Attention Market Regulation .
Attention Market Regulation in Europe
1. Meaning of Attention Market Regulation
Attention Market Regulation refers to the body of European legal rules governing markets in which companies compete to capture, retain, measure, personalise, and monetise human attention.
The “attention market” is not a formally defined single legal market in EU law. It is an analytical concept covering businesses whose economic value depends substantially on user attention, engagement, behavioural data, advertising exposure, recommendations, or time spent on a digital service.
Examples include:
social-media platforms;
search engines;
video-sharing services;
streaming platforms;
online marketplaces;
mobile applications;
digital advertising networks;
recommender systems;
news aggregators;
gaming platforms;
influencer platforms;
short-video services;
attention-based subscription services; and
platforms using behavioural profiling to optimise engagement.
The central legal question is:
When does competition for human attention become sufficiently manipulative, exploitative, privacy-invasive, discriminatory, or anti-competitive to justify legal intervention?
European law approaches this question through several overlapping regimes rather than through one “Attention Market Act.”
2. Core Characteristics of an Attention Market
An attention market generally contains five economic stages:
User → Data Collection → Profiling → Recommendation/Advertising → Attention Monetisation
For example:
a user accesses a free platform;
the platform observes clicks, searches, viewing duration and interactions;
algorithms create behavioural profiles;
content and advertising are personalised;
increased engagement generates advertising revenue or other economic value.
This creates several potential legal relationships:
platform–consumer;
platform–advertiser;
platform–competitor;
platform–content creator;
platform–employee;
platform–data subject;
platform–public authority.
Consequently, a single attention-market practice can trigger competition law, consumer law, data protection law, fundamental-rights law and platform regulation simultaneously.
3. European Legal Framework
There is no single EU statute called “Attention Market Regulation.” The framework is fragmented.
A. Digital Services Act
The Digital Services Act (DSA) is particularly important.
It regulates:
recommender systems;
advertising transparency;
dark patterns;
profiling;
systemic risks;
protection of minors;
platform transparency;
very large online platforms and search engines;
systemic manipulation and behavioural risks.
Its dark-pattern rules are especially relevant because certain interface designs can influence users toward decisions they would otherwise not make.
B. GDPR
The GDPR regulates the data infrastructure supporting many attention markets.
Important provisions include:
Article 5 — principles of processing;
Article 6 — lawful bases;
Article 9 — special-category data;
Articles 12–14 — transparency;
Article 15 — access;
Article 21 — objection;
Article 22 — automated decision-making;
Article 25 — data protection by design and default;
Article 35 — DPIAs;
Article 82 — compensation.
The crucial issue is that attention optimisation frequently depends upon personal-data processing.
C. EU Consumer Protection Law
The Unfair Commercial Practices Directive addresses:
misleading practices;
aggressive practices;
material distortions of consumer behaviour;
unfair omissions;
manipulative commercial techniques.
Attention-market regulation therefore intersects with the concept of consumer autonomy.
D. Competition Law
Articles 101 and 102 TFEU can apply where attention-market practices involve:
exclusionary conduct;
abuse of dominance;
tying;
self-preferencing;
discriminatory access;
exploitative conduct;
data advantages;
foreclosure of competing platforms;
restrictions on advertisers or publishers.
The Digital Markets Act adds ex ante obligations for designated gatekeepers.
E. Fundamental Rights
The Charter of Fundamental Rights is also important:
Article 7 — private and family life;
Article 8 — personal-data protection;
Article 11 — expression and information;
Article 16 — freedom to conduct a business;
Article 21 — non-discrimination;
Article 24 — children's rights;
Article 38 — consumer protection;
Article 47 — effective judicial protection.
The ECHR similarly protects:
privacy;
expression;
property;
equality;
effective remedies.
4. Major Regulatory Questions
4.1 Is Attention Itself a Legal Asset?
Generally, no.
EU law does not ordinarily recognise an individual's attention as a proprietary asset comparable to land, shares or intellectual property.
However, the methods used to obtain attention can be regulated.
For example:
“The platform captured my attention for six hours”
does not by itself establish a legal claim.
