On 7 February 2019 the German antitrust authority (Bundeskartellamt) found that the extent to which Facebook collects, merges, attributes to and uses data in user accounts amounts to an abuse of a dominant position on the market for social networks. Under Facebook's current terms and conditions, users agree to Facebook: (1) collecting user data from both Facebook-owned services like WhatsApp and Instagram, and from third party websites that use Facebook links in the foreground or Facebook analytics in the background, and (2) combining and assigning that data to the user's Facebook account. According to head of the authority Andreas Mundt, as a result Facebook "obtains very detailed profiles of its users and knows what they are doing online".
Facebook’s acquisition of WhatsApp was cleared by the European Commission in 2014. However, in 2017 the Commission fined Facebook EUR110 million for providing incorrect or misleading information in relation to that acquisition – Facebook made statements to the Commission during the merger control review which were inconsistent with an announcement by WhatsApp after the deal had been cleared, relating to the possibility of linking WhatsApp users’ phone numbers with Facebook users’ identities.
In last week’s decision the Bundeskartellamt concludes that Facebook’s practice in relation to the data obtained by its services is to the detriment of the consumers who use Facebook, and gives rise to a so-called 'exploitative' abuse. The Bundeskartellamt also found that this impedes competitors, who are not able to amass similar levels of data.
The case is exclusively based on German law, referring in particular to a Federal Supreme Court line of cases that considers terms and conditions as exploitative if they conflict with other (non-antitrust) laws – most notably the laws with respect to general terms and conditions. Here, the Bundeskartellamt claims that Facebook did not comply with principles of data protection laws (although the decision apparently reaches beyond black letter data protection rules – the authority applied a broader assessment of the whole mechanism of collecting and processing data). It is worth noting that even though the decision is grounded in German (case) law, in principle the determination of an exploitative abuse follows the same criteria as under the EU abuse of dominance rules. EU Competition Commissioner Vestager has, however, stated (as reported by Bloomberg) that while the European Commission will study the decision with interest, she does not think it would serve as a ‘template’ for EU action.
The Bundeskartellamt handled the case as an administrative proceeding. As a result no fine was imposed, which is typical for an entirely new theory of harm. However, the Bundeskartellamt is requiring Facebook to change the way it processes the data of German users. Going forward, assigning data from WhatsApp and Instagram to Facebook user accounts will only be possible if the user has given his/her voluntary consent. The same goes for collecting data from third party websites and assigning it to Facebook user accounts – voluntary consent will be needed.
Facebook has announced that it will appeal the Bundeskartellamt’s decision, because the authority underestimates the level of competition it faces in Germany, and has misinterpreted Facebook's compliance with GDPR. It takes the firm position that it is the job of data protection regulators – not antitrust authorities – to determine whether companies are living up to their data protection responsibilities.
The decision is important as one of the first to combine data protection issues with antitrust analysis. It will no doubt add fuel to the debate as to whether antitrust authorities are best placed to look at this type of issue.
