Resumen de Market Power and the GDPR: Can Consent Given to Dominant Companies Ever Be Freely Given?
The GDPR is designed to render data protection rights more effective and to address the challenges created by the digital world. In line with the understanding of the right to data protection as data subjects’ right to have control over their data, the GDPR empowers data subjects through individual choice. However, the market power of big tech casts doubts on individuals’ ability to choose. In particular, reliance on consent is problematic when dealing with dominant platforms. If an individual does not have alternatives on the market, can the consent for the processing of personal data be considered as freely given? This issue is at the core of the case against Facebook brought by the German competition authority, now before the CJEU. This Article puts the case into context and discusses what it could mean for the regulation of big tech in the future. The focus is on the novel assertion of Advocate-General Rantos that dominance plays a role in the assessment of the freedom of consent under the GDPR. This statement raises two main issues surrounding the role of market power in the GDPR that this Article seeks to address. Firstly, how should data protection authorities assess dominance? Secondly, what role should dominance play in the assessment of the validity of consent? The Article aims to further the debate around how to ensure the continued future-proofness of the GDPR in the digital market, in light of the market power of tech companies. It proposes to introduce a two-tier approach which reduces the extent to which dominant firms can rely on consent for data processing.
