What the fair ranking requirement means for businesses

Google holds roughly 90% of UK search market share, according to CMA analysis. Under the Digital Markets, Competition and Consumers Act 2024, the regulator designated Google as having Strategic Market Status in general search, unlocking a suite of new powers. The fair ranking conduct requirement is one of the first to be exercised.

The requirement compels Google to rank organic search results, including those surfaced in AI Overviews, using objective and non-discriminatory criteria. Sponsored results are excluded. Google must also provide greater transparency to businesses about how rankings work and give advance notice of significant changes, as first reported by UKTN.

Critically for operators who allocate marketing spend around search visibility, the requirement introduces a clear process for businesses to raise concerns about how Google ranks results and to have those concerns addressed effectively. The CMA noted that businesses had told the regulator that current ranking practices are neither fair nor transparent, and that this uncertainty holds them back from investing in and growing their operations.

"Search is a vital gateway for businesses in the UK to reach customers, and clearer, predictable and more transparent ranking systems could give them greater scope to expand and invest," said Will Hayter, executive director for digital markets at the CMA.

For SME founders and marketing leads, the practical upshot is threefold. First, ranking criteria should become more legible, reducing the guesswork that currently surrounds algorithm updates. Second, advance notice of significant changes should allow teams to adjust content and technical SEO strategies before traffic is affected, rather than after. Third, a formal complaints route means businesses will no longer be limited to public forums or opaque support channels when rankings shift unexpectedly.

Data portability: from voluntary API to legal obligation

The second conduct requirement concerns Google's UK Data Portability Application Programming Interface. Google already operates a voluntary API that allows users to export their search data to authorised third parties. The CMA's action places that mechanism on a statutory footing, according to the regulator's announcement.

Third-party firms, such as rewards platforms, personalised offer services, and discount-code providers, have told the CMA they need legal certainty before investing in products built on UK search data. Without a binding obligation, the risk that Google could restrict or withdraw API access at any point has discouraged development.

The CMA noted that UK users' data portability rights will now be on a par with protections available under the EU's Digital Markets Act. That alignment removes a cross-border disparity that had discouraged some third-party firms from building UK-specific products and services. For smaller businesses, this could open new channels and partnerships; a rewards platform that can access a user's search history, with consent, could surface relevant local offers or route traffic to independent retailers.

Hayter added that the measure would give "innovative businesses the confidence that they can access search data in practice, unlocking investment and innovation in new products and services for users."

Implementation timelines and what operators should prepare

Google has six months to comply with the fair ranking requirement and three months for data portability, according to the CMA.

The data portability deadline falls first. Businesses considering partnerships with third-party data platforms should begin assessing which providers are seeking authorisation to access Google's API, and whether their customer base would benefit from personalised services built on search data. The window is narrow; firms that move early will have more scope to shape the terms of those partnerships.

The fair ranking requirement carries a longer runway. In practical terms, businesses should expect Google to publish more detailed documentation of its ranking criteria within the compliance period. Marketing and SEO teams would be well placed to audit their current strategies against whatever criteria Google discloses. It is also worth establishing internal processes to monitor ranking changes and, where necessary, use the new complaints mechanism.

Key dates at a glance

  • September 2026 (approximately): deadline for Google to comply with the data portability conduct requirement.
  • December 2026 (approximately): deadline for Google to comply with the fair ranking conduct requirement.

The CMA has not yet specified penalties for non-compliance in this announcement, but the Digital Markets, Competition and Consumers Act 2024 grants the regulator powers to impose fines of up to 10% of global turnover for breaches of conduct requirements.

How this fits the CMA's broader digital markets agenda

The two new requirements are the second tranche of conduct requirements imposed on Google under the UK's digital markets regime. In early June 2026, the CMA issued separate conduct requirements giving publishers control over whether their content feeds Google's AI features. Further measures are expected over the summer, according to the regulator.

The pattern is clear: the CMA is building a layered regulatory framework around Google's search ecosystem, addressing distinct harms in sequence. The publisher-focused measures tackled content licensing and AI training data. The latest action targets the commercial relationship between Google and the businesses that rely on its platform for customer acquisition. Future measures may address adjacent markets such as advertising technology or local search.

For business leaders, the cumulative effect matters more than any single requirement. The regulatory direction suggests that the operating environment around Google search in the UK will become more structured and, in principle, more predictable over the next 12 to 18 months. Firms that treat these changes as a compliance exercise for Google alone may miss the broader shift: a market in which search visibility is governed by disclosed, enforceable rules rather than unilateral platform decisions.

That shift does not eliminate risk. Ranking algorithms will remain complex, and disclosed criteria may still leave significant room for interpretation. But the introduction of binding transparency obligations and a formal complaints process represents a material change in the balance of information between Google and the businesses that depend on it.