Affiliate links on Android Authority may earn us a commission.Learn more.

Google’s contract with OEMs now says 2 years of Android updates mandatory

August 08, 2025

Last week,Google announcedit would completely revamp how it monetizes Android in the European Economic Area (EEA) due to new regulations associated with a$5 billion finethe company received for violating European antitrust laws.

Later in the week,The Vergeobtained a copy of one of the new contractsGoogleis issuing OEMs which release phones in that area of the world. Although the big news from that contract was just how much Google would be charging for Google apps (up to $40 for every unit sold), there apparently was some other information in the contract worth noting.

Android 9 Pie review settings menu

The contract provided toThe Vergehas new guidelines for how often — and for how long — smartphone manufacturers must provide Android security updates for their devices. According to the contract, OEMs must update devices at least once every 90 days and must do so for at least two years after a device launches.

To be clear, this contract only officially applies to the EEA, but it’s highly likely the global rules are similar or even stricter. We can assume this because Google announced a sweeping change to how the company mandates Android updates at Google I/O 2018.

According to the contract, the punishment for non-compliance with these new mandates — which take effect fully on June 23, 2025 — is the delay or even refusal of necessary Google certification of new Android-based devices. In effect, non-compliance could put an OEM out of the Android business.

This new contract stipulation combined with Google’s backing ofProject Treblesuggests the company is truly taking seriously the problem of Android OEMs all but abandoning their own hardware once it passes a certain age or if it fails to take hold with consumers. However, it’s yet to be seen just how much Google will be willing to police OEMs, even with this contract in place.

There is one stipulation to the contract which could let some OEMs off the hook: the contract states a device must sell more than 100,000 units to be part of the mandate. Granted, most major devices from large OEMs will sell 100,000 units easily, but smaller companies — likeEssential, for example — would still be able to stop issuing updates at any time without penalty. However, in the case of Essential, lack-of-updatescertainly isn’t a problem.

NEXT:Here’s a list of Android devices with security updates from the last 90 days (Ouch HTC)

Thank you for being part of our community. Read ourComment Policybefore posting.