Brussels
For fifteen years, "Hey Google" has been the magic phrase that unlocks the deepest powers of the world's most popular mobile operating system. Say it, and Google's assistant can book your taxi, screen your calls, read your texts and reply on your behalf, and reach into nearly any app on your phone. Every rival assistant — from ChatGPT to Perplexity to whatever the guy in Cupertino is quietly building — has had to watch from behind a velvet rope, locked out of the same privileges.
As of this week, the rope has been cut.
On July 16, the European Commission dropped two rulings on Google that regulators are calling the most consequential Digital Markets Act enforcement action since the law took effect in 2023. The first forces Google to give rival AI assistants system-level access to Android — the same voice-activation triggers, the same in-app task delegation, the same contextual awareness that Gemini alone has enjoyed since Android first shipped with a built-in assistant. The second orders Google to hand competing search engines access to anonymized search-ranking and query data that only Google, with its billions of daily searches, has ever been able to collect at meaningful scale.
Bundled in the same week: reports that Brussels is finalizing a separate, unrelated record fine against Google — in the high triple-digit millions of euros — for allegedly rigging its search results to favor its own shopping, travel and local-business listings over competitors. Add it up, and this is the worst seven days Google's regulatory affairs team has had since the DMA became law.
Alphabet shares fell about 4 percent in the wake of the news, and the company's own executives aren't hiding their alarm.
What Actually Changes On Your Phone
Here's the part that will matter to the roughly 1.8 billion people worldwide who carry an Android phone in their pocket. Under the Commission's specification measures, by the time Android 18 ships — the Commission has set an August 2027 deadline — users will be able to activate a third-party AI assistant with a voice command exactly the way "Hey Google" works today, without digging through settings menus or accepting a degraded, second-class experience.
They'll also be able to let that third-party assistant perform actions inside other apps on their behalf — booking a table, hailing a ride, drafting a reply to a message — tasks that currently only Google's own Gemini can execute system-wide. Users will get contextual suggestions from a non-Google assistant too, such as being prompted with a relevant reply while chatting, or being able to ask an AI about a location they just visited, capabilities Google has kept walled off from competitors.
On the search side, rival engines will get access to anonymized ranking and query data Google alone has been able to harvest from its search dominance, with data-sharing terms due to be finalized by January 2027.
The Commission's argument is essentially that Google built Android to be an open platform for two decades, then quietly reserved the best rooms in the house for its own AI products the moment the assistant wars began. "Without this access, alternative AI assistants are not competing on an equal footing," the Commission said in its guidance, framing the move as fixing an uneven playing field rather than inventing a new obligation from scratch.
Google's Position: This Will Get Someone Hacked
Google is not going quietly. Kent Walker, Google and Alphabet's president of global affairs, has warned publicly that opening up Android's deepest permissions to outside developers "poses a major security risk," arguing that handing third-party apps "sensitive and powerful device permissions" is an invitation for bad actors to build malicious assistants that impersonate trusted ones or quietly exfiltrate data.
Sameer Samat, the president of Android, went further on the record last week, telling reporters the European Commission "is on the wrong track" with the entire specification-measures approach — suggesting Google views this less as a fine-tuning of existing openness rules and more as regulators redesigning core parts of the operating system's security architecture from Brussels, with no ability to test unintended consequences before they ship to two billion devices.
It's worth remembering Google has heard versions of this warning from Brussels before, and been wrong about the doomsday scenarios roughly as often as it's been right. When the EU forced Google to offer browser and search-engine choice screens on Android starting in 2018, Google predicted chaos; the internet, broadly, did not break. Regulators are betting this plays out the same way.
Apple's Countermove: Just Don't Ship It
Google isn't the only company squirming. Apple, which faces its own set of DMA obligations around opening iOS to competitors, has already taken the nuclear option on one front: in June, Apple announced it simply will not launch its next-generation Siri overhaul in the European Union at all, rather than comply with DMA interoperability requirements for the assistant.
