5.1 Introduction
The most important feature of platformization is scale. A platform can only provide value to users if it grows to a significant size.Footnote 1 When a digital platform reaches a certain scale, it gains access to more and more of its users’ data. Of course, this feature is not even remotely novel, because larger factories have always been more efficient than smaller ones, even in the “old economy.” However, datafication forces this economic logic to the extreme.Footnote 2 In this regard, companies in smaller countries are often disadvantaged vis-à-vis companies in larger countries, simply because of the constraints of smaller markets in terms of efficiencies of scale and volume of data.Footnote 3 The leading platforms – including Google, Facebook, Amazon, Baidu, and Alibaba – were launched in the US or China, where they could operate and reach the necessary scale in a large domestic market before they went global.Footnote 4
More importantly, big tech companies have the ability to commoditize our data, which is the key ingredient of many digital services, including AI.Footnote 5 Many commentators have rightly pointed out that data is the single-largest lasting asset of these globally dominant companies.Footnote 6 Indeed, data is now becoming a form of capital.Footnote 7 The ability to collect, use, and apply data is a competitive parameter whose relevance is quickly increasing.Footnote 8 The data held by these leading platforms is particularly valuable due to the scale and scope of user data collected, which further provides these big players with strong competitive advantages, allowing them to dominate in the relevant market, create entrance barriers to potential competitors, attract more and more users, build richer and richer data sets, and reinforce their market power.Footnote 9 In short, control over data may effectively act as a market entry barrier.Footnote 10 Big platforms’ control over our data strengthens their market position and makes it easier for them to enter new markets. In the case of Meta, as an example, access to data not only enables Facebook to tailor services, but also to use data to benefit other business lines, such as Messenger, WhatsApp, and Instagram.Footnote 11
The reality of this battle is clear: Big platforms’ business practices interlock a combination of forces to dominate the data market – presenting a new form of modern monopoly.Footnote 12 To some extent, the emerging phenomenon of leading platforms that appropriate and extract data for profit can be conceptualized as “data colonialism.”Footnote 13 Overwhelming “economies of scope” empower these large incumbent platforms, giving them a strong competitive advantage.Footnote 14 Platformized transactions further enable the expansion of data capitalism, which works both domestically on a home country’s populations, and also on a global scale. In this twenty-first century version of colonialism, big tech companies benefit from colonization all over the world. From this aspect, the North–South divide does not seem to matter as much as it usually does.Footnote 15 The US and East Asia account for 90 percent of the market for large-scale digital platforms, whereas Africa and Latin America’s combined share comprises only 1 percent of the market.Footnote 16 These uneven, if not one-way, transnational data flows indicate that “data” – the input for AI and other technologies – has largely originated abroad for the benefit of big tech’s data analysis.Footnote 17 Given the inordinate concentration of digital technologies in developed economies and a few Asian countries, most developing countries are becoming “net data exporters” that consistently supply valuable data without fairly benefiting from the digital economy.Footnote 18
Against this backdrop,Footnote 19 this chapter explores two notable features of the platform economy: First, data has become capital. At the crux of the matter are questions regarding how to “decolonize” data, how public policy should evolve to promote competition in the digital market, and how data capitalism as a whole should be confronted.Footnote 20 More importantly, what role can international law assume in promoting competition in the digital market? Second, data has become input or feeds for platforms’ algorithmic recommendations, which are at the heart of the datafied economy’s business models. Problems arising from this phenomenon are potential unfair competition and the lack of algorithmic transparency and accountability. Big tech’s datafication-enabled advertising, or, more generally, its overall business model, calls for deep thinking about how to appropriately regulate associated datafication practices. Recognizing that our behavioral data has increasingly become a commodity, the surveillance power of the digital platforms, left without proper constraints, will deepen the negative effect of datafication. What are the necessary steps toward holding digital platforms accountable due to their crucial roles in this datafied society? Are existing regulatory tools sufficient to provide domestic regulators with the information they need to ensure the adequate transparency of algorithmic systems in order to supervise how digital platforms moderate, rank, and recommend content to their users?Footnote 21 In particular, what is the interplay between international trade agreements and national algorithmic transparency requirements? These are the key issues this chapter seeks to address.
5.2 Trade and Competition Policy for a Platform Economy
5.2.1 When Winners Act Globally and Take All
Much like the persistently unequal distributions in the broadband networks, the upper layer of the Internet architecture – the platforms – is now facing threats posed by data capitalism. The digital economy is gradually being shaped by increases in market concentration on a global scale, the proliferation of anti-competitive practices by digital platforms, and the abuse of dominant market positions by platform monopolies.Footnote 22 Taken as a whole, “winner takes all” is a predictable phenomenon of the digital economy,Footnote 23 in which big tech companies do not “compete in the market,” but, rather, “compete for the market” to displace each other.Footnote 24 In this context, competition policy must be tailor-made in order to ensure its effectiveness vis-à-vis dominant digital players, thereby safeguarding competition in the markets.Footnote 25
In fact, big tech firms have increasingly been investigated for abuse of dominance and anti-competitive behavior all over the world, which offers plenty of food for thought about data capitalism. Many are in the midst of investigations by competition authorities, some are facing the scrutiny of the administrative courts, and several cases have been concluded.Footnote 26 For example, in its Apple Dating app case,Footnote 27 the Netherlands Authority for Consumers and Markets (ACM) found that Apple abused its dominant market position by imposing unreasonable terms and conditions on the services suppliers of the dating app in the App Store. In the view of the ACM, Apple enjoys a dominant position in the relevant market of the mobile operating system for dating app providers. “Having a dominant position is not illegal in and of itself. Abusing one, however, is,” explained the ACM.Footnote 28 Due to the fact that Apple restricts dating app providers’ freedom of choice, including banning them from referring within their own dating apps to alternative payment systems outside the app, the ACM came to the conclusion that Apple violated the Dutch Competition Act.Footnote 29 Similarly, in the Google Shopping case,Footnote 30 the European Commission concluded that Google, by favoring its own comparison shopping service, had abused its dominant position in the relevant market for online general search services. According to the commission’s decision,Footnote 31 Google breached the EU competition rules because it had “systematically given prominent placement to its own comparison shopping service.”Footnote 32 Google appealed this decision, and the European General Court upheld the Commission’s decision,Footnote 33 finding that Google’s self-preferential practices constitute an abuse of dominance and have potential anticompetitive effects.Footnote 34
Overall, these cases have led to emerging regulatory efforts with regard to digital platforms. In particular, these decisions underscore the difficulties in correcting ex-post negative effects on competition and the need to have ex-ante regulations in place to constrain big tech’s behaviors and require platform transparency. The trend of rising inequality between those who provide the data and those who control the use of such data challenges our existing legal approaches to the problem of anticompetition. There is an urgent need to revisit the fundamental goals of competition law in the light of digital trade.Footnote 35
5.2.2 Emerging Competition Law for Data Markets
5.2.2.1 Big Tech and Competition Policy
Today, competition authorities all over the world are considering the benefits associated with digital platform obligations.Footnote 36 One potential mechanism, among others, is to require leading digital platforms to share data with other services operated by their potential rivals, which may “enhance data access, resolve data bottlenecks, and contribute to a fuller realization of the innovative potential inherent in data.”Footnote 37 In any event, all of the approaches require greater cross-border collaboration. Big tech companies act globally, and dominant platforms are global in scope. The impact of their market power can be more meaningfully addressed through competition rules at the international level.Footnote 38 Compared with national regulations, competition disciplines at the international level would be more effective in defining the relevant (global) market, identifying the abusive market power (globally), addressing (cross-border) collusive practices and digital cartels, and reviewing mergers of (global) platforms. After all, the leading platforms operate on a global scale, and as such, efforts at the international level would be more commensurate with the scale of impact of digital platforms.Footnote 39
In practice, the competition assessment will necessarily depend on the extent and type of data to be shared, the precise form of the data-sharing arrangement, the degree of transparency requirements, and the definition of the relevant market.Footnote 40 However, the gap in competition policies and enforcement among jurisdictions will likely leave any competition authority ill-equipped to effectively address the anticompetitive practices of the big tech companies, simply because data flows do not stop at borders.Footnote 41 In short, more and more countries are now focusing their regulatory attention on big tech. Recent regulatory progress toward defining “dominant platforms” and establishing ground rules to promote competition reflect a growing understanding that the platform economy requires tailored intervention. The dynamics of global data flows, however, make it legally challenging to enforce data competition policies without global regulatory harmonization. The lack of consistency among national competition laws demonstrates the need for a more consistent, streamlined system among competition regimes – either through greater international collaboration or the creation of additional cross-border disciplines for competition policy.
