Showing Latest Publications

Schrems III: Gauging the Validity of the GDPR Adequacy Decision for the United States

ICLE Issue Brief Executive Summary The EU Court of Justice’s (CJEU)  July 2020 Schrems II decision generated significant uncertainty, as well as enforcement actions in various EU countries, . . .

Executive Summary

The EU Court of Justice’s (CJEU)  July 2020 Schrems II decision generated significant uncertainty, as well as enforcement actions in various EU countries, as it questioned the lawfulness of transferring data to the United States under the General Data Protection Regulation (GDPR)[1] while relying on “standard contractual clauses.”

President Joe Biden signed an executive order in October 2022 establishing a new data-protection framework to address this uncertainty. The European Commission responded in July 2023 by adopting an “Adequacy Decision” under Article 45(3) of the GDPR, formally deeming U.S. data-protection commitments to be adequate.

A member of the French Parliament has already filed the first legal challenge to the Adequacy Decision and another from Austrian privacy activist Max Schrems is expected soon.

This paper discusses key legal issues likely to be litigated:

  1. The legal standard of an “adequate level of protection” for personal data. Although we know that the “adequate level” and “essential equivalence” of protection do not necessarily mean identical protection, the precise degree of flexibility remains an open question that the EU Court may need to clarify to a much greater extent.
  2. The issue of proportionality of “bulk” data collection by the U.S. government. It examines whether the objectives pursued can be considered legitimate under EU law and, if so, whether the existing CJEU precedents preclude such collection from being considered proportionate under the GDPR.
  3. The problem of effective redress—a cornerstone of the Schrems II decision. This paper explores debates around Article 47 of the EU Charter of Fundamental Rights, whether the new U.S. framework offers redress through an impartial tribunal, and whether EU persons can effectively access the redress procedure.
  4. The issue of access to information about U.S. intelligence agencies’ data-processing activities.

I.        Introduction

Since the EU Court of Justice’s (CJEU) Schrems II decision,[2] it has been precarious whether transfers of personal data from the EU to the United States are lawful. It’s true that U.S. intelligence-collection rules and practices have changed since 2016, when the European Commission issued its assessment in the “Privacy Shield Decision” and to which facts the CJEU limited its reasoning. There has, however, also been a vocal movement among NGOs, European politicians, and—recently—national data-protection authorities to treat Schrems II as if it conclusively decided that exports of personal data to the United States could not be justified through standard contractual clauses (“SCC”) in most contexts (i.e., when data can be accessed in the United States). This interpretation has now led to a series of enforcement actions by national authorities in Austria, France, and likely in several other member states (notably in the “Google Analytics” cases, as well as the French “Doctolib/Amazon Web Services” case).[3]

Aiming to address this precarious situation, the White House adopted a new data-protection framework for intelligence-collection activities. On Oct. 7, 2022, President Joe Biden signed an executive order codifying that framework,[4] which had been awaited since U.S. and EU officials reached an agreement in principle on a new data-privacy framework in March 2022.[5] The European Commission responded by preparing a draft “Adequacy Decision” for the United States under Article 45(3) of the General Data Protection Regulation (GDPR), which was released in December 2022.[6] In July 2023, the European Commission formally adopted the Adequacy Decision.[7]

The first legal challenge to the decision has already been filed by Philippe Latombe, a member of the French Parliament and a commissioner of the French Data Protection Authority (CNIL).[8] Latombe is acting in his personal capacity, not as a French MP or a member of CNIL. He chose a direct action for annulment under Article 263 of the Treaty on the Functioning of the European Union (TFEU), which means that his case faces strict admissibility conditions. Based on precedent, it would not be surprising if the EU courts refuse to consider its merits.[9] Regarding the substance of Latombe’s action, he described it in very general terms in his press release (working translation from French):

The text resulting from these negotiations violates the Charter of Fundamental Rights of the Union, due to the insufficient guarantees of respect for private and family life with regard to the bulk collection of personal data, and the General Data Protection Regulation (GDPR), due to the absence of guarantees of a right to an effective remedy and access to an impartial tribunal, the absence of a framework for automated decisions or lack of guarantees relating to the security of the data processed: all violations of our law which I develop in the 33-page brief (+ 283 pages of annexes) filed with the TJUE yesterday.[10]

Latombe also complained about the Adequacy Decision being published only in English.[11] Irrespective of the legal merits of that complaint, however, it is already moot because the Adequacy Decision was subsequently published in the Official Journal of the European Union in all official EU languages.[12]

Reportedly, Max Schrems also plans to bring a legal challenge against the Adequacy Decision,[13] as he has successfully done with the two predecessors of the current EU-US framework.[14] This time, however, Schrems plans to begin the suit in the Austrian courts, hoping for a speedy preliminary reference to the EU Court of Justice (“CJEU”).[15]

This paper aims to present and discuss the key legal issues surrounding the European Commission’s Adequacy Decision, which are likely to be the subject of litigation. In Section II, I begin by problematizing the applicable legal standard of an “adequate level of protection” of personal data in a third country, noting that this issue remains open for the CJEU to address. This makes it more challenging to assess the Adequacy Decision’s chances before the Court and suggests that the conclusive tone adopted by some commentators is premature.

I then turn, in Section III, to the question of proportionality of bulk data collection by the U.S. government. I consider whether the objectives for which U.S. intelligence agencies collect personal data may constitute “legitimate objectives” under EU law. Secondly, I discuss whether bulk collection of personal data may be done in a way that does not jeopardize adequacy under the GDPR.

The second part of Section III is devoted to the problem of effective redress, which was the critical issue on which the CJEU relied in making its Schrems II decision. I note some confusion among the commentators about the precise role of Article 47 of the EU Charter of Fundamental Rights for a third-country adequacy assessment under the GDPR. I then outline the disagreement between the Commission and some commentators on whether the new U.S. data-protection framework provides redress through an independent and impartial tribunal with binding powers.

Finally, I discuss the issue of access to information about U.S. intelligence agencies’ data-processing activities.

II.      The Applicable Legal Standard: What Does ‘Adequacy’ Mean?

The overarching legal question that the CJEU will likely need to answer is whether the United States “ensures an adequate level of protection for personal data essentially equivalent to that guaranteed in the European Union by the GDPR, read in the light of Articles 7 and 8 of the [EU Charter of Fundamental Rights].”[16]

The words “essentially equivalent” are not to be found in the GDPR’s provision on adequacy decisions—i.e., in its Article 45, which merely refers to an “adequate level of protection” of personal data in a third country. Instead, we find them in the GDPR’s recital 104: “[t]he third country should offer guarantees ensuring an adequate level of protection essentially equivalent to that ensured within the Union (…).” This phrasing goes back to the CJEU’s Schrems I decision,[17] where the Court interpreted the old Data Protection Directive (Directive 95/46).[18] In Schrems I, the Court stated:

The word ‘adequate’ in Article 25(6) of Directive 95/46 admittedly signifies that a third country cannot be required to ensure a level of protection identical to that guaranteed in the EU legal order. However, as the Advocate General has observed in point 141 of his Opinion, the term ‘adequate level of protection’ must be understood as requiring the third country in fact to ensure, by reason of its domestic law or its international commitments, a level of protection of fundamental rights and freedoms that is essentially equivalent to that guaranteed within the European Union by virtue of Directive 95/46 read in the light of the Charter.[19]

As Christakis, Propp, & have Swire noted,[20] the critical point that “a third country cannot be required to ensure a level of protection identical to that guaranteed in the EU legal order” was also accepted by the Advocate General Øe in Schrems II.[21]

In 2020, the European Data Protection Board (EDPB) issued recommendations “on the European Essential Guarantees for surveillance measures.”[22] The recommendations aim to “form part of the assessment to conduct in order to determine whether a third country provides a level of protection essentially equivalent to that guaranteed within the EU.”[23] The EDPB’s document is, of course, not a source of law binding the Court of Justice, but it attempts to interpret the law in light of the CJEU’s jurisprudence. The Court is free not to follow the EDPB’s legal interpretation, and thus the importance of the recommendations should not be overstated, either in favor or against the Adequacy Decision.

While we know that the “adequate level” and “essential equivalence” of protection do not necessarily mean identical protection, the precise degree of flexibility remains an open question—and one that the EU Court may need to clarify to a much greater extent.

III.    Arguments Likely to Be Made Against the Adequacy Decision

A.     Proportionality and Bulk Data Collection

Under Article 52(1) of the EU Charter of Fundamental Rights, restrictions on the right to privacy and the protection of personal data must meet several conditions. They must be “provided for by law” and “respect the essence” of the right. Moreover, “subject to the principle of proportionality, limitations may be made only if they are necessary” and meet one of the objectives recognized by EU law or “the need to protect the rights and freedoms of others.”

The October 2022 executive order supplemented the phrasing “as tailored as possible” present in 2014’s Presidential Policy Directive on Signals Intelligence Activities (PPD-28) with language explicitly drawn from EU law: mentions of the “necessity” and “proportionality” of signals-intelligence activities related to “validated intelligence priorities.”[24]

Doubts have been raised, however, as to whether this is sufficient. I consider two potential issues. First, whether the objectives for which U.S. intelligence agencies collect personal data may constitute “legitimate objectives” under EU law. Second, whether the bulk collection of personal data may be done in a way that does not jeopardize adequacy under the GDPR.

