Attention Economy Regulation in European Law

1. Meaning and Scope

Attention Economy Regulation refers to the body of European legal rules governing business models that compete to capture, retain, measure, manipulate, or monetize users' attention through digital platforms, applications, websites, advertising systems, recommendation engines, social media, online marketplaces, streaming services, and other digital technologies.

The concept is not a single autonomous cause of action in European law. Instead, it sits at the intersection of:

data protection law;

consumer protection;

digital-platform regulation;

competition law;

advertising law;

fundamental rights;

online safety;

media law;

contract law;

unfair commercial practices;

children's rights;

employment and workplace monitoring;

algorithmic decision-making.

The central regulatory concern is that platforms may optimize systems not simply to provide a service but to maximize user engagement and monetizable attention.

Examples include:

infinite scrolling;

autoplay;

personalized recommendations;

behavioral advertising;

push notifications;

streaks and rewards;

dark patterns;

personalized feeds;

engagement-based ranking;

targeted advertising;

manipulative consent interfaces;

algorithmic amplification;

highly personalized commercial content.

2. The Basic Legal Problem

A simplified attention-economy model is:

User → digital platform → data collection → profiling → prediction → personalization → engagement → advertising/revenue

The legal concern arises where the process involves:

data collection + behavioral profiling + manipulation + economic exploitation + insufficient user autonomy.

European law does not generally prohibit a company from trying to attract attention.

The legal question is whether the methods used are:

lawful;

transparent;

fair;

proportionate;

non-discriminatory;

privacy-compliant;

consumer-compliant;

safe for children;

compatible with fundamental rights.

3. Major Areas of Attention-Economy Regulation

A. Data Protection

Platforms often need personal data to personalize content and advertising.

The GDPR regulates:

lawful bases for processing;

consent;

transparency;

purpose limitation;

data minimization;

profiling;

automated decision-making;

data subject rights;

security;

accountability.

B. Consumer Protection

Attention-based platforms may use interfaces designed to influence consumer behaviour.

Relevant concerns include:

misleading information;

hidden advertising;

aggressive commercial practices;

deceptive interfaces;

fake urgency;

hidden subscriptions;

manipulative consent;

disguised commercial content.

C. Digital Services Regulation

The Digital Services Act (DSA) is particularly important for the attention economy.

It establishes obligations concerning, among other things:

transparency;

recommender systems;

advertising;

systemic risks;

protection of minors;

dark patterns;

platform accountability.

The DSA is particularly significant because it moves beyond traditional regulation of individual transactions and addresses systemic platform design and societal risks.

4. Dark Patterns

A central concept in attention-economy regulation is the dark pattern.

A dark pattern is a user interface or design technique that materially distorts or impairs the user's ability to make a free and informed decision.

Examples include:

making "accept" highly prominent while hiding "reject";

repeatedly prompting users after they refuse;

confusing cancellation procedures;

hiding the real cost;

preselecting choices;

using misleading buttons;

making privacy-protective choices difficult;

using emotional pressure to encourage continued engagement.

European law increasingly treats such design practices as a regulatory issue rather than merely a matter of good interface design.

5. GDPR and Attention Capture

The GDPR is highly relevant because attention-optimizing systems frequently depend upon personal data.

A platform may collect information about:

clicks;

viewing time;

search history;

location;

browsing;

interactions;

contacts;

purchasing behaviour;

inferred interests;

behavioural patterns.

That information can be used to construct a profile predicting what content is likely to hold a user's attention.

The legal problem becomes:

Is the collection and use of behavioural information lawful, necessary, transparent and fair?

6. Profiling

Article 4(4) GDPR defines profiling broadly as automated processing of personal data to evaluate certain personal aspects, particularly for analysing or predicting matters such as:

preferences;

interests;

behaviour;

location;

movements.

Attention-economy systems frequently perform exactly this type of activity.

Profiling can therefore trigger:

transparency obligations;

lawful-basis requirements;

data-subject rights;

restrictions relating to automated decisions;

fairness requirements.

7. Article 22 GDPR

Article 22 is relevant where automated processing produces decisions with legal or similarly significant effects.

Not every recommendation is automatically an Article 22 decision.

For example:

"Recommended video"

will not necessarily constitute an Article 22 decision.

But automated systems making significant decisions concerning:

employment;

credit;

insurance;

access to essential services;

can potentially fall within much stronger protections.