A number of new regulations and regulatory recommendations have been floated at both the national and the regional level. Among these, the Organization for Economic Co-operation and Development (OECD) policy papers point to the high concentration of data-driven markets, express caution regarding the absorption of new entrants through acquisitions by dominant incumbents, and call for competition rules that seek to promote the efficient use and exchange of data.Footnote 42 The European Parliament, in addition to the adoption of the two landmark pieces of legislation on digital platforms – the DSA and the Digital Markets Act (DMA) – has also passed or proposed regulations including the Data Act, the Data Governance Act, and the Artificial Intelligence Act, which seek to provide an overall framework for data governance.Footnote 43 At the same time, examples in the Asia Pacific region include Australia’s News Media and Digital Platforms Mandatory Bargaining Code, which was developed by the Australian Competition and Consumer Commission (ACCC) to address “bargaining power imbalances between the digital platforms and Australian news media.”Footnote 44 Moreover, the ACCC has already conducted public consultations on policies that would provide for greater regulatory oversight of digital platforms with strong market positions, such as Google and Facebook.Footnote 45
5.2.2.2 EU as Global Norm-Setter?
While various regulatory initiatives are still subject to policy debates, and certainly there are divergent views on how competition law should be restored to account for specific concerns brought about by datafication and data capitalism, the legal approaches share common elements:
Relevant Markets and Market Power: All of the proposals address the need to clarify what constitutes the “relevant market” of a digital platform. To summarize, identifying relevant markets inside the ecosystem of “data” can prove particularly challenging, because big tech companies always assume multiple roles.Footnote 46 Competition authorities must identify a multi-side market and consider relevant data flows in the market.Footnote 47
Dominant Position and Anti-Competitive Practices: A closely related issue is market power assessment in the context of data access and data control, which requires, among other things, specific criteria to assess the impact of a dominant market position. It is a generally shared view among competition authorities that when data is overly concentrated in the hands of big tech companies, it may provide these firms with a substantial competitive advantage against new entrants.Footnote 48 The misuse of data to maintain market power should be considered an anticompetitive practice that requires governmental intervention.Footnote 49 Most policy papers attempt to identify the types of anticompetitive conduct that are enabled through the control of data, including collusive practices and digital cartels.Footnote 50 As emphasized in several policy papers, the incentive for digital platforms to use data to collude with each other is enormous.Footnote 51 As a result, the need for competition authorities to adapt tools to address digital cartels is overwhelmingly strong.
Mergers and Acquisitions: Another closely linked dimension is “data-driven mergers and acquisitions.”Footnote 52 As evidenced by the Facebook/WhatsApp merger,Footnote 53 it is not uncommon for digital platforms to acquire other digital companies and start-ups, which increases the risk of monopolization of data.Footnote 54 Policymakers increasingly understand the need to examine the impact of mergers on data, the overall competitive implications of mergers and acquisitions involving digital platforms, and the new threshold for merger control in competition law.Footnote 55
Against this backdrop, the EU’s DMA sets a high global benchmark for regulating digital platforms.Footnote 56 Overall, the DMA addresses digital market “imbalances” in the EU, imposes tailored asymmetric ex-ante rules on “gatekeeper platforms,”Footnote 57 provides a legal mechanism based on market investigations, and establishes harmonized rules prohibiting certain unfair practices among gatekeeper platforms.Footnote 58 In particular, the DMA establishes a set of defined criteria for qualifying a large digital platform as a “gatekeeper,”Footnote 59 with the underlying principle that digital platforms with a certain degree of market power should be subject to more stringent obligations than smaller players.Footnote 60 In September 2023, the EC has designated six gatekeepers: Alphabet, Amazon, Apple, ByteDance, Meta and Microsoft.Footnote 61 Within six months of being designated gatekeepers, digital platforms are obliged to comply with a number of “special obligations.” More specifically, the DMA imposes obligations and prohibitions to limit gatekeepers’ abilities to process and use personal data,Footnote 62 to negotiate certain conditions with business users,Footnote 63 and to restrict end users from switching between digital applications.Footnote 64 Note that the European Commission, based on market investigations, has the discretion to “update” obligations for gatekeepers to ensure the obligations are “up to date.”Footnote 65
Such an ambitious agenda reveals the EU’s aim to be a global norm-setter in digital markets.Footnote 66 Expectedly, the DMA will assert significant regulatory control over digital platforms, both within Europe and beyond. The rules will bind global platforms, rendering them de facto global standards – more commonly known as the “Brussels Effect.” As for big tech, the stakes are particularly high, because the EU is one of the world’s largest consumer markets. They must accept the EU’s “terms of business” as the price of admission. To conclude, driven by economic and strategic rationales, the EU has been leveraging its economic muscle and vying for a leadership role in shaping the global rulebook governing digital platforms. The EU’s intensified efforts to set international standards for the digital economy could be part of the solution tool kit to curb data capitalism.
5.2.3 Calling for a WTO “Data Reference Paper?”
5.2.3.1 Trade and Competition
At the multilateral level, competition was one of the so-called new issues under the WTO framework two decades ago, at which time members attempted to address how domestic and international competition policies interact with international trade.Footnote 67 To a certain extent, international economic law and competition policy are grounded in complementary principles.Footnote 68 While the former emphasizes free trade and prohibits discrimination between trading partners, the latter aims to preserve the freedom of business activities and control the anticompetitive conduct of private enterprises.Footnote 69 Much discussion has been carried out in relevant legal literature regarding the importance of competition policy to trade liberalization, which generally describes how international cartels affect international trade, how transnational abuses of a dominant position constitute trade barriers to goods or services,Footnote 70 and how anticompetitive vertical market concentrations exclude foreign suppliers from a market.Footnote 71 Indeed, the rationales underlying both trade and competition are arguably closely related. Nonetheless, to date no significant consensus on the convergence of the two areas has emerged.Footnote 72
To illustrate, historically, the interaction between trade and competition policy has been an important element of both multilateral and regional trade negotiations.Footnote 73 The issue of competition policy, however, was dropped from the Doha Round of the WTO trade negotiations.Footnote 74 In brief, negotiating efforts to create a general agreement on competition policy under the WTO have been unsuccessful, and the Working Group on the Interaction between Trade and Competition Policy has been inactive since 2004.Footnote 75 At the same time, competition policy has been addressed in FTAs,Footnote 76 with an evident trend toward a dedicated chapter in recent years,Footnote 77 which to a certain degree implies a growing perceived need for common competition disciplines among countries.Footnote 78 Given such a trend,Footnote 79 the interface between international trade and competition policy is now primarily manifested by the incorporation of “basic competition principles” in the FTAs.Footnote 80 Most specifically use the terms “anti-competitive agreements” and “abuses of market power,”Footnote 81 while few mention “anti-competitive mergers,” “merger control,” and “merger review.”Footnote 82 It should also be noted that approximately half of the FTAs contain competition provisions pertaining to cooperation and technical assistance.Footnote 83
Notwithstanding those “WTO-plus” obligations at the regional level, key problems remain. “General competition policies,” which prohibit or require broad categories of business behaviors defined in rather general terms, are not sufficient to address digital cartels and data monopolization. The digital sector needs specifically tailored regulatory disciplines. How can international economic law help to ensure that additional pro-competitive regulations are put into place? The real question is this: How can we restore the relevance of international economic law in the digital economy? Could such a restoration be launched with the modernization of the WTO Telecommunications Reference Paper for the data-driven economy?
5.2.3.2 Telecom Reference Paper as a Model
While WTO members have to date failed to agree on competition rules, in the context of the post-Uruguay Round WTO negotiations on Basic Telecommunications Services, most WTO members have committed to the regulatory principles spelled out in the Telecom Reference Paper under the GATS,Footnote 84 which sets out specific obligations for competition.Footnote 85 In the absence of general competition rules under the WTO regime, the Telecom Reference Paper serves as a sector-specific competition agreement, through which anticompetitive practices can be challenged using the WTO dispute settlement system.Footnote 86
The Telecom Reference Paper requires members to adopt and maintain competitive safeguarding rules to prevent abusive restrictions on bottleneck facilities, which may result in a de facto limitation on market access to basic telecommunications services.Footnote 87 It also prohibits discriminatory competition conditions within the markets and prevents anticompetitive practices among dominant suppliers.Footnote 88 Key provisions include the following:
Relevant Market and Dominant Supplier: The Telecom Reference Paper defines “major supplier” as a supplier that has the ability to materially affect the terms of participation surrounding price and supply in the relevant market for basic telecommunications services as a result of: (a) control over essential facilities; or (b) use of its position in the market.Footnote 89
Anticompetitive Practices: The Telecom Reference Paper imposes obligations on WTO members to maintain measures for the purpose of preventing suppliers – which alone or together are major suppliers – from engaging in or continuing anticompetitive practices.Footnote 90
Interconnection Arrangement and Transparency: There is a clear stipulation that interconnection with a major supplier should be provided under nondiscriminatory terms, conditions, and rates, and should be of a quality no less favorable than that provided for its own like services or its subsidiaries.Footnote 91
In brief, the Telecom Reference Paper requires WTO members to ensure that dominant companies do not abuse their market position. As discussed in Chapter 1 of this book, the case of Mexico – Telecom represents a concrete application of competition policy within the framework of the Telecom Reference Paper.Footnote 92 In this case, the US claimed that the interconnection rates negotiated by Telmex, the incumbent supplier in Mexico, were not cost-oriented. The panel found that Mexico had failed to fulfill its commitments under Section 2.2(b) of the Telecom Reference Paper, in that it did not ensure a major local supplier to provide interconnection at cost-oriented rates to other members’ suppliers for the cross-border supply of telecommunications services.Footnote 93 The panel also found that Mexico had not met its GATS commitments under Section 1 of the Telecom Reference Paper to maintain “appropriate measures” to prevent anticompetitive practices.Footnote 94
By pointing to the model in the Telecom Reference Paper, this book raises the following questions: To what extent is a set of sector-specific competition disciplines for the data industry possible? Further, what should comprise the “Data Reference Paper?” Turning back to the common elements of the regulatory recommendations by the OECD, the EU, and the Australian competition authority, the proposed Data Reference Paper should be a binding set of commitments, perhaps the lowest common denominator, which would serve to guide WTO members to better regulate data, to discipline dominant players, and to thereby help smaller tech companies enter these markets. Much like the regulatory disciplines for the telecommunications market, the concept of “essential facilities” might be applied to big tech companies to prevent the abuse of market dominance by platforms. Similarly, based on the model of the Telecom Reference Paper, a Data Reference Paper would impose obligations on WTO members to maintain measures for the purpose of preventing dominant services suppliers from engaging in or continuing anticompetitive practices. Appropriate mechanisms to prevent collusive practices and review mergers should also be put into place. In addition, a similar focus on pro-competitive effects could include the principles of nondiscrimination and transparency, which would prohibit big platforms from engaging in self-preferential practices that favor their own services.Footnote 95
By imposing cross-border disciplines for competition policy and thus curbing the power of big digital platforms, the proposed Data Reference Paper may well be an effective instrument to address data colonization, which, as discussed in Chapter 3, is an unforeseen phenomenon that interacts with GATS digital trade market access. Moreover, if a set of international competition rules that frame competition concerns in a policy context can be established, there would be less need for ex-post enforcement of competition law by competition authorities in developing countries and LDCs, which have relatively limited resources to tackle issues pertaining to digital cartels and data monopolization.Footnote 96 To conclude, the increasing inequality in datafication, and in particular the dissymmetric power between those who are the sources of the data and those who accumulate the data, calls for a set of WTO data-specific competition rules to appropriately address market power in the data sector. There is a renewed need for a WTO Reference Paper 2.0, which migrates the competition disciplines from the context of the telecommunications industry to that of the data industry.