1.        Legitimate objectives

In his analysis of the adequacy under EU law of the new U.S. data-protection framework, Douwe Korff argues that:

The purposes for which the Presidential Executive Order allows the use of signal intelligence and bulk data collection capabilities are clearly not limited to what the EU Court of Justice regards as legitimate national security purposes.[25]

Korff’s concern is that the legitimate objectives listed in the executive order are too broad and could be interpreted to include, e.g., criminal or economic threats, which do not rise to the level of “national security” as defined by the CJEU.[26] Korff referred to the EDPB Recommendations, which reference CJEU decisions in La Quadrature du Net and Privacy International. Unlike Korff, however, the EDPB stresses that those CJEU decisions were “in relation to the law of a Member State and not to a third country law.”[27]

In contrast, in Schrems II, the Court did not consider legitimate objectives when assessing whether a third country provides adequate protection. In its recommendations, the EDPB discussed the legal material that was available, i.e., the CJEU decisions on intra-EU matters. Still, this approach can be taken too far without sufficient care. Just because some guidance is available (on intra-EU issues), it does not follow that it applies to data transfers outside the EU. It is instructive to consider, in this context, what Advocate General Øe said in Schrems II:

It also follows from that judgment [Schrems I – MB], in my view, that the law of the third State of destination may reflect its own scale of values according to which the respective weight of the various interests involved may diverge from that attributed to them in the EU legal order. Moreover, the protection of personal data that prevails within the European Union meets a particularly high standard by comparison with the level of protection in force in the rest of the world. The ‘essential equivalence’ test should therefore in my view be applied in such a way as to preserve a certain flexibility in order to take the various legal and cultural traditions into account. That test implies, however, if it is not to be deprived of its substance, that certain minimum safeguards and general requirements for the protection of fundamental rights that follow from the Charter and the ECHR have an equivalent in the legal order of the third country of destination.[28]

Hence, exclusive focus on what the EU law requires within the EU—however convenient this method may be—may be misleading in assessing the adequacy of a third country under Article 45.

Aside from the lack of direct guidance on the question of legitimate objectives under Article 45 GDPR, there is a second reason not to be too quick to conclude that the U.S. framework fails on this point. As the Commission noted in the Adequacy Decision:

(…) the legitimate objectives laid down in EO 14086 cannot by themselves be relied upon by intelligence agencies to justify signals intelligence collection but must be further substantiated, for operational purposes, into more concrete priorities for which signals intelligence may be collected. In other words, actual collection can only take place to advance a more specific priority. Such priorities are established through a dedicated process aimed at ensuring compliance with the applicable legal requirements, including those relating to privacy and civil liberties.[29]

It may be a formalistic mistake to consider the list of “legitimate objectives” in isolation from such additional requirements and process. The assessment of third-country adequacy cannot be constrained by the mere choice of words, even if they seem to correspond to an established concept in EU law. (Note that this also applies to “necessity” and “proportionality” as used in the executive order.)

2.        Can bulk collection be ‘adequate’?

As Max Schrems’ organization NOYB stated in response to the executive order’s publication:

(…) there is no indication that US mass surveillance will change in practice. So-called “bulk surveillance” will continue under the new Executive Order (see Section 2 (c)(ii)) and any data sent to US providers will still end up in programs like PRISM or Upstream, despite of the CJEU declaring US surveillance laws and practices as not “proportionate” (under the European understanding of the word) twice.[30]

Korff echoed this view, noting, e.g.:

(…) – the EO [Executive Order – MB] does not stand in the way of the indiscriminate bulk collection of e-communications content data that the EU Court held does not respect the “essence” of data protection and privacy and that therefore, under EU law, must always be prohibited, even in relation to national security issues (as narrowly defined);

– the EO allows for indiscriminate bulk collection of e-communications metadata outside of the extreme scenarios in which the EU Court only, exceptionally, allows it in Europe; and

– the EO allows for indiscriminate bulk collection of those and other data for broadly defined not national security-related purposes in relation to which such collection is regarded as clearly not “necessary” or “proportionate” under EU law.[31]

The Schrems II Court indeed held that U.S. law and practices do not “[correlate] to the minimum safeguards resulting, under EU law, from the principle of proportionality.”[32] As, however, the EDPB noted in its opinion on a draft of the Adequacy Decision:

… the CJEU did not exclude, by principle, bulk collection, but considered in its Schrems II decision that for such bulk collection to take place lawfully, sufficiently clear and precise limits must be in place to delimit the scope of such bulk collection. (…)

The EDPB also recognizes that while replacing the PPD-28, the EO 14086 provides for new safeguards and limits to the collection and use of data collected outside the U.S., as the limitations of FISA or other more specific U.S. laws do not apply.[33]

As Korff observed, the CJEU has considered the question of bulk collection of electronic communication data, in an intra-EU context, in cases like Digital Rights Ireland[34] and La Quadrature du Net.[35] In Schrems I, the Court referenced Digital Rights Ireland, while stating:

(…) legislation permitting the public authorities to have access on a generalised basis to the content of electronic communications must be regarded as compromising the essence of the fundamental right to respect for private life, as guaranteed by Article 7 of the Charter (…)[36]

This is potentially important, because the Court concluded the discussion included in this paragraph by saying that “a level of protection of fundamental rights essentially equivalent to that guaranteed in the EU legal order” is “apparent in particular from the preceding paragraphs.”[37] This could suggest that, as under the Data Protection Directive in Schrems I, the Court may see the issue of bulk collection of the contents of electronic communications as a serious problem for adequacy under Article 45 GDPR.

The Commission addressed this in the Adequacy Decision as follows:

(…) collection of data within the United States, which is the most relevant for the present adequacy finding as it concerns data that has been transferred to organisations in the U.S., must always be targeted (…) ‘Bulk collection’ may only be carried out outside the United States, on the basis of EO 12333.[38]

The Commission relies on a distinction between data collection that the U.S. government does within the United States and outside of the United States. This likely refers to an argument—discussed by, e.g., Christakis[39] —that adequacy assessment should only concern the processing of personal data that takes place due to a data transfer to the country in question. In other words, it should only concern domestic surveillance, not international surveillance (if personal data transferred from the EU would fall under domestic surveillance in that third country).

The Commission also made a second relevant point:

(…) bulk collection under EO 12333 takes place only when necessary to advance specific validated intelligence priorities and is subject to a number of limitations and safeguards designed to ensure that data is not accessed on an indiscriminate basis. Bulk collection is therefore to be contrasted to collection taking place on a generalised and indiscriminate basis (‘mass surveillance’) without limitations and safeguards.[40]

In the Commission’s view, there is a categorical distinction between “bulk collection” as practiced by the United States and the “generalized and indiscriminate” mass surveillance that the CJEU scrutinized in Digital Rights Ireland and other cases. This may seem like an unnatural reading of “generalized and indiscriminate,” given that it is meant not to apply to “the collection of large quantities of signals intelligence that, due to technical or operational considerations, is acquired without the use of discriminants (for example, without the use of specific identifiers or selection terms).”[41] There may, however, be analogies in EU law that could lead the Court to agree with the Commission on this point.

Consider the Court’s interpretation of the prohibition on “general monitoring” obligations from Article 15(1) of the eCommerce Directive.[42] In Glawischnig-Piesczek, the Court interpreted this rule as not precluding member states from requiring hosting providers to monitor all the content they host in order to identify content identical to “the content of information which was previously declared to be unlawful.”[43] In other words, “general monitoring” was interpreted as not covering indiscriminate processing of all data stored by a hosting provider in order to find content identical to some other content.[44] The Court adopted an analogous approach with respect to Article 17 of the Copyright Directive.[45] This suggests that, in somewhat similar contexts, the Court is willing to see activities that may technically appear to be “general” as “not general,” if some procedural or substantive limitations are present.

B.     Effective Redress

The lack of effective redress available to EU citizens against potential restrictions of their right to privacy from U.S. intelligence activities was central to the Schrems II decision. Among the Court’s key findings were that “PPD-28 does not grant data subjects actionable rights before the courts against the US authorities”[46] and that, under Executive Order 12333, “access to data in transit to the United States [is possible] without that access being subject to any judicial review.”[47]

The new executive order introduced redress mechanisms that include creating a civil-liberties-protection officer in the Office of the Director of National Intelligence (DNI), as well as a new Data Protection Review Court (DPRC). The DPRC is proposed as an independent review body that will make decisions binding on U.S. intelligence agencies. The old framework had sparked concerns about the independence of the DNI’s ombudsperson, and what was seen as insufficient safeguards against external pressures, including the threat of removal. Under the new framework, the independence and binding powers of the DPRC are grounded in regulations issued by the U.S. attorney general.