Thus, attention-economy regulation must distinguish:

engagement personalization

from

legally significant automated decision-making.

8. Important Case: SCHUFA

SCHUFA Holding (Scoring), Case C-634/21, CJEU, 2023

The CJEU examined automated credit scoring and Article 22 GDPR.

The Court emphasized the importance of protecting individuals from significant decisions effectively determined by automated processing.

Principle

Automated scoring cannot simply be treated as an insignificant technical operation when it effectively determines important outcomes.

Attention-economy relevance

Although SCHUFA is a credit-scoring case rather than a social-media case, it provides an important analogy:

The legal significance of an algorithm depends upon its actual effect on the individual, not merely on how the platform describes the algorithm.

9. SCHUFA and Algorithmic Power

The attention economy often involves algorithmic predictions about:

what users will watch;

what they will click;

what they will purchase;

what advertisements will persuade them;

what content will retain them.

SCHUFA demonstrates the broader European judicial concern with automated systems that materially influence human decisions or opportunities.

It should therefore be used as an analogical authority, not described as a direct attention-economy case.

10. Google Spain

Google Spain SL, Google Inc. v AEPD and Mario Costeja González, C-131/12, CJEU, 2014

The CJEU recognized important data-protection rights concerning search-engine processing and the right to request removal of certain search results.

Principle

Digital intermediaries exercising substantial control over information can have significant responsibilities under data-protection law.

Attention-economy relevance

The case illustrates the legal importance of:

information intermediaries;

personal data;

algorithmic indexing;

individual control over digital identity.

It is not a direct attention-economy case but is highly relevant to platform power.

11. Nowak v Data Protection Commissioner

Nowak, C-434/16, CJEU, 2017

The CJEU interpreted "personal data" broadly.

Information relating to an individual can qualify as personal data even where it is not merely a traditional identifier.

Attention-economy relevance

Attention systems generate large amounts of behavioural information.

Data concerning:

preferences;

interactions;

assessments;

behavioural patterns;

can therefore have data-protection significance.

The case reinforces the principle that the concept of personal data should not be interpreted narrowly.

12. Orange România

Orange România SA, C-61/19, CJEU, 2020

The CJEU examined consent under the GDPR.

The Court emphasized that valid consent must be:

freely given;

specific;

informed;

unambiguous.

Attention-economy relevance

Attention platforms frequently use interface design to obtain consent.

A user clicking through a complicated or preconfigured interface does not necessarily provide legally valid consent.

This is crucial to the regulation of:

tracking;

personalized advertising;

behavioural profiling;

cookies;

recommendation systems.

13. Planet49

Planet49, C-673/17, CJEU, 2019

The CJEU considered consent for cookies and the use of pre-ticked boxes.

Principle

Consent cannot simply be inferred from a user's failure to deselect a pre-ticked option.

Attention-economy relevance

This is directly important to the design of attention-based platforms.

A platform cannot assume:

"The user did not object, therefore the user consented."

The architecture of the interface must facilitate genuine choice.

14. Wirtschaftsakademie Schleswig-Holstein

Wirtschaftsakademie Schleswig-Holstein, C-210/16, CJEU, 2018

The case concerned a Facebook fan page and responsibility for processing personal data.

The CJEU recognized circumstances in which an operator could be a joint controller with the platform.

Attention-economy relevance

Attention is frequently monetized through collaborative ecosystems involving:

platforms;

advertisers;

website operators;

analytics companies;

publishers.

Responsibility cannot necessarily be avoided merely because one actor does not operate the underlying algorithm.

15. Fashion ID

Fashion ID GmbH & Co. KG v Verbraucherzentrale NRW, C-40/17, CJEU, 2019

The case concerned the use of a social-media plugin and joint responsibility for certain processing.

Principle

A business can become involved in personal-data processing even when it does not itself control the entire technological system.

Attention-economy relevance

The attention economy operates through complex chains:

publisher → plugin → platform → advertiser → analytics provider.

Legal responsibility can therefore extend beyond the central platform.

16. Addictive or Manipulative Design

A particularly controversial issue is whether platforms intentionally design systems to maximize:

time spent;

repeat visits;

notifications;

compulsive engagement.

Potentially relevant techniques include:

Infinite scroll

Content never reaches a natural stopping point.

Autoplay

The next piece of content begins automatically.

