Privacy as a Parameter of Competition

Competition is usually described in terms of price, and most of the analytical apparatus of the subject assumes that a price exists. In digital markets many services are supplied for nothing, and the consideration the user gives is data and attention. Where that is so, the competitive variables are quality, functionality and the terms on which data is taken, and an enterprise that cannot raise price may still exploit its users by taking more of their data or giving them less protection. Whether such conduct belongs to competition law or to data protection law is the question this topic addresses, and the Indian answer, after the Meta and WhatsApp proceedings, is that it may belong to both.

1. Why Privacy Is a Competitive Parameter

1. Zero price does not mean zero consideration. Section 2(o) defines price to include every valuable consideration whether direct or indirect. A user who supplies data and attention in return for a service has paid for it, and the Commission has proceeded on that footing.
2. Quality is a competitive variable. Where price is fixed at zero, firms compete on the quality of the service, and the privacy afforded to the user is one dimension of quality, along with functionality, reliability and the volume of advertising.
3. A reduction in privacy is an increase in the effective price. If a user must give up more data for the same service, the exchange has worsened from the user's point of view in exactly the way a price rise would.
4. Competition disciplines privacy terms. In a competitive market a firm that degrades privacy loses users to one that does not. Where the firm is dominant and switching is costly, that discipline is absent, which is precisely the condition in which competition law intervenes.

2. The Analytical Difficulties

• Measurement. A price increase is observable; a decline in privacy is not easily quantified, and there is no accepted metric by which a ten per cent worsening in data terms can be stated. The technique used instead is comparative and qualitative: what the terms were before, what they are now, and whether the user was given a choice.
• The consent problem. Data practices are ordinarily accompanied by consent, and the enterprise will say the user agreed. The answer is the same as in Belaire Owners' Association v. DLF Ltd.: consent to a standard form offered by a dominant enterprise, where the user has no practical alternative, does not answer a complaint of imposition.
• The counterfactual. To show harm one must say what the terms would have been in a competitive market, which is difficult where no comparable competitive market exists.
• The overlap with another regulator. A data protection authority exists to examine precisely these practices, which raises the objection that the competition authority is trespassing.

3. The Two Theories of Harm

They are distinct and should not be run together.

1. Exploitative. The dominant enterprise imposes data terms on users that they would not accept in a competitive market. The victim is the user, the provision is Section 4(2)(a)(i), and the harm is the worsening of the exchange. This is the theory applied to the 2021 policy update, where the objection was that acceptance was made a condition of continuing to use the service.
2. Exclusionary. The dominant enterprise uses data accumulated in one market to strengthen its position in another, or combines data across services in a way rivals cannot match, so that competitors in the second market are foreclosed. The victim is the rival, and the provisions are Sections 4(2)(c) and 4(2)(e). This is the theory applied to the sharing of messaging data for advertising purposes.

4. The Relationship with Data Protection Law

The Digital Personal Data Protection Act, 2023 regulates the processing of personal data and creates its own regulator. The two frameworks ask different questions about the same conduct. Data protection law asks whether the processing is lawful, whether notice was given and whether consent was valid, and it protects the individual whose data is processed. Competition law asks whether a dominant enterprise imposed terms that competition would not have permitted, and whether the resulting data position forecloses rivals; it protects the process of competition and the market as a whole.

5. How to Argue Such a Case

• Define the market and establish dominance first. Without dominance there is no Section 4 case, and a data practice by a firm facing real competition is a matter for the data protection regulator alone.
• Identify which theory is being run, exploitative or exclusionary, and plead the corresponding clause.
• Establish the absence of choice, through switching costs, network effects, the loss of accumulated content and the absence of an equivalent alternative.
• Show the change, comparing the terms before and after, since a comparative case is far stronger than an abstract assertion that the terms are unfair.
• Frame the remedy around choice and transparency, which is what survived on appeal, rather than around prohibitions of defined duration, which did not.

6. Related Topics and Provisions