In a recent public debate, Max Schrems argued that the CJEU would have a difficult time finding that this judicial procedure satisfies Article 47 of the EU Charter, while at the same time holding that some courts in Poland and Hungary do not satisfy it.[48]

1.        Article 47 of the Charter ‘contributes’ to the benchmark level of protection

Schrems’ comment raises two distinct issues. First, Schrems seems to suggest that an adequacy decision can only be granted if the available redress mechanism satisfies the requirements of Article 47 of the Charter of Fundamental Rights.[49] But this is a hasty conclusion. The CJEU’s phrasing in Schrems II is more cautious:

…Article 47 of the Charter, which also contributes to the required level of protection in the European Union, compliance with which must be determined by the Commission before it adopts an adequacy decision pursuant to Article 45(1) of the GDPR.[50]

In arguing that Article 47 “also contributes to the required level of protection,” the Court is not saying that it determines the required level of protection. This is potentially significant, given that the standard of adequacy is “essential equivalence,” not that it be procedurally and substantively identical. Moreover, the Court did not say that the Commission must determine compliance with Article 47 itself, but with the “required level of protection” (which, again, must be “essentially equivalent”). Hence, it is far from clear how the CJEU’s jurisprudence interpreting Article 47 of the Charter is to be applied in the context of an adequacy assessment under Article 45 GDPR.

2.        Is there an independent and impartial tribunal with binding powers?

Second, there is the related but distinct question of whether the redress mechanism is effective under the applicable standard of “required level of protection.” Christakis, Propp, & Swire offer helpful analysis suggesting that it is, considering the proposed DPRC’s independence, effective investigative powers, and authority to issue binding determinations.[51] Gorski & Korff argue that this is not the case, because the DPRC is not “wholly autonomous” and “free from hierarchical constraint.”[52]

The Commission stated in the Adequacy Decision that the available avenues of redress “allow individuals to have access to their personal data, to have the lawfulness of government access to their data reviewed and, if a violation is found, to have such violation remedied, including through the rectification or erasure of their personal data.”[53] Moreover:

(…) the executive branch (the Attorney General and intelligence agencies) are barred from interfering with or improperly influencing the DPRC’s review. The DPRC itself is required to impartially adjudicate cases and operates according to its own rules of procedure (adopted by majority vote) (…)[54]

Likely the most serious objection to this assessment (raised by Gorski) is that:

(…) the court’s decisions can be overruled by the President. Indeed, the President could presumably overrule these decisions in secret, since the court’s opinions are not issued publicly.[55]

Given that Christakis, Propp, & Swire appear to disagree,[56] this question of U.S. law may require further scrutiny. Even if the scenario sketched by Gorski is theoretically possible, however, the CJEU may take the view that it would not be appropriate to rule based on the assumption that the U.S. government would act to mislead the EU. And without that assumption, then the possibility of future changes to U.S. law appear to be adequately addressed by the adequacy-monitoring process (Article 45(4) GDPR).

3.        Do EU persons have effective access to the redress mechanism?

In the already-cited public debate, Max Schrems argued that it may be practically impossible for EU persons to benefit from the new redress mechanism, due to the requirements imposed on “qualifying complaints” under the executive order.[57] Presumably, Schrems implicitly refers to the requirements that a complaint:

(i) “alleges a covered violation has occurred that pertains to personal information of or about the complainant, a natural person, reasonably believed to have been transferred to the United States from a qualifying state after” the official designation of that country by the Attorney General;

(ii) includes “information that forms the basis for alleging that a covered violation has occurred, which need not demonstrate that the complainant’s data has in fact been subject to United States signals intelligence activities; the nature of the relief sought; the specific means by which personal information of or about the complainant was believed to have been transmitted to the United States; the identities of the United States Government entities believed to be involved in the alleged violation (if known); and any other measures the complainant pursued to obtain the relief requested and the response received through those other measures;”

(iii) “is not frivolous, vexatious, or made in bad faith”[58]

Given the qualifications that a complaint need only to “allege” a violation and “need not demonstrate that the complainant’s data has in fact been subject to United States signals intelligence activities,” it is unclear what Schrems’ basis for suggesting that it will not be possible for EU persons to benefit from this redress mechanism is.

C.     Access to Information About Data Processing

Finally, Schrems’ NOYB raised a concern that “judgment by ‘Court’ [is] already spelled out in Executive Order.”[59] This concern seems to be based on the view that a decision of the DPRC (“the judgment”) and what the DPRC communicates to the complainant are the same thing. In other words, the legal effects of a DPRC decision are exhausted by providing the individual with the neither-confirm-nor-deny statement set out in Section 3 of the executive order. This is clearly incorrect. The DPRC has the power to issue binding directions to intelligence agencies. The actual binding determinations of the DPRC are not predetermined by the executive order; only the information to be provided to the complainant is.

Relatedly, Korff argues that:

(…) the meaningless “boilerplate” responses that are spelled out in the rules also violate the principle, enshrined in the ECHR and therefore also applicable under the Charter, that any judgment of a court must be “pronounced publicly”. The “boilerplate” responses, in my opinion, do not constitute the “judgment” reached (…)[60]

Here, as before, Korff appears to elide the question of the legal standard of “adequacy,” directly applying to a third country what he argues is required under the European Convention of Human Rights and thus under the EU Charter.

The issues of access to information and data may, however, call for closer consideration. For example, in La Quadrature du Net, the CJEU looked at the difficult problem of notifying persons whose data has been subject to state surveillance, requiring individual notification “only to the extent that and as soon as it is no longer liable to jeopardise” the law-enforcement tasks in question.[61] Nevertheless, given the “essential equivalence” standard applicable to third-country adequacy assessments, it does not automatically follow that individual notification is at all required in that context.

Moreover, it also does not necessarily follow that adequacy requires that EU citizens have a right to access the data processed by foreign government agencies. The fact that there are significant restrictions on rights to information and access in some EU member states,[62] though not definitive (after all, those countries may be violating EU law), may be instructive for the purposes of assessing the adequacy of data protection in a third country, where EU law requires only “essential equivalence.”

The Commission’s Adequacy Decision accepted that individuals would have access to their personal data processed by U.S. public authorities, but clarifies that this access may be legitimately limited—e.g., by national-security considerations.[63] The Commission did not take the simplistic view that access to personal data must be guaranteed by the same procedure that provides binding redress, including through the Data Protection Review Court. Instead, the Commission accepts that other avenues, such as requests under the Freedom of Information Act, may perform that function.

IV.    Conclusion

With the Adequacy Decision, the European Commission announced that it has favorably assessed the October 2022 executive order’s changes to the U.S. data-protection framework, which apply to foreigners from friendly jurisdictions (presumed to include the EU). The Adequacy Decision is certain to be challenged before the CJEU by privacy advocates. As discussed above, the key legal concerns will likely be the proportionality of data collection and the availability of effective redress.

Opponents of granting an adequacy decision tend to rely on the assumption that a finding of adequacy requires virtually identical substantive and procedural privacy safeguards as required within the EU. As noted by the European Commission in its decision, this position is not well-supported by CJEU case law, which clearly recognizes that only “adequate level” and “essential equivalence” of protection are required from third-party countries under the GDPR. To date, the CJEU has not had to specify in greater detail precisely what, in their view, these provisions mean. Instead, the Court has been able to point to certain features of U.S. law and practice that were significantly below the GDPR standard (e.g., that the official responsible for providing individual redress was not guaranteed to be independent of political pressure). Future legal challenges to a new Adequacy Decision will most likely require the CJEU to provide more guidance on what “adequate” and “essentially equivalent” mean.

In the Adequacy Decision, the Commission carefully considered the features of U.S. law and practice that the Court previously found inadequate under the GDPR. Nearly half of the explanatory part of the decision is devoted to “access and use of personal data transferred from the [EU] by public authorities in the” United States, with the analysis grounded in CJEU’s Schrems II decision.

Overall, the Commission presents a sophisticated, yet uncynical, picture of U.S. law and practice. The lack of cynicism about, e.g., the independence of the DPRC adjudicative process, will undoubtedly be seen by some as naïve and unrealistic, even if the “realism” in this case is based on speculations of what might happen (e.g., secret changes to U.S. policy), rather than evidence. Litigants will likely invite the CJEU to assume that the U.S. government cannot be trusted and that it will attempt to mislead the European Commission and thus undermine the adequacy-monitoring process (Article 45(3) GDPR). It is not clear, however, that the Court will be willing to go that way—not least due to respect for comity in international law.

[1] Regulation (EU) 2016/679 (General Data Protection Regulation).

[2] Case C-311/18, Data Protection Comm’r v. Facebook Ireland Ltd. & Maximillian Schrems, ECLI:EU:C:2019:1145 (CJ, Jul. 16, 2020), available at http://curia.europa.eu/juris/liste.jsf?num=C-311/18 [hereinafter “Schrems II”].

