Competition Law and Future Regulation of Resilience Governance Systems

1. Introduction

Resilience Governance Systems are emerging institutional, technological and economic arrangements designed to keep markets functioning during shocks such as cyberattacks, supply-chain disruptions, infrastructure failures, geopolitical crises, energy shortages, pandemics, financial instability, or failures of dominant digital platforms.

A resilience-governance system may combine:

• multiple suppliers and alternative sourcing;
• interoperable digital infrastructure;
• data portability and data-sharing mechanisms;
• redundancy and backup capacity;
• emergency procurement arrangements;
• cybersecurity and continuity systems;
• multi-homing and switching mechanisms;
• common technical standards;
• contingency access to essential infrastructure;
• decentralized or distributed operational systems; and
• governance mechanisms capable of reallocating resources during disruptions.

Competition law traditionally focuses on price, output, market power, consumer welfare, exclusion and collusion. Future competition regulation will increasingly have to consider a second question:

Does the structure of a market permit effective competition to survive a major disruption, or has concentration created a single point of competitive failure?

This creates an important intersection between competition law, economic resilience, infrastructure regulation, digital regulation, cybersecurity and supply-chain governance.

2. Meaning of Resilience Governance Systems

A resilience governance system can be understood as a framework that enables an economic ecosystem to:

1. absorb shocks;
2. continue operating during disruption;
3. switch between suppliers or technologies;
4. recover after a failure;
5. prevent dominant firms from exploiting emergencies; and
6. preserve competitive alternatives over the long term.

For example, consider a cloud-computing market where a small number of providers control most infrastructure.

If customers cannot migrate workloads because of:

• proprietary APIs,
• data-transfer restrictions,
• contractual lock-ins,
• high switching costs, or
• technical incompatibility,

then a failure at one major provider may become simultaneously a resilience problem and a competition problem.

3. Why Competition Law Is Relevant

Competition law becomes relevant because resilience can be undermined by several familiar forms of anticompetitive conduct.

Major risks include:

Thus, competition itself can become a form of economic resilience.

4. The Core Regulatory Problem

Traditional competition analysis frequently asks:

Is the conduct likely to substantially lessen competition?

Future resilience regulation may additionally ask:

Does the conduct increase systemic dependency on a particular undertaking, infrastructure, technology, data source or governance architecture?

This does not mean that every concentration is unlawful.

Large-scale infrastructure can sometimes produce:

• economies of scale;
• lower costs;
• improved security;
• greater investment;
• standardization; and
• technological efficiency.

The regulatory challenge is therefore to distinguish efficient scale from dangerous competitive dependency.

5. Resilience as a Competition Parameter

Future competition analysis could recognize several dimensions of resilience.

A. Supplier diversity

A market with numerous independent suppliers may recover more easily from disruption than a market dependent upon one supplier.

B. Technological diversity

Competition between different technological architectures can prevent technological monocultures.

C. Switching capacity

Customers should be capable of moving between suppliers without unreasonable technical or contractual barriers.

D. Interoperability

Interoperability enables competing systems to continue functioning together.

E. Data portability

Users should be able to move commercially important data to competing services where appropriate.

F. Redundant infrastructure

Multiple independent infrastructure providers may reduce systemic failure risk.

G. Competitive entry

New entrants provide replacement capacity when established firms fail.

6. Major Competition-Law Case Laws

6.1 United Brands v Commission

United Brands Company v Commission, Case 27/76

The European Court of Justice examined abuse of dominance involving the banana market.

Principle

A dominant undertaking has special responsibilities not to undermine effective competition through abusive conduct.

Relevance to resilience governance

The principle can become important where a dominant infrastructure operator controls an unavoidable commercial gateway.

Future regulation could examine whether such an undertaking:

• selectively restricts access;
• discriminates between users;
• imposes exclusionary conditions;
• prevents alternative infrastructure from developing; or
• exploits dependency during periods of disruption.

The case therefore supplies an important foundation for regulating dominant infrastructure dependency.

7. Commercial Solvents v Commission

Commercial Solvents Corp. and Italian Commercial Solvents Corp. v Commission, Joined Cases 6/73 and 7/73

Commercial Solvents involved refusal to supply an input to a downstream undertaking.

