Maintainer Control In Open-Source Ecosystems And Competition Risks .

Macroprudential Analogies in Digital Market Regulation

Introduction

Macroprudential regulation traditionally concerns the stability of the financial system as a whole rather than merely the safety or conduct of an individual bank. Its central insight is that a collection of individually rational decisions can produce systemic risks when institutions are interconnected, highly leveraged, opaque, or dependent upon common infrastructure.

This logic has an important analogy in digital market regulation. Large digital platforms, cloud providers, app stores, payment systems, advertising exchanges, data infrastructures and foundation-model ecosystems can become systemically important economic infrastructures. A failure, exclusionary practice, discriminatory algorithm, cyber incident, data restriction, or coordinated technological change may therefore affect an entire market rather than merely individual competitors.

The analogy does not mean that digital platforms should simply be regulated like banks. Rather, macroprudential concepts can provide a framework for understanding systemic market power, ecosystem contagion, concentration, common dependencies, resilience and preventive intervention.

1. Meaning of Macroprudential Regulation

Macroprudential regulation operates at the level of the system.

Traditional or microprudential regulation asks:

Is this particular institution behaving safely?

Macroprudential regulation asks:

Could the collective behaviour or failure of interconnected institutions destabilise the entire system?

Typical macroprudential concepts include:

systemic importance;

concentration risk;

interconnectedness;

contagion;

common exposures;

procyclicality;

stress testing;

capital buffers;

liquidity requirements;

resolution planning;

structural separation;

enhanced supervisory monitoring.

The digital-market analogy replaces some of these financial concepts with technological and competitive equivalents.

Financial systemDigital-market analogue
Systemically important bankSystemically important digital platform
Capital concentrationData/compute/infrastructure concentration
Liquidity riskAccess/interoperability/technical dependency risk
Bank contagionEcosystem/platform contagion
Common exposureCommon cloud/API/data dependency
Bank runRapid user/merchant migration or platform collapse
Systemic leverageEcosystem/network leverage
Capital bufferResilience/interoperability safeguards
Stress testingAlgorithmic/platform stress testing
Resolution planDigital platform continuity/resolution planning
Too-big-to-failToo-essential-to-fail digital infrastructure
Prudential supervisionContinuous digital-market supervision

2. Why the Analogy Matters

Traditional competition law frequently investigates individual conduct.

For example:

exclusionary pricing;

refusal to deal;

tying;

exclusive dealing;

predatory pricing;

discriminatory access;

anticompetitive merger.

But digital markets can create risks that arise from the architecture of the ecosystem itself.

A platform may simultaneously control:

user access;

data;

identity;

advertising;

payment;

cloud infrastructure;

app distribution;

search;

ranking;

developer access.

The problem is therefore not necessarily one isolated abusive act.

It may be systemic dependence.

A platform can become a gateway through which a large percentage of economic activity must pass.

3. From Market Power to Systemic Market Power

Traditional competition analysis generally asks whether an undertaking possesses substantial market power.

The macroprudential analogy adds another question:

What happens if this undertaking's infrastructure becomes indispensable to several markets simultaneously?

This produces the concept of systemic market power.

A platform may be systemically significant where it combines:

very large user numbers;

extensive data resources;

high switching costs;

network effects;

control of technical standards;

control of APIs;

control over cloud infrastructure;

control over identity;

control over payment systems;

vertical integration;

interoperability dependence.

The critical issue becomes not merely:

“Is the firm dominant?”

but:

“How many economic activities depend upon its continued access, neutrality and technical functioning?”

4. Digital Contagion

One of the strongest macroprudential analogies is contagion.

In finance, problems at one institution can spread through:

lending relationships;

derivatives;

payment systems;

common assets;

liquidity shocks.

Digital ecosystems possess comparable transmission mechanisms.

For example:

Cloud provider failure

→ AI companies lose computing access
→ applications become unavailable
→ financial and logistics systems are disrupted
→ consumers cannot access services
→ dependent businesses suffer losses.

Similarly:

App-store policy change

→ developers face higher costs
→ competing payment mechanisms disappear
→ consumer choice falls
→ downstream businesses become dependent on the platform.

Thus, digital regulation must sometimes examine second-order and third-order effects.

5. Common Infrastructure Risk

Financial institutions can become vulnerable because they depend upon the same infrastructure.

Digital markets exhibit the same phenomenon.

Examples include:

cloud computing;

DNS infrastructure;

content delivery networks;

identity providers;

payment processors;

app stores;

advertising exchanges;

operating systems;

AI foundation models;

GPU supply;

API gateways.

A market may appear competitive because there are many downstream companies.

Yet those companies may all depend upon one upstream infrastructure provider.

This creates a form of hidden concentration.

6. “Too Big to Fail” and “Too Essential to Fail”

The banking concept of too big to fail has a digital-market analogue:

Too essential to fail.