[3] See, e.g., Ariane Mole, Willy Mikalef, & Juliette Terrioux, Why This French Court Decision Has Far-Reaching Consequences for Many Businesses, IAPP.org (Mar. 15, 2021), https://iapp.org/news/a/why-this-french-court-decision-has-far-reaching-consequences-for-many-businesses; Gabriela Zanfir-Fortuna, Understanding Why the First Pieces Fell in the Transatlantic Transfers Domino, The Future of Privacy Forum (2022), https://fpf.org/blog/understanding-why-the-first-pieces-fell-in-the-transatlantic-transfers-domino; Caitlin Fennessy, The Austrian Google Analytics decision: The Race Is On, IAPP Privacy Perspectives (Feb. 7, 2022) https://iapp.org/news/a/the-austrian-google-analytics-decision-the-race-is-on; Italian SA Bans Use of Google Analytics: No Adequate Safeguards for Data Transfers to the USA (Jun. 23, 2022), https://www.gpdp.it/web/guest/home/docweb/-/docweb-display/docweb/9782874.

[4] Executive Order on Enhancing Safeguards for United States Signals Intelligence Activities, The White House (2022), https://www.whitehouse.gov/briefing-room/presidential-actions/2022/10/07/executive-order-on-enhancing-safeguards-for-united-states-signals-intelligence-activities.

[5] European Commission and United States Joint Statement on Trans-Atlantic Data Privacy Framework, European Commission (Mar. 25, 2022), https://ec.europa.eu/commission/presscorner/detail/en/IP_22_2087.

[6] Draft Commission Implementing Decision Pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the Adequate Level of Protection of Personal Data Under the EU-US Data Privacy Framework, European Commission (2022), available at https://commission.europa.eu/system/files/2022-12/Draft%20adequacy%20decision%20on%20EU-US%20Data%20Privacy%20Framework_0.pdf.

[7]  Commission Implementing Decision EU 2023/1795 of 10 July 2023 pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the adequate level of protection of personal data under the EU-US Data Privacy Framework, OJ L 231, 20.9.2023, European Commission (2023), https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32023D1795 (hereinafter “Adequacy Decision”).

[8] See Patrice Navarro & Julie Schwartz, Member of French Parliament Lodges First Request for Annulment of EU-US Data Privacy Framework, Hogan Lovells Engage (Sep. 8, 2023), https://www.engage.hoganlovells.com/knowledgeservices/news/member-of-french-parliament-lodges-first-request-for-annulment-of-eu-us-data-privacy-framework; Philippe Latombe, Communiqué de Presse (Sep. 7, 2023), available at https://www.politico.eu/wp-content/uploads/2023/09/07/4_6039685923346583457.pdf.

[9] See, e.g., Joe Jones, EU-US Data Adequacy Litigation Negins, IAPP.org (Sep. 8, 2023), https://iapp.org/news/a/eu-u-s-data-adequacy-litigation-begins.

[10] Latombe, supra note 9.

[11] Id.

[12] See supra note 8.

[13] Mark Scott, We Don’t Talk About Fixing Social Media, Digital Bridge from Politico (Aug. 3, 2023), https://www.politico.eu/newsletter/digital-bridge/we-dont-talk-about-fixing-social-media. See also New Trans-Atlantic Data Privacy Framework Largely a Copy of “Privacy Shield”. NOYB Will Challenge the Decision, noyb.eu (2023), https://noyb.eu/en/european-commission-gives-eu-us-data-transfers-third-round-cjeu.

[14] Case C-362/14, Maximillian Schrems v Data Protection Commissioner, ECLI:EU:C:2015:650, available at https://curia.europa.eu/juris/liste.jsf?num=C-362/14 [hereinafter “Schrems I”].

[15] Scott, supra note 13.

[16] Schrems II [178].

[17] Case C?362/14, Maximillian Schrems v Data Protection Commissioner, EU:C:2015:650 (CJEU judgment of 6 October 2015) [hereinafter: “Schrems I”].

[18] Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the Protection of Individuals With Regard to the Processing of Personal Data and on the Free Movement of Such Data (“Data Protection Directive”).

[19] Schrems I [73].

[20] Theodore Christakis, Kenneth Propp, & Peter Swire, EU/US Adequacy Negotiations and the Redress Challenge: Whether a New U.S. Statute is Necessary to Produce an “Essentially Equivalent” Solution, European Law Blog (2022), https://europeanlawblog.eu/2022/01/31/eu-us-adequacy-negotiations-and-the-redress-challenge-whether-a-new-u-s-statute-is-necessary-to-produce-an-essentially-equivalent-solution.

[21] Opinion of Advocate General Saugmandsgaard Øe delivered on 19 December 2019, Data Protection Commissioner v Facebook Ireland Limited and Maximillian Schrems, ECLI:EU:C:2019:1145 [248].

[22] European Data Protection Board, Recommendations 02/2020 on the European Essential Guarantees for surveillance measures, available at https://edpb.europa.eu/sites/default/files/files/file1/edpb_recommendations_202002_europeanessentialguaranteessurveillance_en.pdf (hereinafter: “EDPB Recommendations on surveillance measures”).

[23] EDPB Recommendations on surveillance measures [8].

[24] Executive Order, supra note 5, Sec. 2(a)(ii)(B).

[25] Douwe Korff, The Inadequacy of the October 2022 New US Presidential Executive Order on Enhancing Safeguards For United States Signals Intelligence Activities, 13 (2022), https://www.ianbrown.tech/2022/11/11/the-inadequacy-of-the-us-executive-order-on-enhancing-safeguards-for-us-signals-intelligence-activities.

[26] Id. at 10–13.

[27] EDPB Recommendations on surveillance measures [34].

[28] Opinion of Advocate General Saugmandsgaard Øe in Schrems II [249].

[29] European Commission, supra note 8, Recital 135.

[30] New US Executive Order Unlikely to Satisfy EU Law, NOYB (Oct. 7, 2022), https://noyb.eu/en/new-us-executive-order-unlikely-satisfy-eu-law.

[31] Korff, supra note 25 at 19.

[32] Schrems II [184].

[33] European Data Protection Supervisor, Opinion 5/2023 on the European Commission Draft Implementing Decision on the Adequate Protection of Personal Data Under the EU-US Data Privacy Framework, [134]-[135] (2023), https://edpb.europa.eu/our-work-tools/our-documents/opinion-art-70/opinion-52023-european-commission-draft-implementing_en. See also Alex Joel, Necessity, Proportionality, and Executive Order 14086, Joint PIJIP/TLS Research Paper Series (2023), https://digitalcommons.wcl.american.edu/research/99.

[34] Digital Rights Ireland and Others, Cases C?293/12 and C?594/12, EU:C:2014:238.

[35] La Quadrature du Net and Others v Premier Ministre and Others, Case C-511/18, ECLI:EU:C:2020:791.

[36] Schrems I [94].

[37] Schrems I [96].

[38] European Commission, supra note 8, Recitals 140-141 (footnotes omitted).

[39] Theodore Christakis, Squaring the Circle? International Surveillance, Underwater Cables and EU-US Adequacy Negotiations (Part 1), European Law Blog (2021), https://europeanlawblog.eu/2021/04/12/squaring-the-circle-international-surveillance-underwater-cables-and-eu-us-adequacy-negotiations-part1; Theodore Christakis, Squaring the Circle? International Surveillance, Underwater Cables and EU-US Adequacy Negotiations (Part 2), European Law Blog (2021), https://europeanlawblog.eu/2021/04/13/squaring-the-circle-international-surveillance-underwater-cables-and-eu-us-adequacy-negotiations-part2.

[40] European Commission, supra note 8, Recital 141, footnote 250 (emphasis added).

[41] Id., Recital 141, footnote 250.

[42] Directive (EU) 2000/31/EC of the European Parliament and of the Council of 8 June 2000 on Certain Legal Aspects of Information Society Services, in Particular Electronic Commerce, in the Internal Market (‘Directive on Electronic Commerce’) [2000] OJ L178/1.

[43] Case C-18/18, Eva Glawischnig-Piesczek v Facebook [2019] ECLI:EU:C:2019:821. See also Daphne Keller, Facebook Filters, Fundamental Rights, and the CJEU’s Glawischnig-Piesczek Ruling, 69 GRUR International 616 (2020).

[44] As Keller puts it: “Instead of defining prohibited ‘general’ monitoring as monitoring that affects every user, the Court effectively defines it as monitoring for content that was not specified in advance by a court.” Id. at 620.

[45] Case C?401/19, Poland v Parliament and Council [2022] ECLI:EU:C:2022:297; Directive (EU) 2019/790 of the European Parliament and of the Council of 17 April 2019 on Copyright and Related Rights in the Digital Single Market and Amending Directives 96/9/EC and 2001/29/EC (OJ 2019 L 130, p. 92). For background, see Christophe Geiger & Bernd Justin Jütte, Platform Liability Under Art. 17 of the Copyright in the Digital Single Market Directive, Automated Filtering and Fundamental Rights: An Impossible Match, 70 GRUR International 517 (2021).

[46] Schrems II [181].

[47] Schrems II [183].

[48] @MBarczentewicz, Twitter (Aug. 24, 2023, 9:43 AM), https://twitter.com/MBarczentewicz/status/1694707035659813023. See also Max Schrems, Open Letter on the Future of EU-US Data Transfers (May 23, 2022), https://noyb.eu/en/open-letter-future-eu-us-data-transfers.