Principle

A dominant undertaking controlling an important input may infringe competition law when it uses that position to eliminate competition in a downstream market.

Resilience significance

The doctrine becomes particularly important for:

• critical components;
• industrial inputs;
• semiconductor materials;
• energy infrastructure;
• telecommunications;
• cloud infrastructure; and
• specialized software.

If a dominant firm controls a critical input and withdraws access, competitors may disappear.

This produces a competitive resilience failure.

8. Bronner v Mediaprint

Oscar Bronner GmbH & Co. KG v Mediaprint, Case C-7/97

The Court established demanding conditions for treating infrastructure as indispensable under the essential-facilities doctrine.

Principle

A refusal to provide access does not automatically constitute abuse.

The infrastructure generally must be genuinely indispensable and duplication must not be realistically possible under the relevant conditions.

Future resilience relevance

This is highly significant for resilience governance.

Regulators must avoid transforming every useful infrastructure into a mandatory shared facility.

Instead, future regulation may ask:

1. Is the infrastructure indispensable?
2. Can it reasonably be replicated?
3. Does denial eliminate effective competition?
4. Is access objectively necessary?
5. Can access be provided without destroying legitimate investment incentives?

This provides a framework for distinguishing resilience regulation from excessive compulsory access.

9. IMS Health v Commission

IMS Health GmbH & Co. OHG v Commission, Case C-418/01 P

The case concerned access to a protected information structure and the circumstances in which refusal to license intellectual property could raise competition concerns.

Importance

The Court identified stringent conditions concerning:

• indispensability;
• elimination of competition;
• absence of objective justification; and
• creation of a new product or service.

Resilience significance

Future resilience systems will increasingly depend upon:

• proprietary data;
• technical interfaces;
• interoperability standards;
• APIs;
• digital infrastructure;
• machine-readable datasets; and
• proprietary protocols.

IMS Health demonstrates that competition law must balance innovation incentives against access necessary to preserve competitive alternatives.

10. Microsoft v Commission

Microsoft Corp. v Commission, Case T-201/04

The case involved Microsoft's refusal to provide interoperability information to competitors.

Principle

Control over interoperability information can become a competition problem where it substantially impedes competing products and reinforces dominance.

Resilience significance

This is one of the most important precedents for future resilience governance.

A resilient digital ecosystem requires the ability of independent systems to communicate.

Future regulation may therefore focus on:

• API access;
• interoperability standards;
• cloud migration;
• operating-system interoperability;
• cybersecurity interfaces;
• identity systems;
• payment infrastructure; and
• enterprise software portability.

A technically closed ecosystem may be commercially efficient in the short term but create systemic dependency in the long term.

11. Google Shopping

Google Search (Shopping), European Commission Decision and General Court litigation

The Google Shopping proceedings concerned Google's treatment of its comparison-shopping service within its general search results.

Competition issue

The central concern involved the use of a dominant search infrastructure to advantage Google's own downstream service.

Resilience relevance

The broader principle is control of a gateway can determine which competing services receive access to users.

Future resilience regulation may therefore examine:

• search ranking;
• recommendation systems;
• app stores;
• digital marketplaces;
• cloud marketplaces;
• payment gateways;
• digital advertising infrastructure; and
• AI recommendation systems.

If an ecosystem operator systematically disadvantages alternative providers, the market may become less diverse and consequently less resilient.

12. Android / Google Android

Google Android, European Commission Decision

The Android proceedings addressed contractual practices involving mobile-device manufacturers, including restrictions associated with Google's mobile ecosystem.

Competition significance

The case demonstrates how contractual conditions surrounding a dominant platform can reinforce ecosystem dependence.

Resilience significance

Future competition authorities may investigate whether platform ecosystems create:

• artificial switching costs;
• default-based dependency;
• pre-installation barriers;
• application restrictions;
• interoperability limitations;
• ecosystem-wide contractual dependencies.

A resilient platform market should allow competing services to emerge without requiring competitors to reproduce the entire incumbent ecosystem.

13. Intel

Intel v Commission, Case C-413/14 P

The litigation concerned rebates and exclusivity-related conduct by Intel.