But:
“The platform used unlawful profiling, deceptive design, prohibited manipulation, discriminatory targeting, or unlawful processing of personal data to achieve that result”
may engage several legal regimes.
5. Attention Capture Versus Attention Manipulation
A critical distinction is between:
Ordinary attention competition
Examples:
attractive content;
legitimate advertising;
personalised recommendations based on lawful processing;
subscription offers;
editorial ranking.
These are not automatically unlawful.
Potentially unlawful manipulation
Examples:
deceptive interface design;
hidden advertising;
exploitative targeting of children;
misleading countdown mechanisms;
manipulative consent interfaces;
unlawful behavioural profiling;
discriminatory targeting;
addictive design combined with legally recognised harm;
exploitation of sensitive personal information.
The legal assessment therefore focuses on method, context, user vulnerability, purpose, transparency, proportionality and resulting harm.
6. Dark Patterns
Dark patterns are particularly important to attention-market regulation.
They may include:
difficult cancellation;
preselected choices;
confusing consent buttons;
disguised advertisements;
false urgency;
repeated prompts;
emotional pressure;
misleading interface hierarchy;
intentionally complicated privacy choices.
The European regulatory approach is increasingly concerned with whether the interface substantially undermines autonomous consumer choice.
7. Behavioural Advertising
Attention markets frequently monetise users through targeted advertising.
Potential issues include:
whether personal data can lawfully be processed;
whether consent is valid;
whether legitimate interests apply;
whether special-category data are involved;
whether users understand the profiling;
whether children are targeted;
whether advertisements are adequately identified;
whether competition law is implicated;
whether the advertising system discriminates.
A platform cannot necessarily avoid GDPR requirements merely by describing profiling as “advertising optimisation.”
8. Recommender Systems
Recommendation algorithms can determine:
what users see;
which content receives visibility;
how frequently content appears;
which advertisements are displayed;
which creators receive traffic;
what products are promoted.
This gives recommendation systems substantial economic significance.
The DSA therefore treats recommender-system transparency and systemic-risk management as important regulatory subjects.
However:
Algorithmic recommendation is not automatically unlawful.
The legal question is whether the system complies with the relevant obligations concerning transparency, risk, data protection, consumer protection, discrimination and other applicable rules.
9. Competition in Attention Markets
Attention markets can create unusual competition problems.
A dominant platform may possess:
enormous user networks;
behavioural datasets;
advertising infrastructure;
recommendation technology;
app ecosystems;
search data;
cross-service data advantages.
These characteristics can create network effects and data advantages.
A competition-law investigation may therefore ask whether a platform uses dominance in one market to reinforce dominance in another.
10. The Data–Attention Feedback Loop
A particularly important economic phenomenon is:
More users → more data → better personalisation → more engagement → more advertising value → more resources → stronger platform → more users
This can produce a self-reinforcing competitive advantage.
European competition and data-protection law do not automatically prohibit this feedback loop.
But the loop becomes legally significant where it contributes to:
exclusionary conduct;
unlawful data combination;
discriminatory access;
exploitative terms;
privacy violations;
foreclosure of competitors.
11. Attention Markets and Children
Children receive particularly strong protection.
Relevant considerations include:
age-appropriate design;
profiling;
advertising;
recommendation systems;
addictive or manipulative interfaces;
collection of children's personal data;
harmful content;
behavioural targeting.
The legal justification is that children may have reduced ability to recognise commercial manipulation and may require heightened protection.
12. Attention Markets and Freedom of Expression
Regulation must also respect Article 10 ECHR and Article 11 Charter.
A platform's algorithm may determine the visibility of:
political speech;
journalism;
artistic expression;
public-interest information;
controversial opinions.
Consequently, regulation cannot simply assume:
“More engagement = better.”
Nor can regulators necessarily require platforms to eliminate all controversial or emotionally engaging content.
The regulatory challenge is to distinguish legitimate platform governance from unjustified interference with expression.
13. Attention Markets and Privacy
Attention optimisation often depends upon extensive behavioural observation.
Relevant information can include:
search history;
viewing history;
location;
device information;
contacts;
purchasing behaviour;
clicks;
pauses;
scrolling;
interaction frequency;
inferred interests;
emotional or behavioural characteristics.