[49] Similar phrasing can be found in Ashley Gorski, The Biden Administration’s SIGINT Executive Order, Part II: Redress for Unlawful Surveillance, Just Security (2022), https://www.justsecurity.org/83927/the-biden-administrations-sigint-executive-order-part-ii. Gorski’s text shows well how easy it is to elide, even unintentionally, the distinction between the Article 47 being a standard that must be satisfied by a third country, and it merely contributing to the level of protection that constitutes a benchmark for an adequacy assessment. At one point she notes that “the CJEU held that U.S. law failed to provide an avenue of redress ‘essentially equivalent’ to that required by Article 47.” In other places, however, she adopts the phrasing of “satisfying” Article 47.

[50] Schrems II [186].

[51] Theodore Christakis, Kenneth Propp & Peter Swire, The Redress Mechanism in the Privacy Shield Successor: On the Independence and Effective Powers of the DPRC, IAPP.org (2022), https://iapp.org/news/a/the-redress-mechanism-in-the-privacy-shield-successor-on-the-independence-and-effective-powers-of-the-dprc.

[52] Gorski, supra note 49; Korff, supra note 25 at 21.

[53] European Commission, supra note 8, Recital 175.

[54] Id., Recital 187 (footnotes omitted).

[55] Gorski, supra note 49.

[56] According to them: “(…) key U.S. Supreme Court decisions have affirmed the binding force of a DOJ regulation and the legal conclusion that all of the executive branch, including the president and the attorney general, are bound by it.” Christakis, Propp, & Swire, supra note 51.

[57] @MBarczentewicz, Twitter (Aug. 24, 2023, 9:43 AM), https://twitter.com/MBarczentewicz/status/1694707035659813023.

[58] Executive Order, section 5(k)(i)-(iv).

[59] NOYB, New US Executive Order Unlikely to Satisfy EU Law (Oct. 7, 2022), https://noyb.eu/en/new-us-executive-order-unlikely-satisfy-eu-law. See also NOYB, supra note 13.

[60] Korff, supra note 25 at 25.

[61] Joined cases C-511/18, C-512/18 and C-520/18, La Quadrature du Net and others, ECLI:EU:C:2020:791 [191].

[62] European Union Agency for Fundamental Rights, Surveillance by Intelligence Services: Fundamental Rights Safeguards and Remedies in the EU – Volume II: Field Perspectives and Legal Update (2017) https://fra.europa.eu/en/publication/2017/surveillance-intelligence-services-fundamental-rights-safeguards-and-remedies-eu.

[63] European Commission, supra note 8, Recitals 199-200.

Continue reading
Data Security & Privacy

More FTC Overreach in Labor Markets

TOTM The Federal Trade Commission (FTC) and U.S. Labor Department (DOL) signed a memorandum of understanding (MOU) this past week “to strengthen the Agencies’ partnership through greater cooperation . . .

The Federal Trade Commission (FTC) and U.S. Labor Department (DOL) signed a memorandum of understanding (MOU) this past week “to strengthen the Agencies’ partnership through greater cooperation and coordination in information sharing, investigations and enforcement activity, training, education, research, and outreach.” The accompanying Sept. 21 announcement is another example of FTC overreach, as it highlights matters that simply are not part of the agency’s mission.

Read the full piece here.

Continue reading
Antitrust & Consumer Protection

Comment of the International Center of Law & Economics Concerning Merger Enforcement in India and the Competition Amendment Act of 2023

Regulatory Comments Introduction We appreciate the opportunity to comment on some of the changes made by the Competition (the Amendment) Act, 2023 (Amendment Act) to India’s Competition . . .

Introduction

We appreciate the opportunity to comment on some of the changes made by the Competition (the Amendment) Act, 2023 (Amendment Act) to India’s Competition Act of 2002 (the Act).

The International Center for Law & Economics (“ICLE”) is a nonprofit, nonpartisan, global research and policy center—based in Portland. Oregon, United States—founded to build the intellectual foundations for sensible, economically grounded policy. ICLE promotes the use of law & economics methodologies, and economic findings, to inform public policy. More specifically, ICLE and its affiliate scholars have written extensively about competition and merger policy and routinely engage with policymakers and academics across the globe on these issues.

The Amendment raises several important issues, but our comments focus on the new notification criteria for M&A deals. The Amendment adds a new notification threshold to Section 5 of the Act, which outlines when parties need to notify their merger to the Competition Commission of India. Under the new Section 5 (d), parties must notify a transaction when:

“(d) value of any transaction, in connection with acquisition of any control, shares, voting rights or assets of an enterprise, merger or amalgamation exceeds rupees two thousand crore:

Provided that the enterprise which is being acquired, taken control of, merged or amalgamated has such substantial business operations in India as may be specified by regulations.[1]

These new thresholds appear designed to catch certain startup acquisitions that would otherwise escape merger review because the target firm has little to no turnover or assets. In other words, the amendment adds a new threshold that aims to ensure potential “killer acquisitions” are reviewed by enforcers.

But while attempting to catch transactions that may harm consumers is commendable, it is important to understand the important tradeoffs that ensue. Policing mergers is anything but costless and any change in merger policy should consider both the benefits and the costs. Agencies will need to devote time and resources to assess mergers that previously were waved through without review. In turn, absent significantly more resources, this will reduce the review time devoted to the most problematic deals. Looking outside the agency, it will also increase the cost of mergers for parties, thereby chilling all deals, even procompetitive deals.

Our comment analyzes these tradeoffs in more detail, ultimately concluding that lower merger=filing thresholds may be inappropriate when viewed through the lens of the error-cost framework. Section I puts the Amendment in a global context, explaining the impetus for and weakness of attempts to bolster merger enforcement around the world. Section II outlines some of the implications of the error-cost framework for merger policy. Section III concludes by putting forward four questions that policymakers should ask themselves when they amend merger-enforcement law and policy.

I.        The Global Crackdown on Mergers

The antitrust policy world has fallen out of love with corporate mergers. After decades of relatively laissez-faire enforcement, spurred in part by the emergence of Chicago school of economics,[2] a growing number of policymakers and scholars are calling for tougher rules to curb corporate acquisitions. But these appeals are premature. There is currently little evidence to suggest that mergers systematically harm consumer welfare. More importantly, scholars fail to identify alternative institutional arrangements that could capture the anticompetitive mergers that evade prosecution without disproportionate false positives and administrative costs. Their proposals thus fail to meet the requirements of the error-cost framework.

Taking a step back, there are multiple reasons for the antitrust community’s about-face. These include concerns about rising market concentration,[3] labor-market monopsony power,[4] and of large corporations undermining the very fabric of democracy.[5] But of these numerous (mis)apprehensions, one has received the lion’s share of scholarly and political attention: a growing number of voices argue that existing merger rules fail to apprehend competitively significant mergers that either fall below existing merger-filing thresholds or affect innovation in ways that are, allegedly, ignored by current rules. For instance, Rohit Chopra, a former commissioner at the US Federal Trade Commission, asserted that too many transactions avoid antitrust scrutiny by falling through the cracks of HSR premerger notification thresholds. For instance, Rohit Chopra, a former commissioner at the U.S. Federal Trade Commission, asserted that too many transactions avoid antitrust scrutiny by falling through the cracks of the Hart-Scott-Rodino Act’s premerger-notification thresholds. As a result, Chopra claimed, “[t]he FTC ends up missing a large number of anticompetitive mergers every year.”[6]

These fears are particularly acute in the pharmaceutical and tech industries, where several high-profile academic articles and reports claim to have identified important gaps in current merger-enforcement rules, particularly with respect to acquisitions involving nascent and potential competitors.[7] Some of these gaps are purported to arise in situations that would normally appear to be procompetitive:

Established incumbents in spaces like tech, digital payments, internet, pharma and more have embarked on bids to acquire features, businesses and functionalities to shortcut the time and effort they would otherwise require for organic expansion. We have traditionally looked at these cases benignly, but it is now right to be much more cautious.[8]

As a result of these perceived deficiencies, scholars and enforcers have called for tougher rules, including the introduction of lower merger filing thresholds—similar to what is currently proposed with regard to India’s proposed reform of its merger rules—and substantive changes, such as the inversion of the burden of proof when authorities review mergers and acquisitions in the digital platform industry.[9] As a result of these perceived deficiencies, scholars and enforcers have called for tougher rules, including the introduction of lower merger-filing thresholds—similar to what has been put forward in India’s proposed reform of its merger rules—and substantive changes, such as the inversion of the burden of proof when authorities review mergers and acquisitions in the digital-platform industry.[10] Meanwhile, and seemingly in response to the increased political and advocacy pressures around the issue, U.S. antitrust enforcers have recently undertaken several enforcement actions directly targeting such acquisitions.[11] Meanwhile, and seemingly in response to the increased political and advocacy pressures around the issue, U.S. antitrust enforcers have recently undertaken several enforcement actions that directly target such acquisitions.[12]

These proposals, however, tend to overlook the important tradeoffs that would ensue from attempts to decrease the number of false positives under existing merger rules and thresholds. While merger enforcement ought to be mindful of these possible theories of harm, the theories and evidence are not nearly as robust as many proponents suggest. Most importantly, there is insufficient basis to conclude that the costs of permitting the behavior they identify is greater than the costs would be of increasing enforcement to prohibit it.[13]

In this regard, two key strands of economic literature are routinely overlooked (or summarily dismissed) by critics of the status quo.

