Competition Concerns in Due Diligence Platforms

1. Introduction

A due diligence platform is a digital system used by parties to a proposed merger, acquisition, investment, financing, joint venture, or corporate restructuring to exchange and review confidential information. Modern platforms commonly operate as virtual data rooms containing financial statements, customer information, pricing data, contracts, supplier arrangements, intellectual property, employee information, business plans, technical data and commercially sensitive information.

From a competition-law perspective, these platforms are important because due diligence necessarily involves the transfer of information between parties that may be actual or potential competitors. The platform itself may be technologically neutral, but the manner in which information is uploaded, accessed, aggregated, analysed, retained or transferred can create competition concerns.

The principal issues are:

1. exchange of competitively sensitive information;
2. premature implementation or gun jumping;
3. facilitation of collusion through a common information infrastructure;
4. acquisition of commercially sensitive datasets;
5. exclusionary conduct by dominant due-diligence platforms;
6. discriminatory access or interoperability restrictions;
7. algorithmic processing of competitor information;
8. confidentiality and clean-team failures; and
9. use of due-diligence information after a transaction fails.

The European Commission expressly recognises that data rooms and confidentiality rings can be used to restrict access to sensitive information and facilitate merger investigations.

2. Relevant Competition-Law Framework

A. Anticompetitive agreements and information exchange

Information exchanged through a due-diligence platform may become problematic where it facilitates coordination between competitors.

Under Article 101 TFEU, Section 1 of the Sherman Act, and comparable national provisions, information concerning matters such as:

• current and future prices;
• margins;
• costs;
• customer-specific terms;
• bids;
• production volumes;
• capacity;
• strategic plans;
• discounts;
• market shares; and
• future commercial behaviour

may constitute competitively sensitive information.

The EU Horizontal Guidelines explain that information exchange can artificially increase transparency between competitors and facilitate coordination, including by allowing competitors to monitor deviations from a coordinated outcome.

Thus, the fact that information is exchanged for a legitimate M&A due-diligence purpose does not automatically eliminate competition-law risk.

3. Due-Diligence Information Between Competitors

The most important concern arises when:

Buyer and target are competitors and the virtual data room contains information that could influence the buyer's independent competitive behaviour.

For example, suppose Company A seeks to acquire competing Company B. The data room contains:

• B's customer-specific prices;
• individual customer profitability;
• planned price increases;
• future capacity;
• sales forecasts;
• upcoming tenders;
• strategic expansion plans.

If A gains unrestricted access before completion, the information may influence A's market behaviour even if the transaction ultimately fails.

Risk

The competition authority may ask:

• Was access genuinely necessary?
• Who accessed the information?
• Were clean teams established?
• Was commercially sensitive information aggregated?
• Were future prices disclosed?
• Was information available only to external advisers?
• Could operational employees see it?
• Was the information used after the transaction collapsed?

4. Gun-Jumping Concerns

A second major issue is premature implementation of a transaction.

Merger-control systems generally distinguish between:

Due diligence

and

actual control or implementation of the transaction.

A buyer should not use a data-room process to obtain operational control over the target before legally permitted.

Examples include:

• directing the target's pricing;
• approving customers;
• controlling employees;
• determining suppliers;
• influencing bids;
• requiring approval for ordinary business decisions;
• accessing operational systems unnecessarily;
• integrating sales strategies before closing.

The EU merger framework treats merger control as a separate regime governing concentrations, while the Commission's merger practice also emphasises the importance of appropriate procedures and information handling.

5. Information Exchange as a Stand-Alone Competition Problem

Due-diligence platforms can potentially become mechanisms for information exchange even where the underlying acquisition is not completed.

For example:

Competitor A → due-diligence platform → competitor B

If A and B are exchanging competitively sensitive information outside what is objectively necessary for evaluating a transaction, the platform may facilitate an independent Article 101/antitrust problem.

This is especially important where the transaction is:

• abandoned;
• prohibited;
• withdrawn;
• delayed;
• subject to regulatory remedies; or
• ultimately not completed.

The commercial justification for exchanging information becomes weaker once the transaction no longer provides a genuine basis for the exchange.

6. Six Important Case Laws

1. T-Mobile Netherlands BV v Raad van bestuur van de Nederlandse Mededingingsautoriteit, C-8/08

Principle

The Court of Justice recognised the competition significance of exchanges of commercially sensitive information between competitors.

An exchange that reduces uncertainty concerning competitors' future conduct may constitute a restriction of competition depending upon its purpose and context.

Relevance to due-diligence platforms

A data room involving competing companies should therefore prevent unnecessary disclosure of information concerning:

• future pricing;
• intended commercial strategy;
• future capacity;
• customer allocation;
• competitive responses.

Lesson: A legitimate business purpose does not automatically make every exchange of sensitive information lawful.

2. Dole Food Company, Inc. v European Commission, C-286/13 P

Principle

The case concerned exchanges of information between competitors and the extent to which information concerning commercial parameters could reduce strategic uncertainty.

The Court upheld the importance of examining whether information exchanges could influence competitors' understanding of market conditions and facilitate coordination.

