CMA investigation into Google Privacy Sandbox

Third-party cookies—small files that follow you across websites—power much of today's open-web advertising. Privacy advocates hate them; publishers and ad companies depend on them for revenue.

Google announced Chrome would phase out third-party cookies and replace them with Privacy Sandbox technologies meant to show relevant ads with less individual tracking.

Competitors and media groups feared a bait-and-switch: Google would ban others' tracking while keeping rich data inside its own Ads and Analytics products, effectively self-preferencing its stack.

The UK Competition and Markets Authority opened a formal investigation in 2021—one of the first major probes treating privacy engineering as a competition issue.

Rather than sue immediately, the CMA accepted Google's commitments: longer timelines, transparency, and structured testing with industry participants under CMA-appointed monitoring.

Rollouts slipped repeatedly. Chrome's cookie deprecation timeline moved to 2025 and beyond as regulators and developers asked for more evidence that publishers would not lose money.

The matter remains active oversight, not a closed case. The CMA can reopen enforcement if Sandbox tools appear to crush rival measurement or ad buying—Google insists the project balances privacy and competition.

Chrome's market share means cookie policy is de facto industry law for open-web ads.

News sites funding journalism through ads could lose revenue if transitions are mishandled.

Privacy and competition goals collide here—regulators try to police both without picking a single winner.

US and EU enforcers watch the CMA model for managing platform-initiated tech transitions.

Advertisers may need new tools; outcomes affect whether small sites stay ad-funded.

Privacy Sandbox could concentrate ad data and spending in Google products.

Independent ad-tech and measurement firms might be excluded or degraded.

Publishers would face lower yields while Google captures more margin.

Announcing the change without adequate rival input abuses dominance in browsers and ads.

Google says Sandbox improves user privacy and provides open APIs anyone can implement.

It argues cookies were never sustainable under privacy law trends anyway.

Google maintains publishers will retain monetization with aggregated targeting tools.

It cooperates with CMA testing and has delayed timelines to address concerns.

You may see fewer creepy retargeting ads—or different kinds of ads—as cookies fade.

Free websites could get poorer or paywall more if ad revenue drops during transition.

Nothing requires you to change settings today; timelines keep shifting.

UK oversight matters globally because ad tech builds for Chrome first.

Treat 'cookies are dead' headlines as phased, contested policy—not overnight fact.