Importance

The case contributed significantly to the modern analysis of exclusionary rebates and the circumstances in which pricing arrangements by a dominant undertaking may harm competition.

Resilience relevance

Aggressive exclusionary pricing can have consequences beyond immediate consumer prices.

If a dominant firm uses discounts to remove smaller competitors, the market may lose:

• alternative suppliers;
• backup capacity;
• innovation sources;
• geographical diversity; and
• emergency replacement capacity.

Thus, future enforcement may increasingly examine the long-term structural consequences of exclusionary strategies.

14. Aéroports de Paris

Aéroports de Paris v Commission, Case C-82/01 P

The case concerned airport infrastructure and the application of competition principles to infrastructure-related economic activities.

Resilience significance

Transport infrastructure illustrates the relationship between:

• essential infrastructure;
• access conditions;
• economic bottlenecks;
• public-interest obligations; and
• competition.

Airports, ports, rail networks, electricity grids and telecommunications networks may all become resilience-critical infrastructure.

Competition law can therefore complement sector-specific regulation by preventing infrastructure controllers from using bottleneck positions to suppress downstream competition.

15. MEO – Serviços de Comunicações e Multimédia

MEO v Autoridade da Concorrência, Case C-525/16

The case addressed discriminatory pricing and the assessment of competitive harm.

Relevance

Resilience systems frequently involve differential access to infrastructure.

Examples include:

• preferential network access;
• differential cloud pricing;
• discriminatory data access;
• differentiated API availability;
• infrastructure fees; and
• emergency capacity allocation.

Future enforcement can therefore examine whether discriminatory access conditions place certain competitors at a structural disadvantage.

16. Merger Control and Resilience

Resilience governance will have major consequences for merger regulation.

Traditional merger analysis generally examines:

• market shares;
• concentration;
• unilateral effects;
• coordinated effects;
• entry;
• efficiencies; and
• innovation.

Future assessment may additionally examine resilience effects.

Example

Suppose five firms operate critical infrastructure.

A merger reduces them to three.

The merger may create:

• greater economies of scale;
• lower costs;
• technological integration;

but also:

• fewer independent suppliers;
• greater systemic dependency;
• reduced redundancy;
• fewer alternative technologies.

The appropriate question is not automatically whether the merger should be prohibited.

Instead, regulators could investigate whether remedies can preserve:

• independent capacity;
• interoperability;
• alternative supply;
• data portability;
• emergency access;
• non-discriminatory infrastructure access.

17. Resilience and Essential Facilities

The essential-facilities doctrine could become particularly important in future infrastructure markets.

Potential facilities include:

• electricity transmission systems;
• telecommunications networks;
• cloud infrastructure;
• payment rails;
• digital identity systems;
• ports;
• airports;
• railway networks;
• semiconductor fabrication facilities;
• critical data repositories;
• AI compute infrastructure.

However, mandatory access should remain carefully defined.

Otherwise, compulsory sharing could:

• reduce investment;
• weaken intellectual-property incentives;
• create free-riding;
• increase cybersecurity vulnerabilities; or
• undermine legitimate commercial differentiation.

18. Resilience and Interoperability

Interoperability is likely to become one of the central competition-law tools.

Possible future obligations

Dominant firms could be required, under appropriate conditions, to provide:

1. standardized interfaces;
2. API access;
3. data portability;
4. technical documentation;
5. migration tools;
6. compatibility information;
7. transparent switching procedures.

The purpose would not necessarily be to make every system identical.

Instead, it would be to ensure that competition does not disappear merely because consumers or businesses become technically trapped inside one ecosystem.

19. Resilience and Data

Data concentration can create another form of systemic dependency.

A dominant firm may possess:

• transaction data;
• consumer behaviour data;
• logistics information;
• infrastructure data;
• industrial data;
• training data;
• geospatial information.

If competitors cannot obtain legally and competitively appropriate access to essential data, entry may become difficult.

Future regulation could therefore combine:

competition law + data portability + interoperability + data-sharing governance.

But unrestricted compulsory data sharing would raise legitimate concerns involving:

• privacy;
• cybersecurity;
• intellectual property;
• confidentiality;
• trade secrets; and
• data protection.