Some inferences can become particularly sensitive where they reveal health, political opinions, religion, sexuality or other protected characteristics.
14. Attention Markets and Discrimination
Attention algorithms may also produce discriminatory outcomes.
For example:
certain jobs may be advertised predominantly to particular demographic groups;
financial products may be shown differently to different users;
housing advertisements may be selectively displayed;
political messages may be micro-targeted;
educational opportunities may be algorithmically prioritised.
European equality law may apply even where discrimination results from an automated system.
The use of an algorithm does not eliminate the responsibility of the company operating it.
15. Causation in Attention-Market Claims
One of the most difficult issues is causation.
A claimant may argue:
Design → increased engagement → behavioural effect → harm
But courts may ask:
Was the design unlawful?
Was the harm foreseeable?
Was there a protected legal interest?
Did the claimant actually suffer legally compensable damage?
Were there independent causes?
Did the user exercise meaningful choice?
Was the platform legally responsible for the relevant conduct?
Therefore, high engagement by itself does not establish civil liability.
16. Major European Case Law
1. Meta Platforms Ireland Ltd v Bundeskartellamt
C-252/21, CJEU, 4 July 2023
This is one of the most important cases for the intersection between data, advertising, platform power and competition law.
The case concerned Meta's processing and combination of personal data obtained from different services.
The CJEU addressed the relationship between competition law and GDPR requirements and considered circumstances in which a dominant undertaking's processing of personal data may be relevant to competition-law assessment.
Importance for attention markets
Attention markets frequently depend on combining data across services to improve profiling and advertising.
The case demonstrates that:
Data practices of a dominant platform can become relevant to competition law as well as data-protection law.
It is therefore a foundational authority for regulating data-driven attention markets.
2. Planet49
C-673/17, CJEU, 1 October 2019
The case concerned cookies and consent.
The CJEU emphasised the requirements surrounding valid user consent and rejected the assumption that a pre-ticked mechanism necessarily establishes valid consent.
Importance
Cookies and similar tracking technologies are frequently used to measure:
attention;
engagement;
browsing behaviour;
advertising effectiveness.
Planet49 therefore provides an important legal foundation for regulating the tracking infrastructure behind attention markets.
3. Orange România
C-61/19, CJEU, 11 November 2020
The CJEU considered whether consent was genuinely freely given in a data-processing context.
The judgment reinforces the principle that consent must represent a genuine, informed and voluntary choice.
Importance
Attention platforms often present users with interface choices concerning:
personalised advertising;
cookies;
tracking;
data combination.
A nominal “I agree” is not necessarily sufficient.
This case therefore has strong relevance to consent architecture in attention markets.
4. Österreichische Post
C-300/21, CJEU, 4 May 2023
The CJEU examined compensation under Article 82 GDPR.
The Court clarified important principles concerning compensation for GDPR infringements, including the relationship between infringement and compensable damage.
Importance
Attention-market claims sometimes argue that unlawful tracking or profiling automatically creates a right to compensation.
The case demonstrates the need to distinguish:
GDPR infringement → damage → causation → compensation.
An unlawful processing practice does not eliminate the need to establish compensable damage.
5. SCHUFA
Joined Cases C-26/22 and C-64/22, CJEU, 7 December 2023
The CJEU examined automated scoring and the GDPR's rules concerning automated decision-making.
The Court's reasoning is highly relevant to systems in which algorithmically generated scores have significant effects on individuals.
Importance for attention markets
The same analytical concerns arise where platforms generate:
behavioural scores;
engagement profiles;
consumer scores;
advertising profiles;
risk classifications.
The case reinforces the legal significance of algorithmic profiling rather than treating an algorithmic output as legally neutral.
6. Google Spain
C-131/12, CJEU, 13 May 2014
Google Spain concerned the responsibilities of a search-engine operator regarding personal information appearing in search results.
The CJEU recognised significant responsibilities for search-engine operators under European data-protection law.
Importance
Attention markets depend heavily upon:
search rankings;
visibility;
discoverability;
indexing;
algorithmic ordering.
The case demonstrates that intermediaries controlling digital visibility can have legal responsibilities concerning personal information.