Variable rewards

The user does not know what the next interaction will produce.

Streak mechanisms

Users are encouraged to return continuously to avoid losing progress.

Push notifications

Frequent notifications encourage repeated engagement.

Personalized recommendations

Algorithms select content likely to maximize engagement.

None of these features is automatically unlawful.

The legal issue depends on:

purpose;

implementation;

transparency;

effect;

target audience;

vulnerability;

data processing;

commercial context.

17. Digital Services Act and Dark Patterns

The DSA contains an important prohibition concerning dark patterns.

Platforms should not design or operate interfaces in ways that deceive or manipulate users or materially distort their ability to make free and informed decisions.

This is particularly relevant to:

consent interfaces;

subscription systems;

advertising choices;

recommender systems;

privacy settings;

account termination.

The DSA therefore moves attention-economy regulation toward design governance.

18. Protection of Children

Children are particularly important in attention-economy regulation.

European law increasingly recognizes that children may be:

more susceptible to persuasive design;

less able to understand profiling;

more vulnerable to targeted advertising;

less capable of appreciating long-term consequences.

Regulatory concerns include:

age-appropriate design;

targeted advertising;

profiling;

addictive features;

recommender systems;

harmful content;

privacy.

The relevant legal framework can involve:

GDPR;

DSA;

EU consumer law;

national child-protection law;

Article 8 ECHR;

Charter rights.

19. Fundamental Rights

Attention-economy regulation implicates several Charter and Convention rights.

Article 7 EU Charter

Respect for:

private life;

family life;

communications.

Article 8 EU Charter

Protection of personal data.

Article 11 EU Charter

Freedom of expression and information.

Article 38 EU Charter

Consumer protection.

Article 24 EU Charter

Rights of the child.

Article 47 EU Charter

Effective judicial protection.

The regulatory challenge is therefore to protect users without unnecessarily restricting:

speech;

information;

innovation;

legitimate commercial activity.

20. Attention Economy and Freedom of Expression

Platforms are not merely commercial environments.

They also facilitate:

political debate;

journalism;

artistic expression;

social interaction;

access to information.

Therefore, regulating recommendation algorithms can implicate freedom of expression.

A regulatory measure may need to distinguish between:

regulating manipulation

and

controlling lawful speech.

This distinction is essential under Article 10 ECHR and Article 11 of the Charter.

21. Competition Law

Attention is also an economic resource.

Platforms may compete for:

user time;

advertising revenue;

data;

engagement;

market share.

Dominant platforms may potentially use their market power to:

preference their own services;

restrict rivals;

exploit data advantages;

impose unfair conditions;

prevent interoperability;

disadvantage competing platforms.

EU competition law therefore complements consumer and data-protection regulation.

22. DMA and Attention Economy

The Digital Markets Act is particularly relevant to large digital platforms designated as gatekeepers.

Its objective is not simply to regulate attention, but to address structural power held by very large digital platforms.

Relevant issues can include:

self-preferencing;

combining personal data across services;

interoperability;

user choice;

access to data;

restrictions on business users.

The DMA and DSA therefore address different but overlapping aspects of digital-platform power.

23. Competition-Law Case: Google Shopping

Google and Alphabet v Commission, C-48/22 P

The broader Google Shopping litigation concerns Google's conduct in search markets and the treatment of competing comparison-shopping services.

Principle

Dominant digital platforms can be subject to competition-law scrutiny where their conduct disadvantages competitors.

Attention-economy relevance

Search rankings determine:

what users see;

what users click;

where attention flows;

which businesses receive visibility.

This demonstrates that algorithmic visibility can itself be an economically significant resource.

24. Competition-Law Case: Google Android

Google LLC v Commission, T-604/18

The case concerned Google's Android ecosystem and competition concerns surrounding mobile search and related services.

Attention-economy relevance

Control over:

operating systems;

default settings;

search;

app distribution;

can influence the allocation of user attention.

Again, this is an analogical competition-law authority, not a case directly establishing an "attention economy" cause of action.

25. Platform Liability and User Content

Attention platforms often host user-generated content.

Important questions include:

when does platform liability arise?

how should illegal content be handled?

what due-process safeguards apply?

how should moderation interact with freedom of expression?

Delfi AS v Estonia

The ECtHR examined intermediary responsibility for unlawful user comments.

The Court accepted liability in the specific circumstances.

