New Legal Path Curbs Big Tech's Data Collection

Your privacy might finally get the protection it deserves, thanks to a breakthrough in how countries regulate tech giants.

Researchers from the University of Exeter and Jindal Global Law School discovered that India and the European Union have independently developed similar legal strategies to rein in platforms like WhatsApp. Both approaches focus on whether companies respect people's right to control their personal information, rather than trying to calculate how much that data is worth.

The Indian system integrates competition law with constitutional privacy protections. The European approach combines competition rules with data protection principles from GDPR. They use different legal foundations but arrive at the same conclusion: dominant platforms collecting excessive personal data is an abuse of market power.

WhatsApp has already rewritten its European privacy policy under this pressure. The company now provides substantial detail about how it collects, uses, stores, and shares data across borders. Financial penalties paired with mandatory policy changes proved effective at bringing even tech giants into compliance.

The study identifies a common thread between these approaches. India calls dominant platforms "quasi-public entities" while Europe uses the term "gatekeepers." Both recognize these companies perform functions beyond typical private businesses and that users deserve informational self-determination.

Why This Inspires

This convergence creates an opportunity for global coordination without forcing countries to abandon their own legal systems. Nations can protect their citizens' privacy while working together to prevent platforms from dodging regulations by operating across borders.

The researchers propose a four-part test for evaluating data practices: Is collection necessary for core functionality? Has the platform provided clear information? Do users have meaningful choice? Is the value extracted proportionate to what users receive?

Dr. Anush Ganesh explained that both legal approaches move past the challenge of quantifying data's value. Instead, they assess the fairness of conditions dominant platforms impose on users.

Implementation requires domestic coordination between competition authorities, data protection agencies, and courts. International cooperation arrangements would enable information sharing while respecting each country's constitutional limits. Technical capacity building would help these institutions evaluate complex algorithmic systems.

The framework respects national sovereignty while enabling adaptive oversight of platforms that operate globally. It creates a template for future regulatory interventions that could make meaningful privacy protection a reality for users worldwide.

Your data might soon come with real strings attached for the companies collecting it.