5.2.3.3 The Inherent Complexity: Sufficient Momentum Needed
Will the need for international competition disciplines for the data sector find an outlet along the path of international economic law, as it did in the telecommunications sector two decades ago? Serious challenges lie ahead. The idea of creating a WTO “Data Reference Paper” may prove difficult in gaining sufficient negotiating momentum to bring it to fruition, primarily because of two structural problems. The first main obstacle is the highly complex, legally technical nature of regulating the digital market. To the extent that the regulatory principles spelled out in the Telecom Reference Paper can inform the development of the data regulatory framework, some adaptations are needed due to the specific characteristics of the data market. As pointed out by the Ofcom, the UK’s communications regulator, the regulatory principles of telecommunications services cannot simply be “read-across” and “applied as they exist” to digital services.Footnote 97 There are significant similarities between the telecommunications and digital markets. Nevertheless, substantial differences remain.
More specifically, in terms of assessing the “relevant market,” far more factors must be taken into consideration when defining the relevant market for digital platforms. All of the “big tech” firms are characterized as multi-sided, which renders the scope of the relevant market even more difficult to define. What constitutes the relevant market of a digital platform inside the big data ecosystem, when various players are involved and have assumed multiple roles? For example, Apple – as a digital platform through the Apple Store and iTunes – also plays an important role in cloud computing services using the iCloud. At the same time, Apple closely interacts with other key social media businesses, including Facebook and LinkedIn. Should each side of the above be defined as a separate market?Footnote 98 The multi-sided platform structure poses new difficulties for competition regulations.
Moreover, in terms of assessing abuses of market power, determining “market power” is less straightforward in digital markets. In the case of telecommunications services, dominant market position and significant power are closely related to natural monopolies in physical infrastructure, that is, network facilities. Digital services, however, are not necessarily natural monopolies, because their market powers are primarily derived from their access to large datasets created from their users.Footnote 99 In practice, market shares in telecommunications markets (i.e., the 25 percent threshold) typically provide useful indications of market importance.Footnote 100 In most jurisdictions, a telecom operator is presumed to have significant market power when it holds more than a 25 percent share of a market in a particular geographical area.Footnote 101 On the other hand, the possession of data can be used as a barrier to entry, thus becoming the primary source of market power in digital services. The relationship between “market share” and “control over data,” however, would prove difficult for competition authorities to investigate.Footnote 102 In this regard, the “qualitative criteria” set out by the DMA have been criticized as “arbitrary thresholds”Footnote 103 that lack “methodological considerations.”Footnote 104 It is particularly problematic that the designation of gatekeepers is based on the presumption that the “qualitative criteria”Footnote 105 will be met by a firm if it meets the “quantitative criteria.”Footnote 106 In summary, traditional measuring tools, such as market shares, must be adapted in a digital platform context. All of this highly technical complexity will lead to endless technical discussions and will become an obstacle toward the goal of creating a set of international competition principles for digital services.
Another equally or even more important consideration that may impede the creation of such international disciplines is the inherent complexity of the political economy surrounding digital capitalism. Looking back at its history, the telecommunications industry began to rapidly develop in the late 1990s. As a result, the political momentum toward telecommunications liberalization rendered market access and regulatory discipline under WTO negotiations possible. In other words, adoption of the Telecom Reference Paper was seen by “key” delegations – notably, the US, the EU, Canada, Australia, and Japan – as necessary,Footnote 107 given the risk that competition in foreign countries’ infrastructure markets may be restricted by incumbent operators’ abuses of market power. To illustrate, the telecommunications market, especially decades ago, has exhibited specific features that enable incumbents to maintain a certain degree of market power over the competition.Footnote 108 Major incumbent suppliers have strong incentives and ample opportunities to delay the provision of interconnection to new entrants, and such delays can significantly inhibit competition.Footnote 109 The incumbents could also, for example, impose anticompetitive interconnection conditions on their competitors.Footnote 110 National measures might be needed to prevent incumbent operators from using their market power to distort competition. From the perspective of international trade, market access commitments alone cannot guarantee that a market will become truly liberalized. To be able to effectively compete, telecommunications companies of developed countries must be ensured a level playing field in foreign markets.
However, such political economy momentum, which led to the conclusion of the Telecom Reference Paper, cannot be found in the context of digital services. Unlike the negotiation background of the telecommunications services industry, the economic interests (as well as the regulatory approaches) of the data services industry are quite divergent among key players. Generally speaking, US digital platforms have been persistently dominant in the world, including the European market. At the same time, China – by establishing its own self-sufficient platform economy through Chinese digital giants Baidu, Alibaba, and TencentFootnote 111 – has largely escaped US domination. Nonetheless, three different models for data governance are emerging: The US generally favors an ex-post approach, which broadly seeks punitive action for past infractions. Such an innovation-friendly approach is primarily driven by the concept of self-regulation.Footnote 112 The EU model, as discussed above, is holding the normative high ground. The ex-ante regulations would result in sweeping supervisory actions that impact Silicon Valley’s future. China’s main concern, however, is to ensure its political stability and security. It is conceivable that China will continue to rely on domestic protectionist regulations to restrict cross-border data flows.Footnote 113 When these three models interface in an international organization, it is less likely to result in a compromise given the associated concerns.Footnote 114
5.2.3.4 Digital Trade and Competition Disciplines
How can international economic law contribute to overcoming these impediments? The first direction is the soft law mechanism, which leaves sufficient space for national regulators. Here again, the FTAs provide some inspiration. Although to date none of the Digital Trade/E-Commerce Chapters of the FTAs have incorporated competition rules for the data market, the lesson we have learned from their general approaches pertains to the soft legal nature of key provisions.Footnote 115 The USMCA parties, for example, merely “recognize the importance” and “endeavor to” comply with certain rules under the Digital Trade Chapter.Footnote 116 It might therefore be criticized as a weak instrument. Nevertheless, it can always be argued that without such vague provisions, the Digital Trade Chapter would never have been finalized by the parties. In future trade negotiations on data governance, the “softness” of a treaty requires that substantive rules remain somewhat general. For example, it might be necessary to leave key concepts such as “anticompetitive practices” undefined to allow for policy alternatives. The lack of specificity in the treaty language would allow parties to cater to differences in local needs and maximize the likelihood that the rules will be effectively implemented by regulators. Given the variations that exist in the digital markets of different countries, the strategic use of hard and soft law is of practical significance in introducing a set of data rules into the WTO regime.
The second approach concerns flexible negotiating modality, which helps to reach a critical mass of trade negotiation results. Against this contentious political and economic backdrop, the probability of reaching a consensus under the “single-undertaking” system seems slight.Footnote 117 Balancing the interests of 164 WTO members across diverse issues surrounding data governance has made it difficult, if not impossible, to conclude negotiations that “bind all WTO Members equally.” In this regard, negotiating on the basis of a critical mass approach, which involves arrangements between a number of parties that do not represent the entire membership but account for a very high proportion of international trade in data services, seems to be a more realistic direction. In this context, despite strong opposition from several members,Footnote 118 the ongoing JSI on E-commerce offers a pathway for the WTO to remain responsive and relevant in the digital economy.Footnote 119
5.3 Trade Rules and Algorithmic Transparency
5.3.1 Algorithms and Platform Competition
A closely related but distinct aspect is algorithmic transparency, which can serve as a regulatory starting point for global platform governance. In this data-driven world, one important legal tool to promote platform competition is to ensure that algorithms are fair and transparent.Footnote 120 As illustrated above, platform capitalism would not ever have existed without big data analytics algorithms. In summary, the market dominance of big tech can be simplified in the following pattern. By taking advantage of their vast user base, big tech companies provide datafication-enabled advertising services to businesses, which in turn bring big tech advertising revenues. Big tech companies then invest more in their data analytics tools to enhance the accuracy of target advertising, which allows big tech to attract more users and collect more data. The more data that is collected, the more the algorithms can learn.Footnote 121 Under this pattern, with more and more data amassed, big tech companies are able to attract even more advertisers. The cycle continues.