A cloud provider, operating system, payment network or app-distribution platform may become so important that its failure produces substantial externalities.

This creates a regulatory dilemma.

If the government allows the platform to fail or withdraw from a market:

downstream businesses may collapse;

consumers may lose access;

data may become inaccessible;

interoperability may disappear;

critical services may be interrupted.

But if the regulator implicitly protects the platform because it is indispensable, the platform may acquire a form of regulatory privilege.

Therefore, digital regulation must distinguish between:

supporting resilience

and

protecting incumbency.

7. Digital Stress Testing

Macroprudential regulators conduct stress tests.

A similar approach could be developed for digital ecosystems.

A digital-platform stress test might ask:

Scenario A — Cloud outage

What happens if the dominant cloud provider becomes unavailable for 48 hours?

Scenario B — API withdrawal

What happens if a dominant platform removes access to a critical API?

Scenario C — Data portability failure

Can users migrate their data to competitors?

Scenario D — Ranking manipulation

What happens if an integrated platform systematically changes ranking algorithms?

Scenario E — Cyberattack

Can competitors continue operating if a common digital infrastructure provider is attacked?

Scenario F — Merger

What happens if a dominant ecosystem acquires an emerging competitor?

This shifts competition regulation from reactive enforcement toward preventive resilience analysis.

8. Procyclicality in Digital Markets

Financial systems may become procyclical: conditions that appear favourable during expansion can amplify a subsequent downturn.

Digital markets have analogous feedback loops.

For example:

More users
↓
More data
↓
Better algorithmic performance
↓
Better service
↓
More users
↓
More data.

This creates a digital network-effect cycle.

Likewise:

More sellers
↓
More consumers
↓
More transaction data
↓
Better recommendation algorithms
↓
More sellers.

Such feedback mechanisms can make markets increasingly concentrated.

Therefore, a competition authority may need to intervene before dominance becomes irreversible.

9. Systemic Data Concentration

Data can perform an economic function analogous to a strategic financial asset.

The issue is not merely the amount of data possessed by one undertaking.

The systemic question is:

What happens when competitors cannot reproduce the data advantage?

A dominant platform may possess:

behavioural data;

transaction data;

location data;

search data;

advertising data;

biometric information;

device data;

cross-service data.

Combining these datasets can create cross-market informational leverage.

The resulting competitive advantage may spill from one market into another.

10. Interconnectedness and Ecosystem Power

Macroprudential regulation emphasises interconnectedness.

Digital competition should similarly map:

Platform A

→ operating system
→ browser
→ search engine
→ advertising
→ payment
→ cloud
→ identity
→ AI services.

The competition problem can therefore become ecosystem-wide.

A conduct that looks harmless in one market can become problematic when combined with power elsewhere.

For example:

Control over identity + payments + operating system + app distribution

may create significantly greater exclusionary power than any one of these components would create independently.

11. Case Law

1. United States v. Microsoft Corp. (2001)

The Microsoft litigation is one of the strongest historical foundations for the macroprudential analogy.

Microsoft possessed substantial power in operating systems and used contractual and technological strategies involving the browser market.

The case demonstrated that:

network effects can reinforce dominance;

technological architecture can be strategically manipulated;

platform control can affect adjacent markets;

exclusionary conduct can protect ecosystem power.

Macroprudential relevance

Microsoft illustrates the importance of analysing systemic platform architecture, rather than treating operating systems and adjacent software markets as completely isolated.

The case supports the proposition that competition authorities should investigate whether control of an important digital infrastructure allows a firm to transmit market power into adjacent markets.

12. United States v. Google — Search / Search Distribution Litigation

The modern Google search litigation provides an important example of gateway power.

The central concern has involved agreements and practices through which Google allegedly maintained the position of its search engine as a default or preferred service across important distribution channels.

Macroprudential analogy

Defaults can function like systemic infrastructure.

If one search engine becomes embedded across:

browsers;

mobile devices;

operating systems;

distribution arrangements;

competitors may face structural difficulties obtaining scale.

The lesson is that competition analysis should consider distribution-system concentration, not simply the quality or price of the search service.

13. Ohio v. American Express Co. (2018)

This Supreme Court case concerned the two-sided nature of payment-card markets.

The Court recognised the importance of considering both sides of a platform when analysing competitive effects.

Macroprudential relevance

Payment systems are especially useful for the macroprudential analogy because they demonstrate:

network effects;

interconnected users;

merchant dependence;

consumer dependence;

indirect network effects.

A digital platform can similarly create an ecosystem where restrictions imposed on one side affect participants on another.

The case therefore supports a broader lesson:

Digital competition analysis frequently requires ecosystem-wide assessment rather than isolated single-market analysis.

14. FTC v. Qualcomm Inc. (2020)

The Qualcomm litigation involved standard-essential patents, licensing practices and modem-chip markets.

