Platform Regulation: what can lawmakers learn from CADE’s recent actions?
*Originally published in Valor Econômico.
**This is an AI-powered machine translation of the original text in Portuguese.
Apple recently announced changes to its operating system (iOS) in Brazil, including new options allowing developers to distribute applications through alternative app stores and to use other payment processing systems within those environments. These changes resulted from intervention by Brazil’s Administrative Council for Economic Defense (CADE), through a cooperative dialogue with the company.
The case originated from a complaint filed by Mercado Livre, which alleged that Apple imposed excessive restrictions on developers within the iOS ecosystem by (i) preventing developers from offering goods or services outside Apple’s system through their iOS apps (anti-steering rules), and (ii) requiring developers to use exclusively Apple’s own payment processing system. CADE initiated an administrative proceeding, imposed interim measures based on a theory of harm, and ultimately resolved the case through a settlement agreement. In response to these competition concerns, Apple raised another critical issue that benefits all developers within its ecosystem: the restrictions enhance cybersecurity standards and data protection for users (both developers and end consumers). The case is therefore highly complex, involving trade-offs between expanding competition in the distribution of digital services, on the one hand, and ensuring cybersecurity and personal data protection, on the other.
Despite the complexity and sensitivity of the matter—which goes to the core of Apple’s business model and that of numerous technology companies connected to its ecosystem—the case was resolved within three years of Mercado Livre’s complaint, filed in December 2022. A decisive factor was the dialogue between CADE and Apple, which culminated, in 2025, in the execution of a Cease-and-Desist Commitment Agreement (Termo de Compromisso de Cessação – TCC). In Europe, the issue took longer to resolve, involving four years of a traditional antitrust investigation followed by an additional round of oversight under the Digital Markets Act (DMA), which lasted another year.
Another recent case involves Meta/WhatsApp, concerning new WhatsApp Business terms that could restrict the use of the platform by artificial intelligence chatbots competing with Meta AI. Announced in October 2025, the new terms led to a complaint filed in November of the same year, after which CADE’s General Superintendence (SG/CADE) initiated an inquiry and imposed interim measures in January 2026. In March 2026, CADE’s Tribunal unanimously upheld those measures. The case demonstrates that, even in a novel and technically sensitive area, CADE was able to respond within a matter of months.