To put it another way, each time we Google a product and then click on the sponsored ads, Yahoo not only loses a search query to Google, but also loses our behavioral data, which represents an opportunity for its algorithms to learn, as well as potential advertising revenues. This results in a gap between Google and Yahoo in their ability to train their AI, to personalize search results, and to enhance the accuracy of targeted advertising. The more people Google, the wider such gaps grow.Footnote 122 In this context, concerns have been raised in relation to the abusive use of algorithms. After all, it may amount to the unfair treatment of competitors if algorithms are programed – wittingly or unwittingly – to prioritize a platform’s own services over those of competitors.
Accordingly, increasing consideration is being given to why an algorithm of a search engine makes certain recommendations, as well as how a consumer can achieve different search results or access different ranking systems. In addition, turning back to the social media moderation practices discussed in Chapter 4, AI plays a material role in content moderation, including some context-specific content such as hate speech. When our behavioral data becomes algorithmic input, it is important to empower consumers to understand how a social media algorithm makes content moderation decisions, whether it is appropriate to use that content-moderating algorithm, and how consumers can receive objective algorithmic decisions.
More and more governments and civil societies are addressing commensurate algorithmic practices and calling for algorithmic transparency. They express caution over the unfair outcomes due to the lack of algorithmic transparency and advocate for algorithmic accountability, primarily to require platforms to disclose how their algorithms generate certain outputs.Footnote 123 In this regard, disclosing the algorithms or the source code that drives a platform’s system may reveal whether the platform values one type of content over another. Alternatively, a lower degree of transparency that informs users of the main parameters that determine ranking, using plain language, may also be useful for the public in understanding how search engines work. Conversely, as discussed in greater detail below, some experts have pointed out that such transparency requirements may prove neither meaningful nor feasible due to the protection of trade secrets and the nature of machine learning.Footnote 124 The design of algorithmic systems is the product of substantial investment and may easily be duplicated by competitors if disclosed.
At this moment, regulators all over the world are contemplating various forms of regulation that will improve platform accountability, AI ethics, and algorithmic transparency and explainability for automated decision-making.Footnote 125 Algorithms can be governed by various regulatory choices, including who and what will be regulated, to whom information will be disclosed, and how disclosure will occur.Footnote 126 In the context of international economic law, the interplay between AI regulation and international trade agreements centers on questions relating to how to ensure that algorithmic accountability is appropriately distributed, as well as how to safeguard public access and oversight over algorithms. More profoundly, how can we balance competing interests in particular trade secrets and prevent AI regulations from being overly trade restrictive?
5.3.2 Platform Transparency Requirements
To answer the above questions, five “representative” digital/data regulations – including the DSA, the DMA, the GDPR, the Montréal Declaration for a Responsible Development of Artificial Intelligence (Montréal AI Declaration),Footnote 127 and the US bill on the Algorithmic Justice and Online Platform Transparency Act (Algorithmic Justice Act)Footnote 128 – are selected for an in-depth investigation. Transparency requirements in the five digital/data regulations, including both hard law and soft law, are reviewed to reveal the variables and their relationships. To clarify, this approach provides examples and is not meant to be comprehensive, as there are plenty of AI-related regulations or draft bills floating around,Footnote 129 but it aims to serve as an illustration to better understand the key dimensions of platform transparency requirements in a comparative context.
5.3.2.1 Who: The Scope of the Regulatory Targets
As noted in Chapter 4, obligations under the DSA are cumulative depending on the function and size of a services supplier. The larger a services supplier is, and the more extensive the services it provides, the greater the number of obligations that apply. In terms of transparency, the DSA imposes a baseline transparency requirement, which applies to all intermediary services suppliers, and it then adds obligations for hosting services and online platforms, and then once again adds a further set of transparency obligations for VLOPs. In other words, VLOPS must comply with all of the transparency requirements imposed by the DSA, including transparency reporting,Footnote 130 transparency of recommender systems, transparency of online advertising,Footnote 131 and data sharing with authorities and researchers.Footnote 132
Similarly, as stressed in the DMA’s preamble, in most cases, gatekeepers provide online advertising services to business users in a nontransparent manner, which results in higher costs for online advertising services. To address this problem, it is important to ensure that the platform environment, and in particular, the conditions that apply to advertising services and rankings, is generally fair, transparent, and contestable. Therefore, the transparency obligations primarily fall to the gatekeepers.Footnote 133
Unlike the asymmetric regulatory models of the DSA and the DMA, the scope of the regulatory targets of the GDPR, the Algorithmic Justice Act, and the Montréal AI Declaration is broader and more general. This is because concerns surrounding the lack of platform transparency extend to all kinds of platforms, regardless of their size.Footnote 134 In this regard, under the GDPR, provisions on platform transparency and accountability apply to all data controllers and processors, as defined in Article 4.Footnote 135 Likewise, the principles in the Montréal AI Declaration are general and abstract and aim to apply to the digital and artificial intelligence field in a broad sense.Footnote 136 As broad as it may sound, however, the nonbinding nature of the declaration means that implementation is on a voluntary basis. Finally, the Algorithmic Justice Act imposes transparency obligations on an “online platform,” which is defined as “any public-facing website, online service, online application, or mobile application which is operated for commercial purposes and provides a community forum for user generated content”Footnote 137 – a rather broad net.
5.3.2.2 What and to Whom: The Degree of Transparency
The five regulations vary in terms of what type of information should be transparent, ranging from algorithm-based advertising, algorithmic content moderation, algorithmic reporting, factors and parameters shaping algorithmic decisions, auditable records of the algorithmic process, and source code. Indeed, the degree of disclosure is controversial, and the policy options involve trade-offs. Unfettered government access to source code and algorithms may help to ensure that algorithms are fair but may also lead to unnecessary intrusion into privacy and trade secrets.Footnote 138 Taken to the extreme, platforms may be required to disclose source code.Footnote 139 However, would it be more proportionate to require them to make their algorithms transparent? Or is it more reasonable for platforms to merely publish the general factors and logic involved in algorithmic decisions? These questions must be analyzed in conjunction with the question of who receives transparency. As discussed below, the question of “disclosure to whom” dictates “what to disclose.”
▪ Authorities and Experts
As shown in Figure 5.1, platforms’ disclosure obligations to regulatory bodies generally rank high on the scale when measuring transparency. To illustrate, transparency can be restricted to governmental authorities. The rationale is that authorities need to use these records to verify compliance with regulatory requirements. On this matter, the GDPR focuses on supervisory authorities’ investigative powers to obtain access to any premises of the data controller and the processor, including “any data processing equipment and means.”Footnote 140 The Montréal AI Declaration, although nonbinding in nature, stresses the need for the code for algorithms to be accessible to relevant public authorities for verification and control purposes.Footnote 141 The Algorithmic Justice Act also calls for platforms to maintain records of algorithmic processes, and to make available to the supervisory agency complete records upon request.Footnote 142 After all, the algorithm itself may only be part of the story. Algorithmic decision-making cannot be accurately audited by reviewing the algorithms alone. It is important to ensure that the data on which an algorithm is trained is equally accessible.

Figure 5.1 Transparency requirements in context
Notes:
–Degree of Disclosure Obligations (Rows 1–3)
H: high (all data including algorithms and source code)
M: medium (algorithm parameters, algorithm auditing)
L: low (transparency reports, standard contracts)
N: none (no explicit rules)
–Degree of Explainability (Row 4)
H: high (inspections and interviews)
M: medium (machine-readable formats)
L: low (meaningful and comprehensible descriptions)
N: none (no explicit rules)
In practice, however, the disclosed information, whether algorithms or source code, may not be understood by regulators, let alone the general public. Government agencies in most circumstances do not have the technical expertise to keep pace with and thus oversee the industry’s sophisticated algorithms, which represents an impediment that would negate many benefits of disclosure.Footnote 143 Disclosure requirements may therefore need to involve specialized experts in carrying out necessary analyses.Footnote 144 In other words, authorities most likely rely on experts who are in a position to make assessments of the disclosed technical details. In this regard, the DSA explicitly stipulates that auditors and experts appointed by the EC during administrative inspections may require VLOPs to provide necessary information, including their information technology systems and algorithms.Footnote 145 Similarly, the DMA states that the Commission may require access to any data and algorithms of undertakings and information in order to carry out its duties.Footnote 146 Persons working under the supervision of the authorities, including auditors and experts appointed pursuant to the DMA, shall not disclose information acquired during inspections.Footnote 147 Limiting transparency to regulators and researchers, but not to the general public, appears to be an important mechanism by which to protect potentially sensitive information and data that would not be considered releasable to the public.
▪ Interested Parties
Variations can be found in platforms’ disclosure obligations to interested parties. In Figure 5.1, the degree of the obligations ranks low in the DSA and the DMA, medium in the GDPR, high in the Montréal AI Declaration, and is nonexistent in the Algorithmic Justice Act. To illustrate, both the DSA and the DMA have transparency provisions that would be available to interested parties, but the obligations are limited to relatively general information, without associated technical details. For example, regarding content moderation, a platform should inform the recipient at the time of the removal of the decision through “a clear and specific statement of reasons” when it removes specific content.Footnote 148 Likewise, regarding advertising and ranking, a gatekeeper shall provide each advertiser to which it supplies advertising services with information regarding prices, fees, and remunerations. The gatekeeper shall also provide advertisers and publishers with access to “the performance measuring tools of the gatekeeper and the data necessary for advertisers and publishers to carry out their own independent verification of the advertisements inventory, including aggregated and non-aggregated data.”Footnote 149
On the contrary, the Montréal AI Declaration empowers “stakeholders and those affected by the situation” the same opportunity to access “the code for algorithms” for verification and control purposes.Footnote 150 The GDPR, in this regard, requires the data controller to provide individuals with the information necessary to ensure fair and transparent data processing. Where automated decision-making is involved, the disclosure obligations include the provision of “meaningful information about the logic involved” and “the envisaged consequences of such processing” to individuals.Footnote 151 A great deal of literature has explored what constitutes “meaningful information.”Footnote 152 In any event, it can be presumed by reading in context that the information required under Articles 13 and 14 of the GDPR, although it need not be source code or complex algorithms, must be more than a general overview of the decision-making system – sufficiently concrete for the data subject to understand the reasons for a specific decision.Footnote 153 It therefore ranks medium in terms of the degree of transparency.
