Publication date: 17 October 2026
The UK Competition and Markets Authority has proposed designating Microsoft with “strategic market status” in its business-software ecosystem. The designation is not yet final, but it could create a legal basis for targeted requirements governing how Microsoft bundles products, licenses software and allows rival services to integrate.
The CMA is consulting until 13 November and expects a final decision by February 2027. Its investigation covers five connected areas: PC operating systems, productivity suites, security software, server operating systems and relational databases. The regulator says Microsoft has a strong position across all five, reinforced by switching barriers, integration advantages and commercial practices that can encourage customers to adopt more of the same ecosystem.
The scale makes the inquiry significant. The CMA says Microsoft’s business products—including Windows, Word, Excel, Outlook, PowerPoint, Teams, security tools and the Copilot AI assistant—are used by more than one million UK businesses and public-sector organisations, with around 20 million monthly users.
AI raises the cost of ecosystem dependence
Software bundling is not new, but AI changes its strategic importance. A workplace assistant embedded in email, documents, meetings, identity systems and cloud storage can improve productivity because it has deep access to organisational context. The same integration can make an alternative AI service difficult to adopt if data, permissions and workflows do not transfer cleanly.
The CMA’s indicative roadmap therefore asks whether customers can choose the best AI tools, whether Copilot’s rivals have a level playing field, and whether Microsoft’s security and cloud-licensing practices limit choice. These are questions about market architecture rather than the quality of one product.
For customers, the attraction of a single stack is clear: simpler procurement, familiar administration and potentially tighter integration. Yet concentration can create operational and commercial dependence. A price change, service failure or security incident has wider consequences when identity, collaboration, endpoint protection, databases and AI all rely on the same provider.
Interoperability may become the practical remedy
Strategic market status does not itself prove wrongdoing or impose a predetermined remedy. It allows the regulator to develop proportionate conduct requirements after further evidence and consultation. The most constructive interventions would preserve useful integration while lowering artificial barriers to mixing services.
That could mean clearer licensing, better technical interfaces, data portability or rules preventing one product from receiving an unfair distribution advantage solely because it is bundled with another. Poorly designed requirements could weaken security or discourage product development, so the regulator will need to distinguish genuine technical dependencies from contractual restrictions.
Technology leaders should not wait for the final decision to assess their exposure. Organisations can map where Microsoft tools are technically essential, where alternatives are viable, how data can be exported and whether incident-recovery plans assume every component of the ecosystem remains available.
The inquiry marks a broader shift in competition policy. In the AI era, dominance is not only about the market share of a single application. It is about who controls the operating environment in which new intelligent services must connect, learn and compete.