20. Resilience and Algorithmic Governance

Modern resilience systems will increasingly depend on algorithms.

Algorithms may determine:

• resource allocation;
• inventory management;
• electricity balancing;
• transportation routing;
• emergency pricing;
• cloud capacity;
• supply-chain prioritization.

This creates new competition concerns.

Potential problems

Algorithms could:

• coordinate prices;
• allocate customers;
• exclude competitors;
• prioritize affiliated companies;
• ration access;
• discriminate among suppliers;
• exploit crisis conditions.

Consequently, future competition authorities may need access to:

• algorithmic records;
• audit logs;
• model documentation;
• training information;
• pricing rules;
• decision parameters.

21. Crisis Coordination: A Difficult Boundary

Resilience governance sometimes requires competitors to cooperate.

For example, during a major disruption, competing firms might need to share:

• capacity information;
• supply availability;
• emergency inventory;
• logistics information;
• technical standards.

But competitor coordination can itself create cartel risks.

Therefore, future regulation may need carefully designed crisis-cooperation safe harbours.

A legitimate emergency mechanism could specify:

• the duration of cooperation;
• the information that may be shared;
• the emergency circumstances triggering cooperation;
• independent monitoring;
• data minimization;
• termination conditions.

This prevents a temporary resilience arrangement from becoming permanent collusion.

22. Resilience Governance and State Aid/Subsidies

Governments may subsidize:

• semiconductor plants;
• energy infrastructure;
• cloud facilities;
• battery production;
• telecommunications;
• strategic minerals;
• pharmaceutical manufacturing.

Such policies can improve resilience but may distort competition.

Competition authorities therefore face a dual objective:

Resilience objective

Maintain diversified strategic capacity.

Competition objective

Prevent subsidies from unnecessarily protecting inefficient incumbents or excluding rivals.

Future policy is likely to focus on competitive neutrality combined with resilience objectives.

23. Regulatory Model for Resilience Governance

A future regulatory framework could contain six layers.

Layer 1 — Market concentration assessment

Identify whether a market contains excessive structural dependency.

Layer 2 — Dependency assessment

Determine whether customers or competitors depend on a particular firm, infrastructure or ecosystem.

Layer 3 — Switching assessment

Examine:

• financial switching costs;
• technical switching costs;
• contractual restrictions;
• data portability;
• interoperability.

Layer 4 — Redundancy assessment

Examine whether viable alternative suppliers exist.

Layer 5 — Conduct regulation

Address:

• exclusion;
• tying;
• discrimination;
• refusal to supply;
• self-preferencing;
• exclusive arrangements.

Layer 6 — Resilience remedies

Potential remedies include:

• interoperability;
• portability;
• access obligations;
• divestiture;
• licensing;
• structural separation;
• non-discrimination;
• emergency-access mechanisms.

24. Proposed Resilience Competition Test

A future competition authority could use a conceptual Resilience Competition Assessment.

Step 1: Identify the critical market

Is the market important to broader economic functioning?

Step 2: Identify concentration

How many independent providers exist?

Step 3: Identify dependency

Can users reasonably switch?

Step 4: Identify bottlenecks

Does one firm control an essential infrastructure, dataset, interface or technology?

Step 5: Examine conduct

Is the bottleneck being used to exclude competitors?

Step 6: Examine redundancy

Would the loss of one provider materially reduce competitive alternatives?

Step 7: Examine efficiencies

Does concentration create genuine efficiencies, security or investment benefits?

Step 8: Select proportionate remedies

Use behavioural remedies where sufficient and structural remedies where necessary.

25. Resilience Governance and Digital Platforms

Digital ecosystems present particularly difficult problems because one company may simultaneously control:

• infrastructure;
• operating systems;
• applications;
• advertising;
• payments;
• identity;
• data;
• recommendation systems.

This creates vertical and horizontal dependency simultaneously.

A resilience-oriented competition framework could therefore examine the entire platform lifecycle:

Infrastructure → Data → Interface → Distribution → Recommendation → Transaction → Feedback

Control at multiple levels can make competitive entry increasingly difficult.

26. Future Regulation of Cloud Resilience

Cloud computing is a particularly important example.