▪ The Public
Finally, in connection with disclosure obligations to the public, among the five selected regulations, three of them rank medium, while two rank low. As revealed in Figure 5.1, the transparency requirements toward the public under the DSA, the Montréal AI Declaration, and the Algorithmic Justice Act extend to the level of algorithms’ parameters and auditing, whereas those in the DMA and the GDPR remain at the level of general transparency reporting and standard contracts. More specifically, under the DSA, VLOPs are required to publish transparency reports at least every two months, and to release, in their terms and conditions, “the main parameters used in their recommender systems, as well as any options for the recipients of the service to modify or influence those main parameters.”Footnote 154 The “main parameters” include but are not limited to “the criteria which are most significant in determining the information suggested to the recipient of the service” and “the reasons for the relative importance of those parameters.”Footnote 155 In a similar manner, the Montréal AI Declaration calls for public transparency of “the social parameters of the artificial intelligence systems,”Footnote 156 while the Algorithmic Justice Act advocates that the online platform should disclose, among other matters, “the method by which the type of algorithmic process prioritizes, assigns weight to, or ranks different categories of personal information to withhold, amplify, recommend, or promote content to a user.”Footnote 157
In terms of a textual comparison, public transparency obligations under the DMA and the GDPR are less specific and are therefore weaker. Under the DMA, gatekeepers are required to publish and update nonconfidential summary of transparency reports, as well as make publicly available and update an overview of the audited descriptions.Footnote 158 The obligation is even less clear in the GDPR, under which the EC has the power to “lay down standard contractual clauses” for data processing. In addition, associations representing platforms may prepare codes of conduct addressing “fair and transparent processing.”Footnote 159 On the whole, the degree of transparency to the broad public is relatively low in these two instruments.
5.3.2.3 How: The Degree of Explainability
Some skeptics emphasize that algorithmic transparency requirements may lend themselves to legal problems, because the algorithms themselves cannot explain “how they have arrived at a particular output.”Footnote 160 For example, releasing algorithms does not necessarily explain how they work and may not provide much meaningful information about, for example, the content moderation or ranking systems. Any degree of meaningful algorithmic transparency must therefore be accompanied by the requirement of explainability, that is, providing insights into the functioning of the algorithms “in a format that makes sense to the reader.”Footnote 161
The question is how. First of all, accurately explaining the functioning of algorithmic systems – particularly those developed using AI – is not always technically feasible. Algorithmic decision-making may involve complex and dynamic processes, as well as multiple profiling elements and data sources.Footnote 162 It may be commercially impossible to carry out an effective review.Footnote 163 Moreover, disclosure of incomprehensible technical details, even when available in machine-readable format, does not necessarily empower either the regulators or the interested parties to understand how they actually work.Footnote 164 Accordingly, as a subset of transparency requirements, the degree of explainability strongly correlates with to “whom to explain.” As for the regulators, the power to acquire insights into how and why the algorithms work in certain ways by conducting inspections and carrying out input and output auditing is useful for supervisory purposes. Conversely, as for the general public, digital platforms’ descriptions of algorithms’ objectives, processes, and functioning, in plain language that is intelligible to lay people, represent meaningful information responsive to the right to know.Footnote 165
Both the DSA and the DMA require different levels of explainability depending on “whom to explain to” and “why explain.” The two instruments impose upon platforms the obligation to publish annual transparency reports “in clear, easily comprehensible language” and “in a machine-readable format.”Footnote 166 Moreover, the EC has the power to conduct all necessary inspections at the premises of the VLOPs/gatekeepers, including requiring the services suppliers to provide access to and explanations of their “organization, functioning, IT system, algorithms, data-handling and business practices,” and allowing regulators to “address questions to their key personnel,” and “record or document the explanations given.”Footnote 167 The EC can also require access to any data and algorithms and request explanations of them.Footnote 168 Furthermore, the EC is mandated to carry out interviews and take statements during the investigation and is entitled to “record such interviews by any technical means.”Footnote 169 As shown in Figure 5.1, the VLOPs/gatekeepers’ cumulative obligations for explanations rank high in the given context. In contrast, requirements that algorithmic decision-making is explainable are relatively light in the Montréal AI Declaration and the Algorithmic Justice Act, which basically obligate services suppliers to provide a description of how the algorithmic process operates,Footnote 170 or to justify AI-based decisions in plain language that is understood by individuals whose quality of life and reputation are affected by the consequences of the algorithmic process.Footnote 171
In this regard, it is worth noting that the text of the GDPR has provoked debate over whether it imposes upon data controllers an obligation of explainability when algorithmic decision-making is involved. Article 22 states that individuals “have the right not to be subject to a decision based solely on automated processing, including profiling” if such a decision has “legal effects or similarly significant effects” on concerned individuals. The same article requires a services supplier to “implement suitable measures” to safeguard individuals’ “rights and freedoms and legitimate interests.”Footnote 172 This requirement has been a source of controversy over whether algorithmics should be explainable. Note that suitable safeguards, according to Article 22, must include “at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.” The term “at least” indicates that this is not an exhaustive list of rights. Namely, it is an open list of suitable safeguards, and a services supplier is expected to do more than the basic requirements. Additionally, Recital 71 has added that the suitable safeguards are to include a right to an explanation of an automated decision. This textual interpretation thus creates a sui generis due process for algorithmic practices – a right to be heard, to be given an explanation, and to challenge an automated decision.Footnote 173
In any event, just as the DSA and the DMA empower authorities to demand a high level of explainability for supervisory purposes, Article 58 of the GDPR states that authorities’ investigative powers include access to any premise of the services supplier, any data processing equipment and means, as well as the ability to order the services supplier to “provide any information it requires for the performance of its tasks” – an outright obligation of explainability.Footnote 174 For this reason, the GDPR ranks high in terms of explainability, as shown in Figure 5.1, which denotes the cumulative degree of a given regulation.Footnote 175
5.3.2.4 Variables and Comparison
To summarize, the five regulations selected implement various transparency measures, depending on the regulatory objectives and their context. Generally speaking, of the four dimensions assessed in Figure 5.1, the transparency obligation to authorities and experts appears in all five regulations and is the most significant requirement in terms of what must be disclosed. It is worth noting that the most evident variations are seen in transparency obligations to the interested parties and to the public. Moreover, the degree of technical detail required for explanation also varies greatly, from detailed auditable trails of algorithmic processing to general, plain-text descriptions. However, consistency has been found in the DSA, the DMA, and the GDPR, as they contain identical provisions requiring a high degree of explanation. To conclude, this case study demonstrates that the emerging regulations bring about greater transparency and oversight of the algorithms. The legal-technical details, however, differ in important ways. Although all of the five instruments place pressure on digital platforms to be more transparent, what kind of information should be provided and how it should be provided are dependent upon context, as well as to whom the disclosure is made.
Figure 5.1 measures the key elements of platform transparency and explainability reflected in the selected regulations, which form the basis of the mapping exercise in Figure 5.2. Before this mapping exercise, one caveat is in order. Issues arise when comparing values across these axes, because each has a unique measuring scale. Note especially that the variables on the explanation obligations (row 4) represent different measuring scales. In other words, variables on the axis of explanation obligations are independent. With all of this in mind, Figure 5.2 shows the four variables mapped onto axes. The central axis is defined as “none,” the second central axis as “low,” the inner axis as “medium,” and the outer axis as “high.” As such, the areas of the polygons represent the overall degree of transparency and explainability requirements. Evidently, the five polygons overlap in some areas but are completely independent in other areas. Additionally, the shapes of individual polygons vary greatly. This case study thus concludes that the fragmentation of platform governance within and across jurisdictions is growing. Section 5.4 will continue to address how international trade agreements can help curb such fragmentation. However, let us first dive into the relevant provisions on nondisclosure of source code and algorithms in the FTAs. What are the relevant provisions in international trade agreements, and how, if at all, do they affect a state’s ability to regulate platform?