For a start, as Judge Frank Easterbrook argued in his pioneering work on The Limits of Antitrust, antitrust enforcement is anything but costless.[14] In the case of merger enforcement, not only is it expensive for agencies to detect anticompetitive deals but, more importantly, overbearing rules may deter beneficial merger activity that creates value for consumers. Indeed, not only are most mergers welfare-enhancing, but barriers to merger activity have been shown to significantly, and negatively, affect early company investment.[15]

Second, critics are mistaking the nature of causality. Scholars routinely surmise that incumbents use mergers to shield themselves from competition. Acquisitions are thus seen as a means to eliminate competition. But this overlooks an important alternative. It is at least plausible that incumbents’ superior managerial or other capabilities (i.e., what made them successful in the first place) make them the ideal purchasers for entrepreneurs and startup investors who are looking to sell.

This dynamic is likely to be amplified where the acquirer and acquiree operate in overlapping lines of business. In other words, competitive advantage, and the ability to profitably acquire other firms, might be caused by business acumen rather than exemplifying anticompetitive behavior. And significant and high-profile M&A activity involving would-be competitors may thus be the procompetitive byproduct of a well-managed business, rather than anticompetitive efforts to stifle competition.

Critics systematically overlook this possibility. Indeed, Henry Manne’s seminal work on Mergers and Market for Corporate Control[16]—the first to argue that mergers are a means of applying superior management practices to new assets—is almost never cited by contemporary researchers in this space. Our comments attempt to set the record straight.

With this in mind, we believe that calls to reform merger enforcement rules and procedures should be analyzed under the error-cost framework. With this in mind, we believe that calls to reform merger-enforcement rules and procedures should be analyzed under the error-cost framework. Accordingly, the challenge for policymakers is not merely to minimize type II errors (i.e., false acquittals), which have been a key area of focus for recent scholarship, but also type I errors (i.e., false convictions) and enforcement costs. This is particularly important in the field of merger enforcement, where authorities need to analyze vast numbers of transactions in extremely short periods of time.

In other words, while scholars have raised valid concerns, they have not suggested alternative institutional arrangements to address them that would lead to better overall outcomes. In other words, while scholars have raised valid concerns, they have not suggested alternative institutional arrangements to address those concerns that would lead to better overall outcomes. All legal enforcement systems are imperfect, and it is not enough to justify changes to the system that some imperfections can be identified.[17] Indeed, it could be that antitrust doctrine currently condones practices that harm innovation, but that there is no cost-effective way to reliably identify and deter this harmful conduct.

For instance, as we discuss below, a recent paper estimates that between 5.3% and 7.4% of pharmaceutical mergers are “killer acquisitions.”[18] But even if that is accurate, it suggests no tractable basis on which those acquisitions can be differentiated ex ante from the 92.6% to 94.7% that are presumed to be competitively neutral or procompetitive. A reformed system that overly deters these acquisitions in order to capture more of the problematic ones—which is presumably the purpose of the merger-related amendments in the 2023 Competition Act— is not necessarily an improvement.

Further, while many of the arguments suggesting that the current system is imperfect are well-taken, these claims of systemic problems are not always as robust as proponents suggest. This further weakens the case for policy reform, because any potential gains from such reforms are likely far less certain than they are often claimed to be.

II.      Antitrust and the Error-Cost Framework

Firms spend trillions of dollars globally every year on corporate mergers, acquisitions, and R&D investments.[19] Most of the time, these investments are benign, often leading to cost reductions, synergies, new or improved products, and lower prices for consumers.[20] For smaller firms, the possibility of being acquired can be vital to making a product worth developing.

There are also instances, however, when M&A activity enables firms to increase their market power and reduce output. Therein lies the fundamental challenge for antitrust authorities: among these myriad transactions, investments, and business decisions, is it possible to effectively sort the wheat from the chaff in a way that leads to net improvements in efficiency and competition, and ultimately consumer welfare? In more concrete terms, the question is: are there reasonable rules and standards that enforcers can use to filter out anticompetitive practices while allowing beneficial ones to follow their course? And if so, can this be done in a timely and cost-effective manner?[21]

A.      The Use of Filters in Antitrust

What might appear to be a herculean task has, in fact, been considerably streamlined, and vastly improved, by the emergence of the error-cost framework, itself a byproduct of pioneering advances in microeconomics and industrial organization.[22] This is “the economists’ way out.”[23] The error-cost framework is designed to enable authorities to focus their limited resources on that conduct most likely to have anticompetitive effects. In practice, this is done by applying several successive filters that separate potentially anticompetitive practices from ones that are likely innocuous.[24] Depending on this initial classification, practices are then submitted to varying levels of scrutiny, which may range from per se prohibitions to presumptive legality.[25]

Of the thousands of M&A transactions each year, only a few must be notified to antitrust authorities, and fewer still are subject to in-depth reviews.[26] For instance, in both the United States and the European Union, only deals that meet certain transaction values and/or revenue thresholds require merger notifications.[27] Accordingly, U.S. antitrust authorities receive somewhere in the vicinity of 2,000 merger filings per year, while the European Commission usually receives a few hundred.[28] Typically, less than 5% of these mergers are ultimately subjected to in-depth reviews.[29] These cases are selected by applying yet another set of filters that include: looking at the relationship between the merging firms (horizontal, vertical, conglomerate); calculating market shares and concentration ratios; and checking whether transactions fall within several recognized theories of harm.[30]

Similar filtering mechanisms apply to other forms of conduct. Incumbent firms routinely decide to enter adjacent markets, for instance, or to adopt strategies that might incidentally reduce competition in markets where they are already present. As with mergers, authorities and courts apply a series of filters/presumptions to home in on those practices most likely to cause anticompetitive harm.[31] Firms with low market shares are deemed less likely to possess market power (and thus, less likely to harm competition); vertical agreements are widely seen as being less problematic than horizontal ones; and vertical integration is widely regarded as procompetitive, absent other accompanying factors.[32]

This system is certainly not perfect; filtering cases in this manner inevitably lets some anticompetitive practices fall through the cracks. Indeed, the error-cost framework is premised on the recognition of this eventuality. Nevertheless, the strengths of this paradigm arguably outweigh its weaknesses. “If presumptions let some socially undesirable practices escape, the cost is bearable. . . . One cannot have the savings of decision by rule without accepting the costs of mistakes.”[33]

In most jurisdictions around the world, today’s competition merger-control apparatus is administrable,[34] somewhat predictable,[35] and—in the case of merger enforcement—it ensures that deals are reviewed in a relatively timely manner.[36]

The contours of this system have profound ramifications for substantive antitrust policy. Potential reforms need to account for the tradeoffs inherent to this vision of antitrust enforcement: between false positives and false negatives, between timeliness and thoroughness, and so on. Accordingly, the relevant policy question is not whether existing provisions allow certain categories of potentially harmful conduct to go unchallenged. Instead, policymakers should ask whether there is a better set of filters and heuristics that would enable authorities and courts to prevent previously unchallenged anticompetitive conduct without overburdening the system or disproportionately increasing false positives. In short, antitrust enforcers must avoid the so-called “nirvana fallacy” of believing that all errors can be eliminated, and existing policies should thus always be weighed against alternative institutional arrangements (as opposed to merely identifying instances where they lead to false negatives).[37]

B.      Calls for a Reform of Merger-Enforcement Rules and Thresholds

Against this backdrop, a growing body of economic literature has identified potential inadequacies in both the U.S. and EU merger-control regimes, as well as the antitrust rules that govern the business practices of digital platforms (notably, vertical integration and tying).[38] These critiques focus on ways in which incumbents might prevent nascent or potential rivals from introducing innovative new products and services that could disrupt their existing businesses. In short, this recent economic literature purports to show how incumbents might use their dominant market positions to reduce innovation.

For instance, recent empirical research purports to show that mergers of pharmaceutical companies with overlapping R&D pipelines result in higher project-termination rates, thus reducing innovation and, ultimately, price competition. These are referred to as “killer acquisitions.”[39] Others have argued that killer acquisitions also occur in the tech sector, although the empirical evidence offered to support this second claim is much weaker. In large part, this is because it does not differentiate between legitimate, efficient discontinuations of acquired products (such as the product being unsuccessful on the market, or the acquisition being done to hire the staff of the acquired firm) and the elimination of potential competitors.[40] Acquisitions of nascent and potential competitors undertaken with the intention of reducing competition have also been described as “killer acquisitions,” even if they do not involve their products being discontinued.[41]

Along similar lines, it is sometimes argued that large tech firms create so-called “kill zones” around their core businesses.[42] Similarly, some scholars assert that incumbent digital platforms might seek to foreclose rivals in adjacent markets by “copying” their products, or by using proprietary datasets that tilt the scales in their favor.[43]

All of these practices are said to harm innovation by deterring the incentives of competitors to invest in innovations that compete with incumbents. And the overarching theme of the above research is that existing antitrust doctrine is ill-equipped to handle these practices—or, at the very least, that antitrust law should be enforced more vigorously in these settings.