7. Glawischnig-Piesczek v Facebook Ireland
C-18/18, CJEU, 3 October 2019
The CJEU considered injunctions concerning unlawful online content.
The case is important because it illustrates that online platforms can, in appropriate circumstances, be subjected to judicial measures concerning unlawful material.
Attention-market relevance
Recommendation and ranking systems determine whether content receives attention.
Consequently, platform responsibility can become particularly important where algorithmically amplified content is unlawful.
The case is not itself an “attention-market” judgment, but it is a significant platform-governance analogy.
8. Delfi AS v Estonia
Application No. 64569/09, ECtHR Grand Chamber, 16 June 2015
The ECtHR examined the responsibility of an online news portal for user-generated comments.
The Court considered the balance between:
freedom of expression;
protection of others;
platform responsibility.
Importance
Attention markets frequently involve platforms amplifying user-generated content.
Delfi illustrates that intermediary responsibility can arise without completely eliminating freedom of expression.
9. Big Brother Watch and Others v United Kingdom
Applications Nos. 58170/13, 62322/14 and 24960/15, ECtHR Grand Chamber, 25 May 2021
The case concerned large-scale interception and surveillance.
The ECtHR emphasised the importance of safeguards surrounding large-scale data collection.
Attention-market relevance
Although not an attention-economy case, it is relevant where platforms collect extensive behavioural information.
The broader principle is that large-scale data processing requires adequate legal safeguards.
10. Glukhin v Russia
Application No. 11519/20, ECtHR, 4 July 2023
The case involved facial-recognition technology and personal information.
The Court found significant privacy implications arising from technological identification and processing.
Importance
Modern attention markets increasingly combine:
behavioural profiling;
facial recognition;
location information;
biometric information;
automated identification.
Glukhin demonstrates the human-rights limits applicable to technologically intensive surveillance and profiling.
11. CHEZ Razpredelenie Bulgaria
C-83/14, CJEU, 16 July 2015
The CJEU addressed indirect discrimination and the relevance of apparently neutral practices that disproportionately affect a protected group.
Attention-market relevance
An apparently neutral recommendation or advertising algorithm may produce discriminatory outcomes through:
proxy variables;
geographic data;
behavioural data;
purchasing patterns.
CHEZ therefore provides an important analytical framework for algorithmic discrimination in attention allocation.
12. Test-Achats
C-236/09, CJEU, 1 March 2011
The CJEU examined differential treatment based on sex in insurance pricing.
Although not a digital-platform case, it illustrates the limits imposed by EU equality law on the use of apparently relevant statistical information.
Attention-market relevance
The principle is relevant where platforms use demographic or behavioural characteristics to differentiate:
advertising;
offers;
pricing;
visibility;
access to services.
Statistical usefulness does not automatically make discriminatory differentiation lawful.
17. Consolidated Case-Law Table
| Case | Legal area | Attention-market significance |
|---|---|---|
| Meta Platforms v Bundeskartellamt, C-252/21 | Competition + GDPR | Data combination, profiling and platform power |
| Planet49, C-673/17 | GDPR/ePrivacy | Tracking and consent |
| Orange România, C-61/19 | GDPR | Freely given consent and interface design |
| Österreichische Post, C-300/21 | GDPR damages | Compensation for unlawful data processing |
| SCHUFA, C-26/22 & C-64/22 | Automated decision-making | Algorithmic scoring and profiling |
| Google Spain, C-131/12 | Data protection | Digital visibility and personal information |
| Glawischnig-Piesczek, C-18/18 | Platform regulation | Platform responsibility and unlawful content |
| Delfi v Estonia | ECHR/platform liability | Intermediary responsibility and expression |
| Big Brother Watch v UK | Privacy/surveillance | Large-scale behavioural data |
| Glukhin v Russia | Privacy/biometrics | Technological profiling and identification |
| CHEZ, C-83/14 | Equality | Indirect/algorithmic discrimination |
| Test-Achats, C-236/09 | Equality | Limits on statistical differentiation |
18. Main Legal Tests
A European attention-market dispute can generally be analysed through the following sequence:
Step 1 — Identify the attention practice
Is the conduct:
advertising;
recommendation;
tracking;
ranking;
profiling;
behavioural targeting;
interface design;
content amplification?
