Everything About AI
NextFin News - Britain's competition regulator has proposed designating Microsoft as having strategic market status in its business software ecosystem, a move that would hand the watchdog powers to rewrite how the company bundles, prices and integrates products used by more than a million UK businesses and public sector organisations.
The Competition and Markets Authority said on 16 October 2026 that it is consulting on the proposed designation, which covers everything from Word, Excel, Outlook, PowerPoint and Teams to the company's security, server and database products — and increasingly its Copilot AI tools. Around 20 million people in the UK use Microsoft business software every month, according to the CMA.
The proposal is not yet final. The regulator must gather evidence, hear from Microsoft and other stakeholders, and reach a decision by February 2027. But the direction of travel is clear: after accepting voluntary concessions from Microsoft and Amazon on cloud services earlier this year, the CMA is now reaching for the harder-edged tool in its rulebook.
The Situation: A Regulator Reaching for Its Sharpest Tool
The CMA opened its investigation in May 2026 under Part 1 of the Digital Markets, Competition and Consumers Act 2024. The DMCC Act came into force on 1 January 2025 and created a new regime for digital markets, enforced by the Digital Markets Unit inside the CMA. It is the most far-reaching rewrite of UK competition powers in a generation.
Under the regime, a firm can be designated with strategic market status if it holds substantial and entrenched market power and occupies a position of strategic significance. The statutory gateway is steep: the framework applies to firms with at least £25 billion in global revenue or £1 billion in UK revenue, a threshold Microsoft clears comfortably. Once designated, the CMA can impose tailored conduct requirements and pro-competitive interventions without passing any additional legal test, provided they are proportionate and serve the goals of fair dealing, open choices, or trust and transparency. Breaches can draw penalties of up to 10% of global turnover under the Act's penalty regime.
The Microsoft investigation is the fourth SMS probe opened since the regime began, following the CMA's designations of Google in general search on 10 October 2025 and of Apple and Google over their mobile platforms on 22 October 2025.
The CMA's findings informing the proposed designation are pointed. The watchdog says Microsoft holds a strong position across each of the five areas of digital activity it examined: personal computer operating systems, productivity software suites, security software, server operating systems and relational database management systems. That strength, the CMA argues, rests less on the quality of any single product than on the barriers customers face when trying to switch — barriers that limit choice and weaken the competitive pressure other developers can exert.
Commercial practices and integration advantages can incentivise customers to adopt Microsoft's products, creating additional barriers that other software developers cannot easily overcome.
Alongside the proposed decision, the regulator published an indicative roadmap of possible interventions if Microsoft is designated. The areas flagged include whether customers can freely choose the best AI tools and whether rival AI providers have a level playing field against Microsoft's Copilot; whether Microsoft's bundling and integration of security products limits customer choice; whether customers have effective choice over which cloud to deploy their software licences on, and how Microsoft's licensing practices affect that choice; and how Microsoft bundles its software more broadly, and whether developers can integrate their products with Microsoft's ecosystem on fair terms.
Sarah Cardell, chief executive of the CMA, framed the move as a defence of customer choice rather than an attack on Microsoft itself.
Business software and cloud services underpin workplaces across the UK, from small firms to vital public services. The evidence shows Microsoft has a long-standing and significant presence in the UK's business software market. Organisations should be able to choose the products that work best for them, switch provider when they want to and combine services from different suppliers.
She added: "We're now consulting on whether to designate Microsoft with strategic market status. If we do, our focus would be on promoting competition and giving businesses greater freedom to choose and combine products in business software."
Why the Software Layer, Not the Cloud?
The most revealing part of the CMA's announcement may be what it did not do. In March 2026, the regulator announced a package of actions on cloud services in which Microsoft and Amazon agreed to cut egress fees and improve interoperability between their platforms, including extending European Union Data Act standards to the UK. In a surprise move, the CMA opted not to launch full SMS investigations into either company's cloud infrastructure services, choosing instead what it calls a "participative dialogue."