Relevance

A due-diligence platform should distinguish between:

historical, aggregated information

and

current/future, disaggregated information.

The latter generally creates greater competition risk.

For example:

3. Eturas UAB and Others, C-74/14

Principle

The case involved an electronic platform through which a common commercial parameter was communicated to participating businesses.

The Court examined how a digital platform could facilitate coordinated behaviour among independent undertakings.

Relevance

This case is particularly significant for modern due-diligence platforms because it demonstrates that digital architecture does not neutralise competition law.

A platform may facilitate:

• common pricing parameters;
• common restrictions;
• standardised commercial conduct;
• monitoring of competitors;
• automated implementation of market strategies.

Therefore, a due-diligence provider should not design functionality that effectively permits competitors to observe or coordinate commercially sensitive behaviour.

4. Asnef-Equifax v Asociación de Usuarios de Servicios Bancarios, C-238/05

Principle

The Court considered the competitive effects of information-sharing systems, particularly credit-information arrangements.

The judgment illustrates that information sharing must be assessed in light of:

• the structure of the market;
• the nature of the information;
• market transparency;
• concentration;
• access conditions; and
• whether competition is facilitated or restricted.

Relevance

Due-diligence platforms increasingly contain large datasets.

A platform that aggregates information from multiple competitors may therefore create a separate competition issue if the aggregated information enables market participants to understand individual competitors' commercially sensitive conduct.

5. Marine Harvest ASA v European Commission, T-704/14

Principle

The Marine Harvest litigation concerned the EU merger-control concept of gun jumping and premature implementation.

The case is important for the proposition that actions taken before the required merger clearance can create independent competition-law consequences.

Relevance to due diligence

A virtual data room should remain a due-diligence mechanism, not become an operational-control mechanism.

Accordingly, access should not enable the acquiring party to:

• direct the target;
• determine its pricing;
• control its commercial strategy;
• obtain operational control;
• interfere with ordinary competitive decision-making.

The distinction between obtaining information and exercising control is therefore fundamental.

6. Altice Europe NV v European Commission, T-425/18

Principle

The General Court examined restrictions imposed during the period before completion/clearance of a transaction and confirmed the significance of the EU's standstill obligation.

The case is a major modern reference point for gun-jumping.

Relevance to due-diligence platforms

A buyer cannot assume that extensive contractual rights or information access are harmless merely because the transaction has not formally closed.

A platform's permissions should therefore be designed so that information access does not translate into premature influence over competitive decisions.

7. Seventh Relevant Case: United States v. Container Corporation of America

United States v. Container Corporation of America, 393 U.S. 333 (1969)

Principle

The U.S. Supreme Court examined an information-exchange arrangement involving competitors.

The case remains an important authority concerning the antitrust risks of exchanging competitively significant information among rivals.

Relevance

A due-diligence platform connecting competing firms should avoid becoming an information-exchange channel that permits rivals to determine or monitor:

• prices;
• output;
• customer terms;
• competitive intentions.

The risk becomes particularly significant in concentrated markets.

8. Data Aggregation and Algorithmic Risks

Modern due-diligence platforms increasingly use:

• AI document review;
• automated contract analysis;
• predictive analytics;
• benchmarking;
• pricing analysis;
• customer segmentation;
• machine-learning models.

These technologies create an additional competition concern.

Suppose a platform receives confidential information from ten competing companies and uses it to generate:

"Industry pricing recommendations."

The platform may potentially transform individually confidential information into an analytical product that reduces competitive uncertainty.

The EU's Horizontal Guidelines specifically recognise that algorithms can increase market transparency and can be used to monitor competitors' prices and detect deviations from coordinated behaviour.

9. Dominance and Due-Diligence Platforms

A large virtual-data-room provider may itself become subject to abuse-of-dominance rules where it holds substantial market power.

Under Article 102 TFEU, dominant undertakings must not engage in abusive exclusionary conduct. The Commission's current Article 102 framework expressly addresses exclusionary behaviour by dominant undertakings.

Potential problems include:

A. Refusal to provide access

A dominant platform may refuse access to a rival without adequate justification.

B. Discriminatory access

The platform could offer:

• better functionality;
• faster processing;
• API access;
• lower prices

to selected customers while disadvantaging competing users.

C. Self-preferencing

If the platform operates additional M&A or financial-analysis services, it could potentially favour its own downstream services.

D. Bundling

The platform could require customers to purchase unrelated services as a condition of accessing essential data-room functionality.

E. Interoperability restrictions

A platform might prevent customers from exporting their information or integrating with competing compliance, analytics or document-management systems.

10. Access to Competitively Sensitive Data

Due-diligence platforms may hold information relating to:

• customers;
• suppliers;
• pricing;
• margins;
• costs;
• contracts;
• employees;
• patents;
• R&D;
• future investments;
• tender participation;
• production capacity.

The competition concern is not simply whether the information is confidential.

The more important question is:

Could access to the information reduce competitive uncertainty or influence independent competitive decision-making?

Confidentiality law and competition law therefore overlap but are not identical.