Figure 5.2 Regulatory fragmentation of transparency requirements
Notes:
–Central axis: none
–Second central axis: low
–Inner axis: medium
–Outer axis: high
5.3.3 Trade Rules on Source Code Disclosure
5.3.3.1 Source Code Nondisclosure Provisions under the FTAs
A growing number of FTAs contain provisions to restrict access to source code. Article 14.17 of the CPTPP, for example, prohibits “the transfer of, or access to, source code” as a condition of the “import, distribution, sale or use” of software.Footnote 176 Essentially, source code nondisclosure provisions aim to prevent states from requiring technology transfer in exchange for international trade. In the context of digital platforms, services suppliers generally have invested resources in the development of source code. If they are required to disclose the source code as a condition of market access, they risk exposing their technologies to competitors and losing their competitive advantage. Source code nondisclosure provisions therefore safeguard software owners’ rights over their intellectual property against mandatory disclosure.Footnote 177
Traditionally, trade secret law has been the most widely used legal mechanism to protect software source code. Nonetheless, the specific expression of innovative software ideas can also be protected through other intellectual property rights, such as copyrights and patents. In this regard, the WTO Agreement on Trade-Related Aspects of Intellectual Property Rights (TRIPS) has for some time been the most relevant legal tool in terms of source code protection under the realm of international economic law.Footnote 178 Source code nondisclosure protections under the FTAs, however, go beyond the TRIPS by directly barring governments from demanding the disclosure of source code as a prerequisite for market access, subject to exceptions. Arguably, the trend to include the ban on the mandatory disclosure of source code provisions in the FTAs stems from the emerging need for greater source code protections, and in particular, in response to some state actions, such as China’s policy of forcing foreign firms to disclose their source code and/or “other parts of their intellectual property” as a condition for doing business in China.Footnote 179
In addition to source code, several FTAs extend the general prohibition on disclosure requirements to algorithms. For example, Article 19.16 (Source Code) of the USMCA bans mandatory transfers and access to both the source code and the algorithm expressed in it, stating the following:
1. No Party shall require the transfer of, or access to, a source code of software owned by a person of another Party, or to an algorithm expressed in that source code, as a condition for the import, distribution, sale or use of that software, or of products containing that software, in its territory (emphasis added).
2. This Article does not preclude a regulatory body or judicial authority of a Party from requiring a person of another Party to preserve and make available the source code of software, or an algorithm expressed in that source code, to the regulatory body for a specific investigation, inspection, examination, enforcement action, or judicial proceeding, subject to safeguards against unauthorized disclosureFootnote 180 (emphasis added).
Here, an algorithm is broadly defined in these agreements as “a defined sequence of steps, taken to solve a problem or obtain a result.”Footnote 181 At the time of this writing, similar text could be found in Section C.3 (1) – Source Code of the WTO JSI on E-commerce.Footnote 182 The inclusion of algorithms substantially broadens the scope of the source code nondisclosure provisions. By preventing the mandatory disclosure of algorithms in addition to that of source code as a condition for market access, the USMCA-type of source code nondisclosure provision makes it clear that it also prohibits requirements to disclose algorithms. Unless justified by exceptions, a USMCA party seeking access to the algorithms used by digital platforms as a condition for digital trade market access would be inconsistent with Article 19.16 of the USMCA.
The expanded scope of the prohibition on disclosure requirements thus raises concerns about its impact on the ability of governments to regulate the use of algorithms at the domestic level. Civil societies such as the Australian Council of Trade Unions stressed that preventing relevant authorities from accessing source code and algorithms altogether would unduly restrict governments from supervising platforms’ compliance with domestic regulations and ensuring algorithmic accountability.Footnote 183 They believed that keeping source code and algorithms secret also makes it difficult for the public to understand how the algorithms make decisions, and whether there is bias or discrimination within the process.Footnote 184 Indeed, compared to FTA provisions that only preclude the accessibility of source code, FTA provisions that additionally preclude the mandatory accessibility of algorithms place further restrictions on the power of authorities to protect consumers.Footnote 185 It is notable that the key source codes and algorithms that drive datafication are primarily owned by the digital platforms, and in particular the big tech companies. Some critics have therefore asserted that the consequences of restrictions to algorithm access would jeopardize the ability of governments to “develop regulatory measures that could ensure transparency of algorithmic governance tools.”Footnote 186 In their view, the expanded scope of source code nondisclosure provisions in international economic law conceivably protects private capital – the source code and algorithms owned by the digital platforms – at the expense of governments’ full regulatory autonomy to supervise legal compliance.Footnote 187
5.3.3.2 The Supervision of Algorithms
To the contrary, some believe that the USMCA-type source code nondisclosure provisions, given their broad scope to cover “vital digital assets,” can better help to enhance business trust and protect foreign firms from unauthorized disclosure.Footnote 188 In the view of Mitchell and Mishra, a diligent balance has been achieved in USMCA Article 19.16 by restricting governments from forcing the disclosure of both source code and algorithms on the one end, and ensuring that governments can place demands on foreign firms to disclose their source code and algorithms for accountability and regulatory purposes, on the other end.Footnote 189 Specifically, attention should be given to the second paragraph of USMCA Article 19.16, which explicitly states that the provision does not preclude a regulatory body or judicial authority from requiring access to source codes or algorithms “for a specific investigation, inspection, examination, enforcement action, or judicial proceeding.”
In fact, such a similarly worded regulatory/judicial preclusion can be found in the source code nondisclosure provisions of several international trade agreements, such as the US–Japan Digital Trade Agreement, the Australia-Singapore Digital Economy Agreement (DEA), and the Korea-Singapore Digital Partnership Agreement (KSDPA).Footnote 190 Moreover, as a subset of regulatory/judicial preclusion, the EU-Japan Economic Partnership Agreement and EU-New Zealand FTA, for example, also allow a court, an administrative tribunal, or a competition authority to require access to source code owned by foreign firms to remedy a violation of competition law.Footnote 191 Altogether, source code nondisclosure provisions do not seem to compromise the regulatory autonomy on digital platforms, because governments still retain the power to investigate and audit automated content-moderating systems, biased and discriminatory algorithms, and algorithmic recommendation and ranking processes.
It should also be emphasized that the source code nondisclosure provisions in the FTAs target the market access of software businesses, namely, “import, distribution, sale or use of software,” for supplying international trade. Essentially, these provisions are centered on “market access” and are not designed to constrain governments from requiring information to investigate compliance. It can be argued that a country’s right to regulate digital platforms would not be adversely affected by these provisions as long as the regulatory actions do not block the market access of foreign services. Turning back to the first row of Figure 5.1, platforms’ disclosure obligations to the regulatory body generally rank high on the scale when measuring transparency. For instance, Article 69 of the DSA mandates that regulators conduct inspections, including requiring access to the algorithms of the very large online search engines. In a similar vein, Articles 21 and 23 of the DMA empower regulators to require access to all necessary information for the inspection, including any data and algorithms. One could contend that such inspection power under the DSA and the DMA does not necessarily constitute a condition for market access and therefore is consistent with the FTAs’ source code nondisclosure provisions.
Nonetheless, as discussed in Section 3.5, there are situations in which the boundary between market access prerequisites and non-market access regulations is blurred. To some extent, any transparency requirement, no matter how “pure” its design for regulatory purposes, would potentially affect the “distribution, sale, or use” of software in the given market. Therefore, it is disputable how far the FTAs’ nondisclosure provisions can go in this regard. In any event, assuming that any regulatory action had been broadly construed as a market access prerequisite, the government would have to rely on the carve-out and exceptions to justify the mandatory disclosure of the source code and algorithms.
First turning to the carve-outs for critical infrastructure services: Some source code nondisclosure provisions allow for the forced disclosure of information relating to critical infrastructure.Footnote 192 The term “critical infrastructure,” however, was left undefined in the Digital Trade/E-Commerce Chapter. Accordingly, what the concept of “critical infrastructure” might cover would be interpreted pursuant to the previous discussion in Chapter 2.
Second, the general exceptions and the security exceptions are available in all of these provisions.Footnote 193 In my view, even if measures that are necessary to enhance platform accountability and maintain digital legal order were found to fall within the scope of market access-related restrictions, they could be justifiable under exceptions, and in particular, the public morals general exceptions. As previously discussed in Chapters 1 and 2, the country implementing the disputed transparency requirements would have to prove that the measure at issue satisfies the necessity test and the Chapeau test under the public morals exceptions. It is worth reiterating that according to WTO jurisprudence, a country has the regulatory autonomy to choose its level of protection in relation to the objective being pursued, which is, in this context, fair and transparent algorithmic decision-making in a datafied business environment. Any less trade-restrictive alternatives proposed by the governments of foreign platforms must qualify as reasonably available alternatives under the necessity test.
At the end of the day, the ambit within which source codes and algorithms can be kept secret under international economic law relies on the exceptions, entailing a delicate balance between the competing interests involving platforms’ trade secrets, digital innovation, algorithmic accountability, and other legitimate public objectives. With that in mind, this book argues that international regulatory coherence and cooperation surrounding platform regulations should be an important direction for global governance in a platform economy. Good regulatory practices (GRP) with ex-ante regulatory impact assessment (RIA), when appropriately implemented, can help identify and address unnecessary trade restrictions, forestall potential trade disputes at earlier stages, and reduce the likelihood of lengthy and costly dispute settlement procedures. Section 5.4 will continue to discuss the opportunities and challenges of such an approach to global platform governance.
5.4 Good Regulatory Practices for Platform Governance
5.4.1 Potential Fragmentation and Overreaching
Drawing from the analysis above, the fragmentation of platform regulation – whether it relates to content moderation, competition policy, or algorithmic transparency – is growing. The proliferation of platform regulations and algorithmic disciplines means that services suppliers are confronting more and more difficulties when attempting to comply with diverse national “behind-the-border measures.” The lack of regulatory coherence among states may create costly and burdensome tasks for services suppliers, because when operating at international scale, they must meet different degrees of obligation and satisfy divergent legal standards. Such regulatory fragmentation may direct resources away from more effective business management. This is particularly true for non-big tech, small and medium-size enterprises (SMEs) that lack the resources to manage unique legal requirements in different locations. Taking transparency obligations as an example, as shown in Figure 5.2, complexity surrounding various legal approaches may become a barrier to digital trade, especially for SMEs when those rules apply to them. Truly, as Trachtman pointed out, platform regulations of different states have varying concerns and varying exceptions, and thus may prove contradictory in a complex fashion.Footnote 194 The emerging fragmentation and possible contradiction of data governance call for cross-border regulatory coherence and cooperation mechanisms to harmonize the divergent regulatory approaches stemming from disparate public policy objectives and digital trade interests.