Step 2 — Identify the affected interest
Does it affect:
privacy;
personal data;
consumer autonomy;
equality;
expression;
children's rights;
competition;
property;
economic interests?
Step 3 — Identify the responsible actor
Potential defendants include:
platform operator;
advertiser;
data broker;
software provider;
recommender-system provider;
app developer;
publisher;
intermediary.
Step 4 — Determine the applicable regime
Possible regimes include:
GDPR;
DSA;
DMA;
Articles 101/102 TFEU;
consumer protection;
equality law;
contract law;
tort/delict;
ECHR;
Charter;
product liability.
Step 5 — Examine proportionality and necessity
Ask:
Was the processing necessary?
Was the interface deceptive?
Was consent genuine?
Was the practice discriminatory?
Was the interference proportionate?
Were less intrusive alternatives available?
Step 6 — Establish harm
Potential harm includes:
financial loss;
privacy injury;
reputational damage;
discriminatory exclusion;
loss of opportunities;
psychological harm where legally recognised;
consumer economic loss.
Step 7 — Determine remedy
Possible remedies include:
injunction;
deletion;
rectification;
cessation of processing;
compensation;
administrative penalties;
regulatory orders;
contractual remedies;
competition remedies;
structural remedies.
19. Attention Market Regulation and the DMA
The Digital Markets Act is important because some attention markets exhibit strong gatekeeper characteristics.
Gatekeepers may control:
search;
social networking;
app distribution;
online advertising;
video-sharing;
operating systems;
marketplaces.
The DMA seeks to prevent certain practices before they become entrenched through network effects.
This creates a significant distinction:
Traditional competition law
Usually asks:
Has the undertaking engaged in conduct that infringes competition law?
Ex ante digital regulation
May ask:
Is the gatekeeper subject to specific obligations designed to prevent certain forms of market power from being exercised?
This is particularly relevant to attention markets because scale and network effects can rapidly reinforce platform power.
20. Attention Market Regulation and the DSA
The DSA approaches attention markets from a different perspective.
It focuses particularly on:
transparency;
platform accountability;
recommender systems;
advertising;
systemic risks;
dark patterns;
minors;
very large platforms.
The DSA therefore addresses the architecture through which attention is allocated, rather than simply asking whether the platform has market dominance.
21. Regulatory Conflict: Business Freedom vs User Protection
Attention-market regulation must balance competing interests.
A platform has legitimate interests in:
innovation;
advertising;
personalisation;
profitability;
recommendation;
product design.
Users have interests in:
privacy;
autonomy;
informed choice;
equality;
safety;
freedom of expression.
Article 16 of the Charter protects freedom to conduct a business, but that freedom is not absolute.
European law generally requires a proportionality analysis when competing rights and regulatory objectives collide.
22. Is “Addictive Design” Automatically Illegal?
No.
This is an important distinction.
A claimant generally cannot establish liability merely by proving:
“The application was highly engaging.”
The stronger claim is:
“The application employed a legally prohibited or otherwise unlawful method of influencing users, and that conduct caused legally recognised harm.”
The legal system therefore focuses on conduct and consequences, rather than attention duration alone.
23. Attention Market Regulation and AI
AI substantially increases the sophistication of attention markets.
AI can predict:
what a person will click;
how long they will watch;
which advertisement will work;
which emotional stimulus will produce engagement;
what content will maximise retention.
This creates potential issues involving:
automated profiling;
discrimination;
explainability;
privacy;
manipulation;
consumer protection;
recommender-system transparency.
The AI Act therefore interacts with the DSA, GDPR and competition rules rather than replacing them.
24. Corporate Liability
A platform cannot ordinarily avoid responsibility simply by arguing:
“The algorithm made the decision.”
The legal analysis normally identifies the human or corporate entity responsible for:
designing the system;
deploying it;
selecting objectives;
determining data practices;
configuring optimisation;
monitoring risks;
responding to known problems.
Algorithmic autonomy does not automatically create autonomous legal personality.