That worked, at least partly. The CMA said in October that both companies have taken "material steps" and that "meaningful improvements have already been made." It has agreed with both to focus on improving identity and access management across clouds and to ensure that cloud architectures designed for portability can be deployed and migrated without unnecessary barriers. A further update is due in Spring 2027.
So why escalate on software? The answer points to a mechanism that is harder to fix with voluntary concessions. Cloud switching costs are largely financial and technical: egress fees can be cut, APIs can be opened, migration tools can be improved. Those are discrete, monitorable changes that a regulator can verify from the outside.
The business software ecosystem is different. Its lock-in is behavioural and organisational. A company does not just pay to leave Microsoft; it retrains staff, rewrites workflows, and re-architects years of documents, macros and integrations built around Office. The CMA's own customer research, conducted by Jigsaw Research and published in June, focused explicitly on purchasing decisions, available alternatives and the ability to switch. The implication is that the barrier is not a fee line on a contract but the accumulated weight of habit, training and interdependence inside the workplace.
That distinction matters for what comes next. Conduct requirements that work in cloud — publish a price, open an interface — may be insufficient where the friction lives in human routines and legacy integrations. If the CMA designates Microsoft, expect interventions aimed at data portability, file-format interoperability and the terms under which third-party security or AI tools plug into Teams and Microsoft 365.
There is also a market-structure reason the CMA may see software as the more urgent target. Its cloud services market investigation, which concluded in July 2025, found that Microsoft and Amazon Web Services each held a 30-40% share of the infrastructure-as-a-service market. With the two hyperscalers already checked — for now — the software layer is where the regulator sees the more entrenched and less contested power.
The AI Front Is the Real Battleground
The roadmap's first item is telling: assessing whether customers can freely choose the best AI tools and whether alternative AI providers have a level playing field to compete with Copilot. This is where the case stops being about Office and becomes about the next computing platform.
Microsoft has bundled Copilot into its enterprise suites and woven it into Word, Excel and Teams. That is precisely the kind of integration advantage the CMA flagged. When Cardell launched the investigation in May, she said an SMS designation "would enable us to tackle remaining concerns around Microsoft's licensing practices in cloud and would also enable us to ensure a level playing field as AI is rapidly embedded into everyday business software tools."
But the counter-argument is equally strong: in generative AI, Microsoft does not enjoy anything like its Office dominance. It competes with Google's Gemini, OpenAI's ChatGPT and a crowded field of specialist models.
The Information Technology and Innovation Foundation made this point in comments to the CMA in June 2026, arguing there was "very little grounds" for finding that business software markets embody substantial and entrenched market power. "With respect to Copilot, any power Microsoft has in this space is clearly not substantial," ITIF said, pointing to the range of competing AI assistants.
The CMA's challenge is to separate two questions that are often conflated: does Microsoft have entrenched power in the productivity suite that it can use to favour its own AI, or does the arrival of AI actually erode that suite's dominance? The answer determines whether intervention protects competition or freezes a market structure that AI is already reshaping.
What Microsoft Is Likely to Argue
Microsoft's playbook from the cloud episode offers a preview. In March, Brad Smith, the company's president, said the changes it agreed "address the CMA's commitment to ensuring that UK customers can continue to move, deploy, and operate their workloads in the clouds of their choice with confidence, flexibility, and ever reduced friction." The company also said it had "agreed to continued, structured engagement with the CMA."
Expect a similar posture on software: cooperation, existing customer choice, and the claim that the market is more competitive than the CMA assumes. Microsoft will point to Google Workspace, to open-source alternatives, to the fact that security and database markets have credible rivals, and to the risk that prescriptive rules slow the very AI innovation the UK says it wants.
There is also a sequencing argument. The cloud dialogue is still running, with an update due in Spring 2027 — after the February 2027 deadline for the software decision. Microsoft may argue that designating the software layer while the cloud track remains unresolved pre-empts a process that has already produced concessions.
