ghent developer-security company bought the Warsaw attack-simulation start-up and the Belgian phishing-training firm in September; Noon combines email security, AI governance and device protection.
Poland makes Apple drop "tracking" from its app consent prompts
EditorialBy TrustList Editorial
UOKiK's commitments decision DOK-7/2026 makes Apple use the same neutral prompt for its own apps and everyone else's in Poland, and sets up an independent liaison officer for app makers' complaints.
- Poland
- Warsaw, Poland
- Europe
- Mobile App Development
- +2 more
About Poland makes Apple drop "tracking" from its app consent prompts
Poland makes Apple drop "tracking" from its app consent prompts
20 October 2026: Poland's competition authority, UOKiK, has made Apple commit to showing a neutral consent prompt, with the same look, layout and wording, in its own apps and in other publishers' apps for users in Poland, and to stop using the word "tracking". Apple must also appoint an independent liaison officer to take app developers' complaints about its App Tracking Transparency (ATT) policy, in Polish or English.
Not yet independently verified. We have read Decision DOK-7/2026 of 19 October 2026: Apple must carry out the commitments within two months of it becoming final. UOKiK has not said when that will be, and Apple has made no statement of its own. We will update this when it can be confirmed, and remove this note.
What UOKiK found wrong with ATT
UOKiK President Tomasz Chróstny opened proceedings because Apple, besides writing the rules every iOS developer must follow, publishes apps and sells mobile advertising itself, so it competes with the developers it regulates. ATT defined "tracking" as combining a user's data from apps of different companies to show personalised ads, and required an extra consent prompt for it. Combining data collected by a single company, Apple included, did not count. The result, UOKiK says, was that third-party apps asked users to allow "tracking" while Apple asked about "personalised ads", in windows with different designs and button wording, although the data could be used for the same purpose in both cases.
That difference, the authority says, could discourage users from sharing data with independent publishers, favour companies that run advertising on their own data, Apple in particular, and cut publishers' revenue from in-app advertising.
The commitments Apple has accepted
The case ended in a commitments decision, numbered DOK-7/2026, addressed to Apple and two of its Irish subsidiaries, Apple Distribution International and Apple Operations International. UOKiK's release mentions no fine. The new rules apply to people whose Apple account uses a Polish billing address and whose device reports Poland as its location. Under the decision:
- consent prompts in Apple's apps and in third-party apps get a neutral appearance, layout and text, with graphics and phrases that could steer the choice removed;
- publishers may add a link to a web page, or an extra screen, with fuller information on how they process personal data, and Apple may not interfere with its content;
- Apple must tell publishers about the commitments and the policy changes, including in the terms on its websites and in developer documentation;
- an independent liaison officer will receive comments, questions and complaints from developers and pass them to a separate independent monitoring trustee, who rules on complaints about ATT.
Apple has two months from the day the decision becomes final to make the changes, must send UOKiK documents showing it has done so, and has to report every year.
Part of a wider European push
Chróstny said the decision followed "intensive, many-month cooperation with the European Commission", which wanted the same changes to ATT in the other EU member states. UOKiK lists earlier action on ATT by the French authority in March 2025, the Italian one in December 2025 and the German one, which accepted commitments, in August 2026, and says it is also running proceedings against Google and Meta. For Polish app makers, the practical change is a prompt that no longer frames their ad measurement as "tracking", and a named route for disputes outside Apple's own review process.
Related on TrustList:
- Apple tightens App Store rules on hidden features and AI imagery
- Apple adds location and dating declarations to App Store age ratings
Sources
- UOKiK: Apple zmienia praktyki po interwencji Prezesa UOKiK (decision DOK-7/2026), 20 October 2026
- UOKiK: Decision DOK-7/2026 (PDF), 19 October 2026
Categories & features
TrustList Weekly
The week in software and IT, in one email
The news that matters to buyers, new rankings and our own research. Every Thursday, free, and easy to leave.
You may be interested in
The Sejm has passed a bill, now with the Senate, that keeps fines for KSeF mistakes on hold until 31 December 2027, while the last exemption, for firms invoicing up to PLN 10,000 a month, ends with 2026.
Poland's government adopted draft tax laws adding a 22% CIT rate for firms with revenue over €50 million, cutting the ryczałt flat-rate revenue limit from €2 million to €250,000 and extending the robotisation relief for 10 years.
Poland’s enterprise agency PARP opens its SMART 2.0 R&D track for SMEs from 29 October to 29 December 2026: projects of at least PLN 3 million, support up to PLN 50 million, in a national smart specialisation such as digital technologies.
Poland’s Government Plenipotentiary for Cybersecurity recommended on 2 October 2026 that entities in the national cybersecurity system update MikroTik RouterOS without delay (7.24.2, 7.23.4, 6.49.21), check for compromise and close management services.
New guideline 2.5.19 targets apps that change after review, and 1.2 now names AI-generated intimate imagery. A revised developer agreement from 13 October also awaits acceptance.
CERT Polska published three CVEs for the twofactor_gauthenticator plugin. Every version before commit 4640889 is affected, and the fix exists only as a commit, with no tagged release.
An order dated 30 September covers the ministry, tax offices and customs. It requires a central register of AI uses, staff training before use, and monthly sessions of a new AI council.
More on TrustList
Everything here links back to the same verified catalogue. Pick your next stop.
- More PolandThe ranking for this subject
- CompaniesAgencies, consultancies and IT service providers, ranked by verified reviews.
- ProductsSoftware and SaaS with pricing, features, integrations and alternatives.
- AwardsAnnual recognition decided by verified reviews and an independent jury.
- LaunchesNew products and releases, voted up by the community every day.
- AI ModelsBenchmark scores and community ratings for every major model.
- RequestsBuyers describe what they need; vendors respond directly.
- PeopleReviewers, authors and makers with public profiles.
- ComparePut up to four listings side by side before you shortlist.