The case illustrates how control over an important technological input can affect downstream competition.

Macroprudential analogy

A technology can become systemically important infrastructure where multiple downstream businesses depend upon it.

Comparable modern examples include:

cloud compute;

GPUs;

operating systems;

critical APIs;

AI models;

payment rails.

The relevant question becomes:

Is the technological input merely commercially important, or has it become a systemic bottleneck?

15. European Commission v. Google Shopping

The Google Shopping decision concerned Google's treatment of its own comparison-shopping service relative to competing services.

The European Commission found that Google had leveraged its dominance in general search into comparison shopping.

Macroprudential relevance

This is analogous to cross-market contagion of market power.

Power originating in one infrastructure layer—general search—can affect competition in another layer—comparison shopping.

The case therefore demonstrates why digital competition authorities must monitor cross-market transmission mechanisms.

16. Google Android

The European Commission's Android decision concerned Google's contractual arrangements surrounding Android and related services.

The case is especially relevant to ecosystem regulation because Android was not merely one product.

It formed part of a broader ecosystem involving:

mobile operating systems;

app distribution;

search;

application development;

device manufacturers.

Macroprudential analogy

The regulatory concern resembles systemic concentration:

Operating-system control

→ distribution restrictions
→ search defaults
→ app ecosystem effects
→ reduced opportunities for rivals.

The important issue is therefore the architecture of interdependence.

17. Google Android Auto / Digital Ecosystem Cases

Digital-platform disputes involving access to Android-based functionality also demonstrate how platform owners can control technical interfaces through which third-party services reach consumers.

The broader principle is:

Control over an interface can become control over downstream competition.

This resembles financial infrastructure where access to a payment or clearing system can determine whether institutions can effectively compete.

18. European Commission v. Microsoft (Interoperability)

The Microsoft interoperability litigation in the EU provides another important precedent.

Microsoft's control over operating-system information was considered relevant to competition in work-group server markets.

Macroprudential significance

The case demonstrates the importance of interoperability as a resilience mechanism.

If competitors cannot communicate with a dominant infrastructure, the ecosystem becomes fragile and dependent.

Interoperability can therefore serve two purposes:

promoting competition; and

reducing systemic dependence.

This is one of the strongest links between competition law and macroprudential thinking.

19. The Core Regulatory Shift

The macroprudential analogy suggests a movement through three regulatory models.

Model 1 — Traditional competition law

Conduct → harm → enforcement

Model 2 — Digital competition regulation

Dominance → ecosystem conduct → structural intervention

Model 3 — Macroprudential digital regulation

Systemic importance → interconnectedness → resilience monitoring → preventive intervention

This third model does not eliminate competition law.

It supplements it.

20. Possible Digital Macroprudential Toolkit

A future digital regulator could employ:

A. Systemic-platform designation

Identify platforms whose failure or discriminatory conduct could materially affect multiple markets.

B. Dependency mapping

Map businesses dependent upon:

cloud providers;

app stores;

payment infrastructure;

APIs;

identity systems;

AI models.

C. Digital stress tests

Simulate:

outages;

cyberattacks;

API withdrawal;

algorithmic manipulation;

data-access restrictions;

sudden contractual changes.

D. Interoperability requirements

Require dominant infrastructure providers to maintain technically meaningful interoperability.

E. Data portability

Make it possible for users and businesses to move data between platforms.

F. Structural safeguards

Separate potentially conflicting functions where vertical integration creates systemic risks.

G. Continuous monitoring

Instead of investigating only after harm occurs, monitor:

ranking changes;

access conditions;

pricing;

interoperability;

self-preferencing;

API restrictions;

acquisitions.

H. Platform resolution planning

Systemically important digital infrastructures could be required to maintain plans for:

orderly migration;

data portability;

continuity of essential services;

technical transition.

21. Macroprudential Regulation and Merger Control

The analogy becomes particularly important for digital mergers.

Traditional merger analysis asks:

Will this transaction substantially lessen competition?

A systemic approach adds:

Will this transaction increase the market's dependence on one technological ecosystem?

For example, an acquisition involving:

a major cloud provider;

a foundation-model company;

a leading AI chip ecosystem;

an identity provider;

a payment network;

could create risks extending beyond a conventional relevant-market definition.

The regulator might therefore examine:

concentration + interoperability + data + infrastructure + network effects + ecosystem dependency.

22. Macroprudential Analogy and AI Markets

The analogy becomes particularly powerful with artificial intelligence.

Suppose only a few firms control:

advanced compute;

foundation models;

training datasets;

AI APIs;

cloud infrastructure;

model distribution;

AI safety tooling.

The resulting structure could resemble a highly concentrated financial infrastructure.

A disruption affecting one provider could propagate across thousands of AI-dependent firms.