MTE and Index.hu v Hungary

The Court later emphasized the importance of freedom of expression and contextual proportionality in intermediary cases.

Principle

Platform regulation must balance:

protection from unlawful content

against

freedom of expression.

26. Targeted Advertising

Targeted advertising is one of the main economic foundations of the attention economy.

A simplified model is:

behavioural data → profile → predicted interests → targeted advertisement → user response → revenue

Legal questions include:

Was the data lawfully obtained?

Was valid consent given?

Is the purpose sufficiently transparent?

Is profiling lawful?

Is the advertising misleading?

Are children targeted?

Are sensitive categories involved?

Is the advertising discriminatory?

Does the platform provide meaningful control?

27. Data Protection and Advertising

The CJEU's GDPR jurisprudence indicates that companies cannot simply rely on technical complexity to avoid responsibility.

Relevant authorities include:

Google Spain

Wirtschaftsakademie

Fashion ID

Orange România

Planet49

Nowak

Together they reinforce principles of:

accountability;

transparency;

meaningful consent;

broad personal-data protection;

responsibility across processing chains.

28. Attention Economy and Discrimination

Algorithmic attention allocation can potentially discriminate.

For example, an advertising system might show:

employment advertisements;

housing advertisements;

credit offers;

differently according to protected characteristics or proxies.

Relevant European equality jurisprudence includes:

CHEZ Razpredelenie Bulgaria, C-83/14

The CJEU recognized that apparently neutral practices can raise discrimination issues where they disproportionately affect protected groups.

D.H. and Others v Czech Republic

The ECtHR addressed indirect discrimination in education.

Biao v Denmark

The Court examined discriminatory treatment under Article 14.

These cases are not direct attention-economy cases but provide principles relevant to algorithmic targeting and unequal digital outcomes.

29. Attention Economy and Privacy

The attention economy creates a particularly significant privacy problem because the value of the user may derive from behavioural prediction.

The platform may not simply know:

"What did the user do?"

It may attempt to infer:

"What will the user probably do next?"

This distinction is legally important.

Predictive profiling may create:

privacy risks;

autonomy concerns;

discrimination risks;

manipulation concerns.

30. Autonomy as a Regulatory Concern

European law increasingly emphasizes meaningful user choice.

A legally meaningful choice should not be defeated by:

confusing interfaces;

coercive design;

repeated prompts;

hidden alternatives;

misleading information;

unnecessary complexity.

This is particularly important because the attention economy often monetizes behavioural influence rather than merely information.

31. Attention Economy and Consumer Autonomy

Consumer law generally assumes that consumers should be able to make informed economic decisions.

Attention-based design becomes problematic where it:

exploits a vulnerability;

materially distorts economic behaviour;

conceals commercially relevant information;

uses deceptive design;

creates artificial urgency;

makes cancellation unnecessarily difficult.

Thus, the legal concern is not:

"The company persuaded the consumer."

Persuasion is generally legitimate.

The concern is:

Did the commercial practice materially distort the consumer's ability to make a free and informed transactional decision?

32. Important Case: VKI v Amazon EU

Verein für Konsumenteninformation v Amazon EU Sàrl, C-191/15

The CJEU considered consumer contractual practices and jurisdictional issues concerning Amazon.

Attention-economy relevance

Large online platforms operate through standardized consumer contracts, and European law scrutinizes their terms and consumer-protection practices.

The case is not directly about attention manipulation, but it illustrates the broader principle that platform contracts are subject to mandatory consumer protections.

33. Regulatory Liability vs Private Damages

An important distinction is necessary.

A regulator may determine:

"The platform violated a digital-services obligation."

That does not automatically mean:

"Every affected user is entitled to damages."

A private damages claim may require:

an applicable cause of action;

breach;

causation;

legally recognized damage;

standing;

limitation compliance.

Thus:

regulatory violation ≠ automatic civil liability.

34. Remedies

Potential remedies include:

Regulatory

administrative fines;

compliance orders;

risk assessments;

corrective measures;

restrictions on processing;

advertising restrictions.

Consumer remedies

contract cancellation;

restitution;

injunctions;

damages where available;

cessation of unfair practices.

Data-protection remedies

access;

correction;

deletion where applicable;

restriction;

objection;

compensation;

regulatory complaints.

Competition remedies

behavioural remedies;

structural remedies in appropriate cases;

fines;

prohibition decisions.

