Google Search Data Licensing Rules for Europe Explained

▼ Summary
– Google has updated its documentation for the European Search Dataset Licensing Program to detail how eligible competitors can license anonymized search data.
– This initiative fulfills a binding decision by the European Commission under the Digital Markets Act, requiring Google to share data with qualifying rivals including AI chatbots.
– Applicants must be online search engines targeting the EEA, have at least 50,000 monthly users in the EU, and meet specific operational or investment criteria.
– Data samples become available on November 16, with fees capped at incremental costs plus a return, and access requires passing independent technical and security audits.
– Recipients must undergo ongoing monitoring via Level 2 reports to ensure data protection controls remain effective throughout their use of the dataset.
Google has updated its guidelines for the European Search Dataset Licensing Program, providing a clearer roadmap for eligible competitors seeking to license search data within the European Economic Area (EEA). The revised documentation details how qualified entities can access anonymized information regarding search rankings, queries, clicks, and views. This initiative is a direct implementation of the European Commission’s binding decision issued in July under the Digital Markets Act (DMA), which requires Google to share this data with rivals, including AI chatbots that qualify as online search engines.
The newly published page, last refreshed on August 31, outlines specific eligibility criteria, sample availability, audit protocols, and critical deadlines. Licensing agreements are scheduled to begin distribution on September 17, while data samples will become available starting November 16.
Eligibility Criteria and Application Process
To qualify for access, applicants must meet strict definitions set by the DMA. They must operate an online search engine targeting users within the EEA and cannot be controlled by non-EEA state actors or subject to EU sanctions. Financial and user base thresholds are also enforced. Applicants must demonstrate an average of at least 50,000 monthly users for their search service in the EU over the preceding year. Furthermore, they must have provided search services in the EU for two consecutive years, or if they are newer entrants, they must have secured over 50 million euros in capital investment.
Google reserves the right to request supporting documentation to verify these claims. The company commits to responding to expressions of interest within seven calendar days. This streamlined response time aims to reduce uncertainty for potential partners navigating the new regulatory landscape.
Data Samples and Fee Structure
Eligible entities can request data samples prior to committing to full dataset access. Three distinct types of samples are available, all launching on November 16. A free sample provides 1,000 rows of data. For those requiring more extensive testing, a synthetic dataset containing up to 10 million queries and a 5% sample of the full dataset are available for a fee.
The pricing model adheres to fair, reasonable, and non-discriminatory (FRAND) terms. Under the Commission’s measures, fees are capped at the incremental costs of data provision plus a specified rate of return. This structure ensures that smaller competitors are not priced out of accessing essential market data while allowing Google to recover administrative expenses.
Audit Requirements and Compliance
Access to the larger 5% sample and the full dataset requires passing an independent assessment. While the smaller free and synthetic samples do not mandate an audit, Google still verifies applicant eligibility beforehand. For full-scale access, an independent auditor examines the applicant’s technical infrastructure, data storage methods, and operational workflows.
The process begins with a Level 1 report, which confirms that the applicant has credible plans to use the data for its own search product and possesses suitably designed data protection controls. To maintain ongoing access, recipients must agree to continuous monitoring by an independent assurance practitioner. They are required to submit regular Level 2 reports to verify that controls function effectively in practice. The first Level 2 report is due within six months of granting access, with subsequent reports required annually.
These audits are critical because recipients handle personal data. The Commission maintains that keeping data isolated within the recipient’s systems can satisfy the DMA’s anonymization standards, but each applicant must prove they are doing so correctly.
Strategic Implications and Future Oversight
This update transforms the broad July decision into actionable steps with defined timelines. By gating the larger datasets behind an audit requirement while keeping smaller samples accessible without one, Google allows eligible companies to evaluate the data quality before incurring audit costs. This tiered approach balances regulatory compliance with practical business considerations.
Looking forward, licensing agreements will precede detailed technical specifications for the dataset. The European Commission plans to review these measures every two years to ensure they remain effective. Additionally, Google must maintain a public webpage listing all third-party search engines that access the dataset. This transparency measure is vital for verifying whether data distribution extends beyond major search providers to include qualifying AI chatbots, ensuring the DMA’s goals are fully realized.
(Source: Search Engine Journal)