This creates possible AI systemic-risk regulation.

Relevant safeguards could include:

model portability;

API interoperability;

compute diversification;

emergency migration protocols;

transparency requirements;

cloud switching mechanisms;

acquisition scrutiny;

technical auditability.

23. Difference Between Financial and Digital Systemic Regulation

The analogy has important limits.

Financial institutions deal directly with:

money;

credit;

liquidity;

deposits;

systemic financial stability.

Digital platforms primarily create risks concerning:

competition;

information;

infrastructure;

access;

data;

innovation;

technological dependency.

Therefore, the regulatory objective differs.

Financial macroprudential regulation: prevent financial-system collapse.

Digital systemic regulation: prevent excessive technological concentration, ecosystem dependency, competitive foreclosure and infrastructure fragility.

24. Central Legal Problem: Who Regulates the System?

A particularly difficult issue is institutional overlap.

Digital systemic regulation may involve:

competition authorities;

telecommunications regulators;

data-protection authorities;

financial regulators;

cybersecurity agencies;

consumer-protection authorities;

AI regulators.

One platform may simultaneously be:

a marketplace;

advertising intermediary;

payment intermediary;

cloud provider;

data controller;

AI provider.

This creates the possibility of regulatory fragmentation.

A macroprudential approach therefore encourages cross-regulatory coordination.

25. Emerging Concept: Digital Systemically Important Platform

A useful conceptual category is the:

Digital Systemically Important Platform (DSIP).

A platform could qualify based on factors such as:

number of dependent businesses;

number of dependent consumers;

cross-market presence;

network effects;

switching costs;

data concentration;

infrastructure control;

interoperability importance;

substitutability;

potential contagion from failure.

A DSIP would face heightened obligations because its private decisions produce public systemic consequences.

26. Competition Law Implications

The macroprudential analogy could transform several competition-law doctrines.

Abuse of dominance

From isolated abuse → systemic ecosystem abuse.

Essential facilities

From physical infrastructure → digital infrastructure and technical interfaces.

Refusal to deal

From commercial refusal → systemic access risk.

Interoperability

From remedy → resilience mechanism.

Merger control

From market concentration → ecosystem concentration.

Data access

From privacy/competition issue → systemic dependency issue.

Remedies

From fines → continuing structural and behavioural safeguards.

27. A Possible “Digital Capital Buffer” Analogy

One should not literally require platforms to hold financial capital as banks do.

But the analogy can inspire resilience buffers.

A systemically important platform might be required to maintain:

redundant infrastructure;

alternative service providers;

portable data systems;

interoperable APIs;

emergency access procedures;

cybersecurity reserves;

continuity mechanisms.

Thus:

Financial capital buffer → Digital resilience buffer

The objective is to ensure that the ecosystem can withstand shocks without creating widespread competitive or economic disruption.

28. Important Policy Risk

Macroprudential-style digital regulation can itself become dangerous.

If regulators classify a platform as systemically important and then protect it from failure, the designation may create:

“too-essential-to-regulate aggressively” dynamics.

That would be counterproductive.

A platform should not receive immunity from competition law merely because society has become dependent upon it.

Instead:

The greater the systemic importance, the greater the regulatory responsibility.

29. Six Core Principles

The macroprudential analogy can therefore be reduced to six principles:

1. Systemic importance

Regulate platforms according to their importance to the wider economy.

2. Interconnectedness

Map dependencies across markets.

3. Concentration

Examine concentration of infrastructure, data and technological capabilities.

4. Resilience

Require ecosystems to withstand outages, cyberattacks and strategic restrictions.

5. Preventive supervision

Act before irreversible competitive foreclosure occurs.

6. Cross-regulatory coordination

Competition, data, cybersecurity, telecommunications and financial regulators should coordinate where digital infrastructure crosses regulatory boundaries.

Conclusion

Macroprudential analogies provide a powerful conceptual framework for digital market regulation because modern digital markets increasingly resemble interconnected infrastructures rather than collections of independent firms.

The central transformation is from:

“Is this company's conduct anticompetitive?”

to:

“Does the architecture of this digital ecosystem create systemic dependency, concentration or contagion?”

The Microsoft, Google, Android, Google Shopping, Qualcomm, American Express and interoperability cases demonstrate different aspects of this problem: network effects, platform leverage, interoperability, vertical integration, cross-market power and infrastructure dependency.

The strongest future model would therefore combine competition law + systemic-risk analysis + interoperability + continuous monitoring + resilience requirements.

In that sense, the emerging regulatory philosophy could be expressed as:

Financial macroprudential regulation seeks to prevent the failure of interconnected financial institutions from destabilising the financial system; digital macroprudential regulation would seek to prevent concentrated technological infrastructures and platform ecosystems from destabilising competition, innovation and access across the digital economy.

LEAVE A COMMENT