Potential competition problems include:

• data egress charges;
• proprietary APIs;
• interoperability restrictions;
• long-term contracts;
• technical lock-in;
• preferential treatment of affiliated services;
• bundling;
• capacity allocation.

Future competition regulation may therefore promote:

• workload portability;
• interoperable standards;
• transparent switching;
• multi-cloud compatibility;
• contractual flexibility;
• independent cloud providers.

The objective would be to preserve both business continuity and competitive choice.

27. Energy-System Resilience

Electricity markets demonstrate another major application.

A resilient energy market requires:

• multiple generators;
• transmission alternatives;
• storage;
• demand-response capacity;
• grid access;
• distributed generation.

A dominant infrastructure operator could potentially weaken resilience through:

• discriminatory grid access;
• capacity withholding;
• preferential interconnection;
• exclusion of distributed resources.

Competition law can therefore operate alongside energy regulation to prevent bottleneck infrastructure from becoming a mechanism of competitive exclusion.

28. Supply-Chain Resilience

Supply-chain concentration can also create competition risks.

Consider a market where one firm controls a critical component.

The firm may acquire competitors or impose exclusive arrangements.

Even if prices remain competitive in normal conditions, the market could become highly vulnerable during a disruption.

Future merger review may therefore consider:

competitive redundancy as an economic asset.

This does not mean preserving every competitor merely because it exists. The analysis would need evidence that the lost capacity or alternative supply would materially affect competition or market functioning.

29. Resilience and Consumer Welfare

Resilience can affect consumers through:

• continuity of supply;
• availability;
• price volatility;
• service reliability;
• innovation;
• switching options.

A short-term low-price market may not necessarily be resilient if consumers become completely dependent on one provider.

Conversely, redundancy may increase costs.

Therefore, future competition policy will need to balance:

efficiency + affordability + innovation + competitive diversity + continuity.

30. Key Legal Challenges

A. Defining resilience

There is no universally accepted competition-law definition.

B. Measuring systemic dependency

Dependency can be technical rather than purely economic.

C. Avoiding overregulation

Not every concentrated market is fragile.

D. Preserving investment incentives

Mandatory access may discourage infrastructure investment.

E. Balancing privacy and competition

Data-sharing requirements can conflict with privacy obligations.

F. Distinguishing cooperation from collusion

Emergency cooperation can easily become a mechanism for cartel coordination.

G. International coordination

Cloud, telecommunications, shipping and digital platforms operate across jurisdictions.

31. Six Core Case-Law Principles at a Glance

32. Future Direction of Competition Law

The future of competition law may gradually move from a purely static market-power model toward a more dynamic ecosystem-resilience model.

The relevant questions may increasingly include:

1. Who controls the critical infrastructure?
2. How easily can users switch?
3. Are competing systems interoperable?
4. Are alternative suppliers economically viable?
5. Does the market contain redundant capacity?
6. Can new entrants emerge after a disruption?
7. Does a merger eliminate an important competitive alternative?
8. Can a dominant platform exploit emergency conditions?
9. Can competitors cooperate temporarily without forming a cartel?
10. Are resilience remedies proportionate to the competitive harm?

33. Conclusion

Resilience Governance Systems represent a developing frontier of competition law.

The traditional objective of competition law—preventing anticompetitive conduct and preserving competitive markets—can increasingly intersect with the need to maintain economic continuity and systemic redundancy.

The most significant future areas are likely to include:

• essential digital infrastructure;
• cloud computing;
• telecommunications;
• energy networks;
• payment systems;
• transport infrastructure;
• strategic manufacturing;
• semiconductor supply chains;
• data ecosystems;
• AI infrastructure;
• digital platforms; and
• critical technology standards.

The central legal challenge will be to prevent competitive dependency from becoming systemic dependency, while avoiding regulation that unnecessarily sacrifices efficiency, innovation or investment.

The cases involving United Brands, Commercial Solvents, Bronner, IMS Health, Microsoft, Google Shopping, Google Android and Intel provide important doctrinal building blocks. They do not establish a standalone doctrine of "resilience competition"; rather, their principles can be applied to the emerging problem of market structures whose lack of competitive redundancy makes economic ecosystems vulnerable to disruption.