At the same time, and relatedly, there are more and more examples of potential regulatory overreaching governmental intervention, which render global platform governance even more difficult. Going beyond the selected five regulations in Figure 5.2, several national and local regulations on algorithmic transparency have raised concerns about policymakers’ emerging overreaching practices in this innovation sector. Taking China’s “Qinglang – 2022 Algorithm Comprehensive Governance Special Action” as an example, which aims to keep digital platforms on tight leashes, under this special action, Chinese tech giants – including Alibaba, Tencent and TikTok (ByteDance) – have submitted algorithms used in their services to China’s Internet watchdog.Footnote 195 Indeed, digital platform regulations reflect different priorities in different countries, which further complicates the question of how to manage fragmentation in global platform governance.
At the crux of the matter is the desire to promote the development of a more harmonized regime that encourages innovation while protecting other public objectives. Conceptually, as denoted by the Manila Principles, platform regulations should comply with the tests of necessity and proportionality to ensure that platform obligations are linked to a specific public objective, the degree of obligations are proportionate to that objective, and regulators’ powers extend only to the necessary information.Footnote 196 This raises the question of whether international economic law can serve as an effective tool to promote regulatory coherence and prevent regulatory overreach. As the global economy goes digital, how can we apply GRP to the domestic regulation given the complex issues involved in a datafied world? Can the regulatory disciplines in the GATS or the FTAs help reduce the likelihood of disguised or unnecessarily restrictive impediments to the platform economy and ease potential regulatory fragmentation and overreaching?
5.4.2 Good Governance Obligations
There has been substantial progress in the development of regulatory discipline through international trade instruments at both the multilateral and regional levels. The ambition of the international GRP agenda is aimed at fostering regulatory coherence by offering a systemic response to the inherent potential problems of regulation that may impose costs but add little overall benefits.Footnote 197 At the multilateral level, the WTO JSI on Domestic Regulation of Services (the “DR JSI,” or “DR Reference Paper”) was concluded in December 2021.Footnote 198 The participating members, which represent more than 90 percent of the services trade, have agreed on a set of GRP, which will be implemented by incorporating the DR Reference Paper into their GATS Schedules of Commitments. While the DR JSI was negotiated plurilaterally, the outcome will be implemented on a most-favored-nation basis. In other words, the benefits will apply to all WTO members, not just the participants.Footnote 199 The DR JSI contains three core principles:Footnote 200
Regulatory transparency: measures aimed at promoting prompt publication and availability of information and stakeholder engagement in regulatory processes;
Regulatory predictability: measures aimed at ensuring a reasonable time frame and procedural due process;
Regulatory quality: measures aimed at disseminating GRP to facilitate the services trade, including ensuring that regulators develop technical standards through open processes and reach their decisions in a manner independent of services suppliers.
In the context of digital platform regulation, these regulatory disciplines establish legally binding guidelines, within which participating countries have the flexibility to regulate the platforms and pursue their policy objectives. Participating countries retain the right to impose digital/data regulations including algorithmic transparency, which arguably is a “technical standard” within the meaning of Article VI:4 of the GATS, on services suppliers.Footnote 201 However, it must be done in accordance with the regulatory disciplines laid out in the DR Reference Paper – that is, to improve the good governance landscape through regulatory transparency, predictability, and nondiscrimination.Footnote 202
At the regional level, the development of GRP under the FTAs can be seen as a response to the issues of regulatory fragmentation and overreaching. Within the last decade or so, good governance obligations have been progressively negotiated, and in some cases, incorporated into bilateral and regional trade agreements.Footnote 203 The reality that market access alone cannot sufficiently safeguard services suppliers to operate effectively in foreign markets has led international trade negotiations to address the issue of GRP.Footnote 204 Notable developments in this regard can be found in the more recent FTAs that include a comprehensive set of good governance obligations in a separate chapter. Parties to these FTAs agreed to adopt “GATS plus” regulatory obligations, which are largely equivalent to the DR Reference Paper or even extend beyond it with more advanced disciplines. More recent examples include Chapter 22 (Good Regulatory Practices and Regulatory Cooperation) of the EU–New Zealand FTA, concluded in 2022, and Chapter 26 (Good Regulatory Practice) of the UK–Australia FTA, concluded in 2021. These new regulatory disciplines are set to stipulate minimum standards that must be observed by the FTA parties when adopting and applying domestic regulations, which, if implemented effectively, might in turn offer promising venues for overcoming regulatory fragmentation and potential overreaching. The assumption is that domestic administrative practices in different jurisdictions would become more compatible and reasonable if countries observe, throughout the regulatory cycle, a set of “minimum common quality standards.”Footnote 205
Taking CPTPP and USMCA as representative instruments, the Regulatory Coherence Chapter under the CPTPP and the Good Regulatory Practices Chapter under the USMCA set forth specific obligations with respect to GRP, such as promoting information quality, procedural transparency, clear and plain regulatory language, early planning and retrospective review of regulations, central and internal coordination, and engagement with interested persons.Footnote 206 In particular, parties have committed to “minimize unnecessary regulatory differences and to facilitate trade or investment,”Footnote 207 without compromising each state’s regulatory autonomy to pursue its public policy objectives. Possible mechanisms for promoting regulatory coherence include exchanging technical information and data and exploring common approaches to tackling the risks posed by the use of emerging technologies.Footnote 208 In addition, under both the CPTPP and the USMCA, the core of GRP is the need to conduct an impact assessment when developing regulations. More specifically, the second paragraph of Article 28.11 of the USMCA delineates the procedures and considerations under which an RIA should be conducted, which highlights the procedures of the regulatory assessment as follows:
(a) the need for a proposed regulation, including a description of the nature and significance of the problem the regulation is intended to address;
(b) feasible and appropriate regulatory and non-regulatory alternatives that would address the need identified in subparagraph (a), including the alternative of not regulating;
(c) benefits and costs of the selected and other feasible alternatives, including the relevant impacts … as well as risks and distributional effects over time, recognizing that some costs and benefits are difficult to quantify or monetize; and
(d) the grounds for concluding that the selected alternative is preferable.Footnote 209
Amid the Biden administration’s agenda to increase economic cooperation through the IPEF, it is not surprising to see that GRP is one of the key initiatives under the framework. The USTR has declared that it will seek to “advance the benefits of good regulatory practices in supporting good governance”Footnote 210 and “build on the outcome reached in the WTO Joint Initiative on Services Domestic Regulation, as appropriate.”Footnote 211 In fact, when the USTR of the Obama administration led the TPP negotiations, the USTR repeatedly stressed the importance of the inclusion of a chapter on regulatory coherence in the TPP, as it reflects the growing relevance of regulatory issues to international trade and investment.Footnote 212 In light of the fact that the legal and regulatory environment in TPP parties is diverse, the USTR had advocated for the incorporation of regulatory coherence into the TPP to eliminate the problem of “overlapping and inconsistent regulatory requirements or regulations being developed unfairly and without a sound basis.”Footnote 213 Now, six years after the US withdrew from the CPTPP, the IPEF seems to have the potential to reassert US economic engagement to counter China’s growing influence and promote US regulatory approaches and standards in the region.
The crux of the matter, however, is to what extent good governance obligations in international trade agreements can tackle regulatory fragmentation and combat unreasonable administrative practices. Will these regulatory principles and methodological tools bring about greater policy coherence in the governance of the digital economy? When domestic regulators are faced with questions of how to regulate digital platforms, in what way can these GRP converge the fragmented legal approaches to issues such as content moderation, cultural diversity, platform competition, and algorithmic transparency? For the reasons explained below, this book contends that far more political will is needed to ensure that the GRPs/RIAs do the trick.
5.4.3 Marching toward Policy Coherence in Platform Governance?
5.4.3.1 The Breadth and Strength of GRP/RIA
First of all, although relatively ambitious GRP provisions can be found in some FTAs,Footnote 214 other FTAs contain only symbolic GRP provisions. For example, the chapter on the “General Provisions and Exceptions” of the RCEP establishes obligations on minimum standards of regulatory transparency and due process in the administrative proceedings. However, the RCEP is silent on many higher standards of GRPs to prevent undue delay in authorization or arbitrary administration. In particular, the absence of RIA in the RCEP implies fewer safeguards to ensure regulatory quality than if such provisions were included, leaving the RCEP behind in the developments of GRPs compared to other recently negotiated FTAs.Footnote 215 Arguably, divergences in the regulatory frameworks of Asian countries, especially China, have made it challenging to conclude “harder GRP obligations.”