Who Benefits, and Who Is Exposed
A designation would not be a cost borne only by Microsoft. Rivals stand to gain from any rules that force Microsoft to unbundle products or open integration points. Google, whose Workspace suite competes directly with Microsoft 365, is an obvious beneficiary of anything that lowers switching costs for enterprise customers. Specialist security vendors and independent AI developers would gain from mandated interoperability with Teams and Microsoft 365. Cloud rivals, too, would benefit from tighter rules on licence portability across Azure, AWS and smaller providers.
The exposed party, beyond Microsoft, is the UK's own pro-innovation narrative. The government has positioned Britain as an AI-friendly jurisdiction, and the CMA's roadmap explicitly says it wants interventions that support "innovation and growth." If the remedies are well-targeted at interoperability and portability, they can sharpen competition without stifling development. If they veer into prescribing product design, they risk handing European and US regulators a template for heavier-handed rules.
The Second-Order Question the Market Is Not Asking
The obvious first-order effect of an SMS designation is compliance cost and potential constraints on how Microsoft packages its products in the UK. The second-order effect is more interesting: the UK is becoming a de facto testing ground for global software regulation.
The DMCC regime gives the CMA powers that reach further into general-purpose business software than the European Union's Digital Markets Act, which is focused on designated "gatekeeper" platforms. If the CMA settles on interventions for bundling, AI integration and licence portability, those UK-specific requirements could become the template for other regulators — or force Microsoft to build a UK-specific variant of products that are otherwise sold globally. Either way, the compliance architecture built for London could end up shaping product roadmaps in Brussels, Washington and beyond.
For investors, the relevant question is not whether Microsoft can absorb UK compliance costs. It can. It is whether the UK's definition of strategic market status for software becomes the precedent other jurisdictions import. A designation confined to the UK is a rounding error. A designation that other regulators cite is a regime shift.
Outlook: Three Scenarios and What to Watch
The base case is that the CMA proceeds to designate Microsoft, probably in early 2027, and then opens a second consultation on specific conduct requirements drawn from the roadmap. The most likely interventions target AI integration and security bundling, where the competition concerns are sharpest and the remedies most tractable.
The upside case for Microsoft is that the consultation produces enough pushback — from the company, from customers who value integration, and from advocates who worry about over-regulation — that the CMA settles for a cloud-style negotiated package instead of formal designation. The March cloud episode shows this path is available.
The downside case is a designation followed by prescriptive rules that force meaningful changes to how Microsoft bundles Copilot, Teams and its security stack in the UK, with the threat of penalties of up to 10% of global turnover giving the requirements real teeth.
What to watch: the consultation response by 13 November 2026, particularly from large enterprise customers and rival software vendors; the CMA's cloud services update in Spring 2027, which will show whether the voluntary route is still working; any movement in Microsoft's licensing terms for non-Azure clouds ahead of the February 2027 decision; and whether the European Commission or US regulators echo the CMA's framing of AI integration in productivity software.
For Microsoft shareholders, the stock's reaction so far has been muted. Shares closed at $543.45 on 13 October 2026, the last full session before the announcement, in a market that has treated regulatory headlines as a recurring cost of doing business rather than an existential threat. With a market capitalisation above $4 trillion and analyst price targets compiled by market-data services clustering between $570 and $725, the company has ample capacity to litigate, negotiate or comply.
The deeper lesson is about the regulator, not the company. The CMA spent its first year under the DMCC Act testing whether persuasion could substitute for designation. The Microsoft software proposal suggests it has concluded that persuasion has its limits — and that the next phase of UK digital regulation will be enforced, not requested.
The CMA's cloud experiment proved that Microsoft will concede when asked politely; the software case will test whether the regulator now believes politeness was the point, or merely the warm-up.
Explore more exclusive insights at nextfin.ai.