But while the above research identifies important and potentially harmful conduct that cannot be dismissed out of hand, it is important to recognize its inherent limitations when it comes to informing normative policy decisions. Indeed, there is a vast difference between identifying categories of conduct that sometimes harm consumers, on the one hand, and being able to isolate individual instances of anticompetitive behavior, on the other (and even then, it is important to distinguish conduct that harms consumers overall from conduct that merely harms certain parameters of competition while improving others. In other words, antitrust law should prohibit conduct when the category it belongs to is generally harmful to consumers and/or when harmful occurrences of that conduct can readily be distinguished[44]).

The above is merely a restatement of the error-cost framework, which highlights that the existence of false negatives is not a sufficient condition for increased intervention. The fact—if it can be proved—that there were some false negatives does not imply that there has been underenforcement with respect to the optimal level of enforcement. In other words, in the digital space, the argument can be made that an optimal merger policy on average leads to ex-post “underenforcement.” Moreover, even if the level of enforcement has been lower than optimal, one must be careful not to swing too far in the opposite direction, especially in high-tech industries. The chilling effect on innovation could be significant.[45] Instead, any change to the standards of government intervention that seeks to prevent more of these false negatives, with all the accompany tradeoffs and risks inherent to this enterprise, must ultimately increases social welfare overall.

Take the example of Google. It has acquired at least 270 companies over the last two decades.[46] It has been argued that some of these—such as Google’s acquisitions of YouTube, Waze, or DoubleClick—may have been anticompetitive. The real test for regulators, however, is whether they could reliably identify which of Google’s 270 acquisitions are actually anticompetitive and do so under a decision rule that causes less harm to consumers from false positives caused by the current (alleged) false negatives. If the anticompetitive mergers are such a tiny percentage of total mergers, and if identifying them a priori is difficult, then a precautionary-principle strategy that results in many false positives would likely not merit the benefits from blocking one or two anticompetitive mergers.

Indeed, but for Google and Facebook’s investments in YouTube and Instagram (to cite but two examples), it is far from clear that a mere “video-hosting service” or “photo-sharing app” would have grown into the robust competitor that advocates assume. Apart from the potential synergies arising from the combination of these products with the acquiring companies’ other products (for example, YouTube’s search and recommendation engines being developed by Google, the world’s leading internet-search company, or Instagram’s ad platform being integrated with Facebook’s), corporate control by the acquiring company may lead to these firms being better managed. This concept of M&A as creating a “market for corporate control” adds an important new dimension to the understanding of the tradeoffs involved.[47]

These anticompetitive theories of harm can thus be separated into three broad categories: (1) large incumbents have become so dominant in their primary markets that venture capitalists decline to fund startups that compete head-on, reducing potential competition; (2) these incumbents acquire potential competitors or non-competitor startups so as to reduce the competition along several dimensions, and (3) that incumbents purchase competitors to shut down their overlapping innovation pipelines (i.e., killer acquisitions).

III.    Concluding Remarks

With this in mind, applying the error-cost framework should lead policymakers to carefully consider the following questions when evaluating the merits and policy implications of economic research in this space:

  1. Do the papers advancing these theories identify categories of conduct that, on average, harm consumer welfare?
  2. If not, do the papers identify additional factors that would enable authorities to infer the existence of anticompetitive effects in individual cases?
  3. If so, would it be feasible for authorities to add these factors to their analysis (in terms of time and resources)?
  4. Finally, would prohibiting these practices at an individual or category level prevent efficiencies that would otherwise outweigh these anticompetitive harms? And could these efficiencies be analyzed on a case-by-case basis?

In addition to these error-cost-related questions, it is also necessary to question whether the results of these studies are relevant outside of the specific markets that they examine, and whether they give sufficient weight to countervailing procompetitive justifications.

All of this has profound ramifications for amendments to India’s competition law. Lowering merger-filing thresholds may be counterproductive if it means fewer enforcement resources are devoted to other, more important cases. To make matters worse, heightened merger-control rules may deter firms from merging in the first place. This could have dramatic consequences for an economy like India’s, which depends on startup activity to remain on its current growth path. In short, we recommend that Indian policymakers carefully consider whether the possibility of catching an additional handful of anticompetitive mergers is worth the significant costs that would be incurred by the Indian economy.

 

 

[1] The Competition Act (2002), as modified by the 2023 Amendment, Section 5 (d).

[2] See, e.g., Jonathan B Baker, Recent Developments in Economics That Challenge Chicago School Views, 58 Antitrust L.J. 655 (1989) (“Over the past fifteen years, the courts and enforcement agencies have created Robert Bork’s antitrust paradise. Antitrust has adopted the Chicago School’s efficiency analysis and the Chicago School’s conclusions about the effects of business practices.”). Note that, in many ways, the Chicago and late-Harvard views are somewhat similar when it comes to mergers—both schools of thought might thus have influenced this loosening of merger policy. See, e.g., Richard A Posner, The Chicago School of Antitrust Analysis, U. Penn. L. Rev. 937 (1979) (“The change in thinking that has been brought about by the Chicago school is nowhere more evident than in the area of vertical integration. Kaysen and Turner, writing in 1959, advocated for- bidding any vertical merger in which the acquiring firm had twenty percent or more of its market. Areeda and Turner, writing in 1978, express very little concern with anticompetitive effects from vertical integration. In fact, as between a rule of per se illegality for vertical integration by monopolists and a rule of per se legality, their preference is for the latter.”).

[3] See, e.g., Germán Gutiérrez & Thomas Philippon, Declining Competition and Investment in the U.S., NBER Working Paper 1 (2017) (“The U.S. business sector has under-invested relative to Tobin’s Q since the early 2000’s. We argue that declining competition is partly responsible for this phenomenon.”). Contra, Esteban Rossi-Hansberg, Pierre-Daniel Sarte & Nicholas Trachter, Diverging trends in national and local concentration, 35 NBER Macroeconomics Annual 1 (2021) (“Using US NETS data, we present evidence that the positive trend observed in national product-market concentration between 1990 and 2014 becomes a negative trend when we focus on measures of local concentration. We document diverging trends for several geographic definitions of local markets. SIC 8 industries with diverging trends are pervasive across sectors. In these industries, top firms have contributed to the amplification of both trends. When a top firm opens a plant, local concentration declines and remains lower for at least 7 years. Our findings, therefore, reconcile the increasing national role of large firms with falling local concentration, and a likely more competitive local environment.”).

[4] See, e.g., José Azar, Ioana Marinescu, Marshall Steinbaum & Bledi Taska, Concentration in U.S. labor markets: Evidence From Online Vacancy Data, 66 Labour Economics 101886 (2020) (“These indicators suggest that employer concentration is a meaningful measure of employer power in labor markets, that there is a high degree of employer power in labor markets, and also that it varies widely across occupations and geography.”).

[5] See, e.g., Tim Wu, The Curse of Bigness: Antitrust in the New Gilded Age 9 (2018) (“We have managed to recreate both the economics and politics of a century ago—the first Gilded Age—and remain in grave danger of repeating more of the signature errors of the twentieth century. As that era has taught us, extreme economic concentration yields gross inequality and material suffering, feeding an appetite for nationalistic and extremist leadership. Yet, as if blind to the greatest lessons of the last century, we are going down the same path. If we learned one thing from the Gilded Age, it should have been this: The road to fascism and dictatorship is paved with failures of economic policy to serve the needs of the general public.”).

[6] Rohit Chopra, Statement of Commissioner Rohit Chopra, 85 Fed. Regis. 231, 77052 (2020) (“Adequate premerger reporting is a helpful tool used to halt anticompetitive transactions before too much damage is done. However, the usefulness of the HSR Act only goes so far. This is because many deals can quietly close without any notification and reporting, since only transactions above a certain size are reportable.”).

[7] See Collen Cunningham, Florian Ederer, & Song Ma, Killer Acquisitions, 129 J. Pol. Econ. 649 (2021); Sai Krishna Kamepalli, Raghuram Rajan & Luigi Zingales, Kill Zone, Nat’l Bureau of Econ. Research, Working Paper No. 27146 (2020); Digital Competition Expert Panel, Unlocking Digital Competition (2019), available at https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/785547/unlocking_digital_competition_furman_review_web.pdf; Stigler Center for the Study of the Economy and the State, Stigler Committee on Digital Platforms (2019), available at https://www.publicknowledge.org/wp-content/uploads/2019/09/Stigler-Committee-on-Digital-Platforms-Final-Report.pdf; Australian Competition & Consumer Commission, Digital Platforms Inquiry (2019), available at https://www.accc.gov.au/system/files/Digital%20platforms%20inquiry%20-%20final%20report.pdf. See also Jacques Cre?mer, Yves-Alexandre De Montjoye, Heike Schweitzer, Competition Policy For The Digital Era Final Report (2019), available at https://ec.europa.eu/competition/publications/reports/kd0419345enn.pdf [hereinafter “Crémer Report”].