Judicial remedies

injunction;

declaration;

damages;

judicial review.

35. Important Case-Law Table

36. The Six Most Important Cases

For a short academic answer, the strongest six are:

1. Google Spain — C-131/12

Establishes important principles of digital intermediary responsibility and personal-data protection.

2. Wirtschaftsakademie — C-210/16

Shows that platform-related actors may share responsibility for processing.

3. Fashion ID — C-40/17

Demonstrates responsibility within the wider digital advertising ecosystem.

4. Planet49 — C-673/17

Important for genuine consent and interface-based data collection.

5. Orange România — C-61/19

Reinforces the requirements of free, specific, informed and unambiguous consent.

6. SCHUFA — C-634/21

Illustrates the importance of regulating consequential automated processing.

For a broader attention-economy analysis, Delfi AS, MTE and Index.hu, and Google Shopping should also be included.

37. Regulatory Model

Attention-economy regulation can be understood as a five-layer model:

Layer 1 — Data

GDPR

Controls collection and processing of behavioural information.

Layer 2 — Interface

Consumer law + DSA

Controls deceptive and manipulative design.

Layer 3 — Algorithm

GDPR + DSA + sectoral rules

Addresses profiling, recommender systems and algorithmic transparency.

Layer 4 — Market Power

Competition law + DMA

Addresses structural power over digital markets and user attention.

Layer 5 — Fundamental Rights

EU Charter + ECHR

Protects:

privacy;

data protection;

expression;

consumer interests;

equality;

children's rights;

effective judicial protection.

38. Practical Legal Test

When analysing an attention-economy dispute, ask:

Step 1

What exactly is the platform doing?

Step 2

Does it involve personal data?

Step 3

Is profiling taking place?

Step 4

What is the legal basis for processing?

Step 5

Was consent genuinely obtained?

Step 6

Does the interface manipulate or materially distort user choice?

Step 7

Is the user a child or otherwise vulnerable?

Step 8

Does the system create discriminatory effects?

Step 9

Does the platform possess significant market power?

Step 10

Does the activity affect freedom of expression?

Step 11

What regulatory framework applies?

Step 12

Is there an independent private cause of action for damages?

39. Major Legal Principles

The European approach can be summarized through several principles.

Principle 1 — Attention is not itself legally protected property

A company does not generally owe compensation simply because it captures a person's attention.

Principle 2 — Data used to capture attention can be regulated

Behavioural data and profiling can fall within GDPR.

Principle 3 — Consent must be genuine

Planet49 and Orange România are particularly important.

Principle 4 — Responsibility can extend across platform ecosystems

Wirtschaftsakademie and Fashion ID demonstrate this.

Principle 5 — Algorithmic systems can have legally significant effects

SCHUFA illustrates this principle.

Principle 6 — Platform regulation must respect expression

Delfi and MTE and Index.hu show the importance of balancing intermediary responsibility with freedom of expression.

Principle 7 — Competition law can regulate control over digital visibility

Digital-platform conduct can be examined where algorithmic or contractual practices distort competition.

Principle 8 — Regulatory violation does not automatically create damages

A separate legal basis for compensation may be required.

40. Conclusion

Attention Economy Regulation in Europe is an emerging cross-disciplinary field rather than a single cause of action. Its purpose is not to prevent businesses from attracting users' attention. Rather, European law regulates the methods by which attention is captured, measured, personalized and monetized, particularly where those methods involve personal-data processing, manipulation, consumer deception, discrimination, market power, or significant interference with fundamental rights.

The regulatory structure can be summarized as:

GDPR → controls behavioural data and profiling;
consumer law → controls unfair and manipulative commercial practices;
DSA → regulates platform design, advertising, recommender systems and systemic risks;
DMA/competition law → addresses structural platform power;
Charter and ECHR → protect privacy, autonomy, expression, equality and effective remedies.

The most important authorities are Google Spain, Wirtschaftsakademie, Fashion ID, Nowak, Planet49, Orange România and SCHUFA, supplemented by Delfi AS v Estonia, MTE and Index.hu v Hungary, CHEZ and Google Shopping.

The central legal question is therefore not simply whether a platform successfully captured a user's attention, but whether it did so through a legally permissible combination of data processing, interface design, algorithmic personalization, commercial persuasion and market power, while respecting the user's capacity to make informed and autonomous choices.