11. Clean Teams

A particularly important compliance mechanism is the clean team.

A clean team consists of individuals who can review sensitive information but are prevented from transmitting competitively sensitive information to operational personnel who make market decisions.

For example:

Target data

↓

Clean team

↓

Aggregated analysis

↓

Business decision-makers

This is safer than:

Target data

↓

Acquiring company's sales director

↓

Acquiring company's pricing strategy

The European Commission itself recognises restricted-access data rooms and confidentiality rings as mechanisms for protecting sensitive information while permitting necessary review.

12. Information That Requires Particular Caution

The assessment remains fact-specific.

13. Failed Transactions

A particularly overlooked problem occurs when a transaction fails.

Suppose:

1. Company A and Company B are competitors.
2. A proposes to acquire B.
3. B uploads sensitive information.
4. A's commercial team accesses the information.
5. Regulatory approval is refused.
6. The transaction collapses.
7. A retains the information.

The competition concern does not necessarily disappear merely because the acquisition failed.

A prudent platform should therefore provide:

• automatic access termination;
• deletion protocols;
• audit trails;
• download restrictions;
• screenshot controls where appropriate;
• post-transaction confidentiality obligations;
• certification of destruction;
• continuing clean-team restrictions.

14. Platform Design as a Competition-Compliance Tool

A well-designed due-diligence platform can reduce competition risks through:

1. Role-based access

Different users receive different information permissions.

2. Document classification

Documents can be labelled:

• public;
• confidential;
• commercially sensitive;
• highly restricted.

3. Clean-team access

Sensitive documents are accessible only to designated personnel.

4. Aggregation

Customer-level information can be converted into aggregated datasets.

5. Redaction

Sensitive pricing and customer information can be removed.

6. Time restrictions

Access can automatically expire.

7. Audit trails

The system records:

• who opened a document;
• when it was accessed;
• whether it was downloaded;
• who shared it.

8. No operational permissions

The buyer should not be able to use the platform to direct the target's ordinary business operations.

15. Competition Risks in Different Transaction Types

A. Horizontal acquisition

Highest information-exchange risk

because buyer and target compete directly.

B. Vertical acquisition

Risk may arise through:

• foreclosure;
• access to rivals' information;
• discriminatory supply;
• customer information.

C. Conglomerate transaction

Concerns may involve:

• tying;
• bundling;
• data combination;
• leveraging market power.

D. Private-equity acquisition

Risks can arise where an investment group controls multiple portfolio companies competing in the same market.

Information barriers between portfolio companies can therefore become important.

E. Joint venture

Due diligence can expose future competitors to each other's:

• costs;
• capacity;
• prices;
• technology;
• customers.

The platform should therefore distinguish genuine JV information requirements from unnecessary competitor disclosure.

16. Competition Law and Cybersecurity

Cybersecurity failures can also become competition-law relevant.

Suppose a platform suffers a breach and sensitive information belonging to several competitors becomes available to another competitor.

Potential consequences can include:

• confidentiality violations;
• contractual liability;
• regulatory investigation;
• competition-law scrutiny;
• misuse of commercially sensitive information.

Accordingly, cybersecurity should be considered part of competition compliance where sensitive competitor information is processed.

17. Role of the Platform Operator

The platform operator may be only a neutral technology provider, but its role becomes more complicated if it:

• recommends pricing;
• benchmarks competitors;
• aggregates competitor information;
• provides market intelligence;
• controls access selectively;
• operates an industry-wide information exchange;
• supplies algorithmic recommendations based on competitor data.

The more the platform moves from secure document hosting toward commercial information processing, the greater the potential competition-law significance.

18. Compliance Framework

A practical compliance model can be expressed as follows:

Transaction proposed

↓

Identify whether parties are competitors

↓

Classify information

↓

Identify competitively sensitive information

↓

Determine necessity of disclosure

↓

Redact / aggregate where possible

↓

Establish clean team

↓

Restrict operational employees

↓

Create access logs

↓

Prevent premature control

↓

Monitor downloads and sharing

↓

Terminate access after transaction ends

↓

Delete/return sensitive information

↓

Maintain compliance record

19. Key Legal Principles from the Case Law

20. Conclusion

Due-diligence platforms occupy an unusual position in competition law. The platform itself is not inherently anticompetitive; indeed, secure data rooms can make legitimate transactions safer and more efficient. The principal risk arises from what information is placed on the platform, who can access it, how it is processed, and whether access affects competitive decision-making.

The central safeguards are:

• necessity-based disclosure;
• clean teams;
• aggregation and redaction;
• restricted access;
• prohibition on premature control;
• detailed audit trails;
• algorithmic safeguards;
• post-transaction deletion; and
• separation of competitively sensitive information from operational decision-makers.

The case law from T-Mobile Netherlands, Dole, Eturas, Asnef-Equifax, Marine Harvest, Altice and Container Corporation demonstrates that competition law increasingly focuses not merely on traditional agreements but also on the information architecture through which competitors interact. This is especially significant as due-diligence platforms evolve from simple virtual data rooms into AI-powered information and analytics systems.