Second, even for those countries that are parties to FTAs with more ambitious GRPs, one fundamental question surrounding the possible contributions of the GRPs to the quality of platform regulation is the breadth of their application. Normatively speaking, the applicable coverage of the GRPs is rather uncertain. Here, a typical example is Article 25.1 of the CPTPP, which stipulates that the “covered regulatory measure” under its Regulatory Coherence Chapter refers to “the regulatory measure determined by each Party.”Footnote 216 According to Article 25.3, each party shall determine and make publicly available the scope of its covered regulatory measures. Article 25.3 further requires that “in determining the scope of covered regulatory measures, each Party should aim to achieve significant coverage.”Footnote 217 In other words, although the definition of “regulatory measure” is rather broad, referring to “any measure of general application … adopted by regulatory agencies with which compliance is mandatory,”Footnote 218 the exact scope of the “covered regulatory measures” is flexible. Each party has the discretion to decide to what extent its domestic regulation should be subject to GRPs. Empirically speaking, some notifications from the CPTPP parties in this regard are encouraging. In particular, developed countries such as Japan and Australia have adopted “covered regulatory measures” that are general and extensive.Footnote 219 However, considering that the application of the GRPs generally requires administrative resources to complete, it is likely that some governments may tend to establish a minimum threshold in terms of the obligation to perform GRPs.Footnote 220 After all, GRPs not only require changes in the institutional setting, but also demand adjustments in the behavior and mindset of civil servants.Footnote 221 Therefore, platform regulations are not necessarily subject to GRPs/RIAs.
Third, even assuming that a country has made legally binding commitments to GRPs in FTAs, the real impact may not be significant due to the narrow range of domestic regulatory instruments that are subject to GRPs. For example, Article 28.1 of the USMCA explicitly limits the scope of “regulation” under the Good Regulatory Practices Chapter to the “measure of general application adopted, issued, or maintained by a regulatory authority with which compliance is mandatory.”Footnote 222 The definition of “regulatory authority” under the chapter, however, is limited to “an administrative authority or agency at the Party’s central level of government that develops, proposes or adopts a regulation.”Footnote 223 The definition explicitly excludes “legislatures or courts.”Footnote 224 In other words, the GRPs/RIAs only apply to “few” but not “all” regulatory instruments that impact platform activities. In terms of platform regulation, the fact that the GRPs only apply to the executive branch of governments but not to legislatures or parliaments means that the RIAs, in some countries, are at most carried out by agency-made digital rules.
Finally, assuming arguendo that a platform regulation falls within the range of regulatory instruments subject to GRPs, the strength of the application of RIAs might be weakened by divergent methodologies. As previously indicated, RIA has been defined as a systemic approach to critically identifying and assessing the regulatory effects – including the existing regulations and proposed nonregulatory alternatives.Footnote 225 In the context of digital platform regulations, policymakers should identify problems arising from platform monopolies and data capitalism, determine the need for intervention, propose alternative regulatory options ranging from competition law to algorithmic transparency, and then assess and decide upon the preferred policy option. Throughout the process, the assessment – whether it is qualitative or quantitative – can be accomplished by employing various techniques. According to the OECD, the adoption of RIA is now becoming widespread, but it operates differently within and across countries.Footnote 226 Methodologically speaking, various RIA procedures can be designed and used. As a result, policymakers’ understanding of the procedure of RIA varies greatly. In practice, RIA has been uniquely practiced by different countries or even different governmental bodies.Footnote 227
This raises the question of how the good governance obligations under the FTAs help ensure that policymakers “choose the best regulatory option” when designing and implementing platform regulations, and how the GRPs/RIAs help converge the fragmented legal approaches to the platform economy. At their heart, GRPs under the FTAs were intentionally framed in flexible terms to reserve room for an individual FTA party to decide how extensively it will commit. It is clear that the RIA provisions under the FTAs do not provide much guidance as to how to operate the process. To place these questions into a more concrete setting, both the DSA and the DMA “passed” the RIA test conducted by the EC before implementation. The European Commission’s Impact Assessment Report of the DSA (the RIA Report) is over 200 pages long, containing a detailed analysis of what the problem drivers are, why the EU should act, what the policy options are, what the impacts of these options are, how the options compare, and which option is preferred.Footnote 228 The RIA Report concludes that the DSA is in full compliance with the EU’s international obligations in the WTO and FTAs.Footnote 229 The RIA Report underscores that the DSA is in line with the nondiscrimination provisions of the GATS, as it establishes objective criteria, including the definition of VLOPs, regardless of the origin of the services supplier.Footnote 230 Moreover, the RIA Report states that the asymmetric regulation, which imposes additional transparency requirements on the VLOPs, does not jeopardize the protection of trade secrets of digital platforms because the DSA entails a secrecy obligation on the authorities and experts with regard to trade secrets.Footnote 231
Would the same conclusion of the RIA Report be drawn if a different RIA methodology is introduced? Probably not. As explained by Alemanno, a cost–benefit analysis in many cases can be “extra-territorially blind.”Footnote 232 Both the costs of regulatory fragmentation and the benefits of regulatory coherence might be underestimated. Measurements in the RIA procedure can also be problematic when quantification is not possible, and in that case, the RIA might become a “rubber stamp” to endorse administrative decisions without carefully scrutinizing them,Footnote 233 effectively serving as a mere justification for policymakers’ choices. At the end of the day, the cost–benefit analysis is more about local value preferences. When local preferences and policy priorities are involved, the process has a more subjective character.Footnote 234 As Gari observes, this world might be increasingly globalized and interconnected, but deep differences among countries remain in terms of regulatory needs.Footnote 235
5.4.3.2 Political Support Needed for Future Governance
All in all, in light of the above, the trend of developing GRP obligations under the international trade agreements has the potential to serve as an important tool to address regulatory fragmentation, but much will depend on the political will of the governments involved. Given that the “obligations” of regulatory coherence are predominately phrased in a soft and loose way, the effectiveness of the GRPs, especially the successful incorporation of RIAs into regulatory policy, is dependent upon strong administrative determination. To put it another way, regulatory divergence can also be seen as an outcome of democratic legitimacy.Footnote 236 The potential impact of the good governance obligations under the WTO or FTAs in tackling regulatory fragmentation is therefore constrained.Footnote 237 Pushing the goals of GRPs/RIAs too far may generate concerns related to an undue degree of intrusion upon a country’s right to regulate.Footnote 238 For this reason, the breadth and strength of the GRPs/RIAs fundamentally rest on political support for good-faith implementation. However, despite the above considerations, there are reasons for being optimistic about better governance through international trade agreements.
First, in terms of the applicable coverage of the GRPs, there seems to be a growing political willingness to endorse the relevant initiatives. At the WTO, additional members have joined the DR JSI to “make their regulatory environment more conducive to business,” and to “lower trade costs for services suppliers seeking to access foreign markets.”Footnote 239 At the regional level, more and more new-generation FTAs contain the GRP obligations. Although they are primarily drafted in flexible language, they nevertheless provide a baseline for parties to undertake regulatory reform. Over time, such soft obligations may help the parties to align with trends leaning toward more transparent and predictable regulatory frameworks – which are vital to services trade across borders.Footnote 240 Platform suppliers, especially SMEs, will eventually benefit from improved regulatory quality and facilitation.
Second, in terms of a greater political willingness to implement GRPs, one promising direction is to establish a central oversight body to perform checks of draft RIA reports.Footnote 241 Historically, it has not been unusual for regulators to conduct an “incomplete” assessment of the economic costs and benefits of regulatory alternatives.Footnote 242 Policymakers may fail to generate a comprehensive evaluation of the possible impacts of regulation, resulting in “stove-piped” internal decisions that lead to conflicting regulatory approaches in the administrative system.Footnote 243 However, according to OECD studies, more and more jurisdictions, including both OECD and non-OECD countries, have dedicated a single governmental body to be responsible for reviewing regulatory quality in the national administration from a “whole-of-government” perspective.Footnote 244 Alternatively, an increasing number of countries are establishing a specific parliamentary committee with responsibilities for monitoring the quality of the RIA system as a whole.Footnote 245 As previously discussed, in the context of platform regulation, the primary institutional challenge in the introduction of RIAs is to coordinate diverse considerations – for example, competition policy, consumer protection, freedom of speech, trade secrets, industrial innovation, and other public objectives – in an integrated manner. The fact that many countries are now creating a centralized coordinating body within their jurisdictions as a quality assurance mechanism is a sign of governments’ willingness to embed GRPs and RIA scrutiny in their policymaking systems.
Finally, in terms of the methodology of RIAs, some innovative approaches have been introduced into the realm of platform regulation, which represent a significant step in promoting coherence in digital policy. For example, the “Digital Checklists” contained in the EU’s “Better Regulation toolbox” are specifically designed to identify the digital issues and impacts surrounding new policies. Any proposed regulation with digital dimensions should go through the Toolbox when defining the problem, assessing impacts, developing policy options, and choosing digital policy solutions.Footnote 246 Similar approaches have been adopted in the UK’s RIA guidance, which effectively integrates competition policy with RIAs by requiring the assessment to “incorporate an explicit consideration of the competition impacts of regulatory proposals.”Footnote 247 More importantly, there is a general tendency to not only embrace domestic market dynamics, but to also address international aspects such as market openness.Footnote 248 The increasing degree of attention accorded data-driven factors in the RIA context indicates a promising venue to advance the more coherent governance of platform activities.Footnote 249
5.5 Conclusion
We have investigated the driving forces of platformization. When data becomes capital and the algorithmic input of the digital platforms, the interplay between national regulation and international economic law is complex and multilayered. The specific aspects considered in Chapters 3–5 help formulate views and outlooks regarding the role of international economic law in the politics of datafication. The discussions in Part II also lead us to reflect on what international trade agreements have done and can do in global platform governance. Let us now shift gears to the broad digital ecosystem and continue to explore the phenomenon of datafication from a cross-layer perspective: data flows. Chapter 6 will bring a sharper focus to privacy and cybersecurity.