25. Defences
Potential defences include:
lawful consent;
legitimate interests;
contractual necessity;
statutory authorisation;
absence of damage;
lack of causation;
proportionality;
absence of discriminatory effect;
editorial or expressive freedom;
absence of dominance;
lack of anti-competitive effect;
intervening cause;
compliance with applicable regulatory requirements.
However, regulatory compliance with one legal regime does not automatically provide immunity under another.
For example:
GDPR compliance does not automatically establish compliance with competition law.
Likewise:
DSA compliance does not automatically eliminate contractual or tort liability.
26. Remedies
European attention-market regulation can produce several types of remedy.
Data-protection remedies
access;
deletion;
rectification;
restriction;
objection;
cessation of unlawful processing;
compensation.
Consumer remedies
cessation of unfair practices;
compensation;
contract remedies;
corrective information.
Competition remedies
behavioural commitments;
prohibition decisions;
fines;
access obligations;
non-discrimination requirements;
structural remedies in appropriate cases.
Platform remedies
modification of recommender systems;
transparency measures;
advertising restrictions;
risk mitigation;
interface changes.
Fundamental-rights remedies
judicial review;
declarations;
injunctions;
compensation;
procedural safeguards.
27. Important Distinction: Attention Market Regulation vs Attention Extraction Liability
These concepts overlap but are different.
Attention Market Regulation asks:
How should the market for human attention be structured and controlled?
Attention Extraction Liability asks:
When should a particular actor be legally liable for harmful extraction or manipulation of attention?
The first is primarily regulatory and systemic.
The second is primarily claim-based and remedial.
28. Important Distinction: Attention Market Regulation vs Competition Law
Attention-market regulation is broader than competition law.
A practice can potentially be unlawful because of:
privacy violations;
consumer manipulation;
discrimination;
children's protection;
platform-risk obligations;
even where it does not constitute an abuse of dominance.
Conversely, a competition violation may exist even where no individual user has suffered conventional personal injury.
29. Emerging Legal Issues
European attention-market regulation is likely to face increasingly difficult questions concerning:
AI-generated personalised persuasion;
emotional profiling;
biometric targeting;
political microtargeting;
children's engagement optimisation;
addictive interface design;
neurotechnology and attention measurement;
immersive virtual environments;
personalised pricing;
algorithmic advertising auctions;
cross-platform behavioural profiles;
recommender-system concentration;
AI-generated advertising;
manipulation of vulnerable consumers;
attention markets involving autonomous AI agents.
These areas do not necessarily have settled European case law yet.
30. Practical Legal Formula
For a European attention-market dispute, the following formula is useful:
Attention Practice → Data/Interface Mechanism → Market Power → User Vulnerability → Legal Duty → Unlawful Conduct → Causation → Damage → Remedy
A court or regulator will usually need to identify more than merely the fact that a company successfully captured attention.
31. Overall Legal Position
European law does not currently recognise a single autonomous legal field called “Attention Market Law.”
Instead, attention markets are regulated through a combination of:
GDPR;
Digital Services Act;
Digital Markets Act;
consumer protection law;
competition law;
ePrivacy principles;
AI regulation;
equality law;
contract and tort/delict law;
Charter rights; and
ECHR rights.
The most important emerging principle is that competition for attention is legitimate, but the techniques used to obtain attention are increasingly subject to legal scrutiny.
The strongest European regulatory concerns arise where attention optimisation involves unlawful personal-data processing, deceptive design, prohibited manipulation, discriminatory targeting, exploitation of children or vulnerable users, systemic platform risks, or abuse of market power.
The cases of Meta Platforms, Planet49, Orange România, Österreichische Post, SCHUFA, Google Spain, Glawischnig-Piesczek, Delfi, Big Brother Watch, Glukhin, CHEZ and Test-Achats collectively demonstrate how European law is developing toward greater accountability for the technological and economic systems through which human attention is captured and monetised.
Important qualification: there is not yet a mature body of European judgments expressly titled “Attention Market Regulation.” Several authorities above are therefore direct authorities on the underlying GDPR, platform, competition, consumer or equality principles, while others are analogical authorities used to construct the legal framework for attention markets.

comments