That's a striking admission. Apple has spent two years insisting its walled-garden approach is about protecting user privacy and security, not preserving market power. Choosing to withhold a marquee product from roughly 450 million EU consumers rather than open it to rivals suggests the company sees compliance as more costly than the lost revenue and reputational hit of a Siri-shaped hole in its European lineup.
Both companies are leaning on the same core argument: opening the platform to outside AI agents means giving those agents system permissions — access to your messages, your location, your microphone triggers — that were previously earned only by being the operating system's own first-party assistant. Handled carelessly, that argument isn't paranoia. A malicious "AI assistant" masquerading as a helpful voice tool, with legitimate system-level permissions, is a genuinely different threat model than a sketchy app buried in a store listing.
The Commission says it has built in "robust safeguards" to address exactly this, including a certification process third-party assistants must pass before they're granted the expanded permissions, and consent screens users must approve. Whether those safeguards prove airtight at the scale of billions of devices running assistants built by companies with wildly varying security practices is the open question regulators, Google, and security researchers will be arguing about for the next year.
The Bigger Picture: Who Actually Wins
Strip away the legal language and this is a fight over who gets to be the operating system for the age of AI agents. For the past two decades, "the OS" meant Android or iOS — the layer that decided which apps you could install and how they could talk to each other. Increasingly, tech executives on both sides of this fight believe the real operating system of the next decade is the AI assistant itself: the thing you talk to, that decides which app or service actually fulfills your request behind the scenes.
If that's true, then whoever controls assistant access to the phone controls the next trillion dollars of platform value — which is exactly why Google fought so hard to keep Gemini's privileges exclusive, and why OpenAI, Perplexity, Microsoft, and a raft of smaller AI assistant makers have been lobbying Brussels for precisely this outcome. This ruling pries that gate open.
Consumer groups broadly welcomed the decision. Digital rights advocates, who have spent years arguing that "assistant lock-in" would calcify into the same kind of entrenched monopoly that search and app stores became, are treating this as a rare case of regulation getting ahead of a monopoly rather than cleaning up after one.
Not everyone is cheering, though. Some security researchers have echoed at least part of Google's concern, noting that voice-activated, permission-heavy AI assistants are a genuinely novel attack surface, and that mandating rapid interoperability across an ecosystem of assistants built by companies with very different security postures is not a risk-free trade.
What This Means For You
If you own an Android phone, the honest answer is: not much changes today. The formal deadline for Google to ship these Android-level changes is August 2027, with the underlying search-data-sharing terms due by January 2027 — both more than a year away. Google is virtually certain to appeal at least parts of the ruling to the EU's General Court, a process that has historically taken years and has sometimes trimmed or delayed enforcement even when the underlying finding stood.
In practice, that means: expect headlines, expect Google and Apple lobbying hard, and expect the assistant on your phone to look exactly the same for a while yet. But the direction of travel is now set for the entire industry, not just in Europe. US and UK regulators have historically followed the EU's lead on platform-openness rules within a few years of Brussels moving first — app-store side-loading and browser choice screens both started as EU-only requirements and eventually became closer to a global default. If you use a non-Google AI assistant today, or you're simply tired of assistants that only fully work if you commit to one company's ecosystem, this ruling is the first crack in a wall that has stood since smartphones went mainstream.
If you're an EU-based iPhone user hoping for the flashy new Siri overhaul: for now, hold your breath and keep using what you've got. Apple has made clear it would rather skip the launch entirely than play by Brussels' new rules — at least until the two sides find a compromise, or Apple's competitors start eating its EU market share badly enough to change the calculus.
The Bottom Line
This is the most direct challenge yet to the idea that a phone's built-in AI assistant should automatically be its best-connected one. Whether you see the Commission's move as consumer-protecting trust-busting or as European regulators playing amateur software architect with two billion people's phones depends a lot on which side of the Atlantic — and which side of the Google-versus-everyone-else divide — you're standing on. Either way, mark August 2027 on your calendar. That's when we find out whether "Hey Google" finally has to share the stage.