[8] Cristina Caffarra, Gregory S. Crawford, & Tommaso Valletti, “How Tech Rolls”: Potential Competition and “Reverse” Killer Acquisitions, 2 Antitrust Chron. 1, 1 (2020).

[9] As far as jurisdictional thresholds are concerned, see, e.g., Crémer Report, supra note 7, at 10 (“Many of these acquisitions may escape the Commission’s jurisdiction because they take place when the start-ups do not yet generate sufficient turnover to meet the thresholds set out in the EUMR. This is because many digital startups attempt first to build a successful product and attract a large user base while sacrificing short-term profits; therefore, the competitive potential of such start-ups may not be reflected in their turnover. To fill this gap, some Member States have introduced alternative thresholds based on the value of the transaction, but their practical effects still have to be verified.”). As far as inverting the burden of proof is concerned, see, e.g., Crémer Report, supra note 7, at 11 (“The test proposed here would imply a heightened degree of control of acquisitions of small start-ups by dominant platforms and/or ecosystems, to be analysed as a possible strategy against partial user defection from the ecosystem. Where an acquisition is plausibly part of such a strategy, the notifying parties should bear the burden of showing that the adverse effects on competition are offset by merger-specific efficiencies.”).

[10] As far as jurisdictional thresholds are concerned, see, e.g., Crémer Report, supra note 7, at 10 (“Many of these acquisitions may escape the Commission’s jurisdiction because they take place when the start-ups do not yet generate sufficient turnover to meet the thresholds set out in the EUMR. This is because many digital startups attempt first to build a successful product and attract a large user base while sacrificing short-term profits; therefore, the competitive potential of such start-ups may not be reflected in their turnover. To fill this gap, some Member States have introduced alternative thresholds based on the value of the transaction, but their practical effects still have to be verified.”). As far as inverting the burden of proof is concerned, see, e.g., Crémer Report, supra note 7, at 11 (“The test proposed here would imply a heightened degree of control of acquisitions of small start-ups by dominant platforms and/or ecosystems, to be analysed as a possible strategy against partial user defection from the ecosystem. Where an acquisition is plausibly part of such a strategy, the notifying parties should bear the burden of showing that the adverse effects on competition are offset by merger-specific efficiencies.”).

[11] See FTC Press Release, FTC Sues to Block Procter & Gamble’s Acquisition of Billie, Inc. (Dec. 8, 2020), https://www.ftc.gov/news-events/press-releases/2020/12/ftc-sues-block-procter-gambles-acquisitionbillie-inc; DOJ Press Release, Justice Department Sues to Block Visa’s Proposed Acquisition of Plaid (Nov. 5, 2020), https://www.justice.gov/opa/pr/justice-department-sues-block-visas-proposedacquisition-plaid; FTC Press Release, FTC Files Suit to Block Edgewell Personal Care Company’s Acquisition of Harry’s, Inc. (Feb. 3, 2020), https://www.ftc.gov/news-events/press-releases/2020/02/ftcfiles-suit-block-edgewell-personal-care-companys-acquisition; FTC Press Release, FTC Challenges Illumina’s Proposed Acquisition of PacBio (Dec. 17, 2019), https://www.ftc.gov/newsevents/pressreleases/2019/12/ftc-challenges-illuminas-proposed-acquisition-pacbio; DOJ Press Release, Justice Department Sues to Block Sabre’s Acquisition of Farelogix (Aug. 20, 2019), https://www.justice.gov/opa/pr/justice-department-sues-block-sabres-acquisition-farelogix.

[12] See FTC Press Release, FTC Sues to Block Procter & Gamble’s Acquisition of Billie, Inc. (Dec. 8, 2020), https://www.ftc.gov/news-events/press-releases/2020/12/ftc-sues-block-procter-gambles-acquisitionbillie-inc; DOJ Press Release, Justice Department Sues to Block Visa’s Proposed Acquisition of Plaid (Nov. 5, 2020), https://www.justice.gov/opa/pr/justice-department-sues-block-visas-proposedacquisition-plaid; FTC Press Release, FTC Files Suit to Block Edgewell Personal Care Company’s Acquisition of Harry’s, Inc. (Feb. 3, 2020), https://www.ftc.gov/news-events/press-releases/2020/02/ftcfiles-suit-block-edgewell-personal-care-companys-acquisition; FTC Press Release, FTC Challenges Illumina’s Proposed Acquisition of PacBio (Dec. 17, 2019), https://www.ftc.gov/newsevents/pressreleases/2019/12/ftc-challenges-illuminas-proposed-acquisition-pacbio; DOJ Press Release, Justice Department Sues to Block Sabre’s Acquisition of Farelogix (Aug. 20, 2019), https://www.justice.gov/opa/pr/justice-department-sues-block-sabres-acquisition-farelogix.

[13] See, e.g., Prepared Remarks of Commissioner Noah Joshua Phillips, “Reasonably Capable? Applying Section 2 to Acquisitions of Nascent Competitors,” Antitrust in the Technology Sector: Policy Perspectives and Insights From the Enforcers Conference (Apr. 29, 2021), available at https://www.ftc.gov/system/files/documents/public_statements/1589524/reasonably_capable_-_acquisitions_of_nascent_competitors_4-29-2021_final_for_posting.pdf (“Some would-be reformers view M&A as fundamentally predatory and wish to “level the playing” field for smaller, less competitive, or more sympathetic businesses by throwing as much sand in the gears as possible. But their Harrison Bergeron vision of competition, handicapping successful businesses, will not so much level the field as tilt the scales dramatically in favor of the government, handing tremendous power to regulators, sapping American competitiveness, and hitting Americans in their pocketbooks.”).

[14] Frank H. Easterbrook, The Limits of Antitrust, 63 Tex. L. Rev. 1 (1984).

[15] For vertical mergers, the welfare-enhancing effects are well-established. See, e.g., Francine Lafontaine & Margaret Slade, Vertical Integration and Firm Boundaries: The Evidence, 45 J. Econ. Lit. 677 (2007) (“In spite of the lack of unified theory, over all a fairly clear empirical picture emerges. The data appear to be telling us that efficiency considerations overwhelm anticompetitive motives in most contexts. Furthermore, even when we limit attention to natural monopolies or tight oligopolies, the evidence of anticompetitive harm is not strong.”). See also, Global Antitrust Institute, Comment Letter on Federal Trade Commission’s Hearings on Competition and Consumer Protection in the 21st Century, Vertical Mergers 8–9, Geo. Mason Law & Econ. Research Paper No. 18-27 (2018), https://ssrn.com/abstract=3245940 (“In sum, these papers from 2009-2018 continue to support the conclusions from Lafontaine & Slade (2007) and Cooper et al. (2005) that consumers mostly benefit from vertical integration. While vertical integration can certainly foreclose rivals in theory, there is only limited empirical evidence supporting that finding in real markets. The results continue to suggest that the modern antitrust approach to vertical mergers 9 should reflect the empirical reality that vertical relationships are generally procompetitive.”). Along similar lines, empirical research casts doubt on the notion that antitrust merger enforcement (in marginal cases) raises consumer welfare. The effects of horizontal mergers are, empirically, less well-documented. See, e.g., Robert W Crandall & Clifford Winston, Does Antitrust Policy Improve Consumer Welfare? Assessing the Evidence, 17 J. Econ. Persp. 20 (2003) (“We can only conclude that efforts by antitrust authorities to block particular mergers or affect a merger’s outcome by allowing it only if certain conditions are met under a consent decree have not been found to increase consumer welfare in any systematic way, and in some instances the intervention may even have reduced consumer welfare.”). While there is some evidence that horizontal mergers can reduce consumer welfare, at least in the short run, see, for example, Gregory J. Werden, Andrew S. Joskow, & Richard L. Johnson, The Effects of Mergers on Price and Output: Two Case Studies from the Airline Industry, 12 Mgmt. Decis. Econ. 341 (1991), the long-run effects appear to be strongly positive. See, e.g., Dario Focarelli & Fabio Panetta, Are Mergers Beneficial to Consumers? Evidence from the Market for Bank Deposits, 93 Am. Econ. Rev. 1152, 1152 (2003) (“We find strong evidence that, although consolidation does generate adverse price changes, these are temporary. In the long run, efficiency gains dominate over the market power effect, leading to more favorable prices for consumers.”). See also generally Michael C. Jensen, Takeovers: Their Causes and Consequences, 2 J. Econ. Persp. 21 (1988). Some related literature similarly finds that horizontal merger enforcement has harmed consumers. See B. Espen Eckbo & Peggy Wier, Antimerger Policy Under the Hart-Scott-Rodino Act: A Reexamination of the Market Power Hypothesis, 28 J.L. & Econ. 119, 121 (1985) (“In sum, our results do not support the contention that enforcement of Section 7 has served the public interest. While it is possible that the government’s merger policy has deterred some anticompetitive mergers, the results indicate that it has also protected rival producers from facing increased competition due to efficient mergers.”); B. Espen Eckbo, Mergers and the Value of Antitrust Deterrence, 47 J. Finance 1005, 1027-28 (1992) (rejecting “the market concentration doctrine on samples of both U.S. and Canadian mergers. By implication, the results also reject the effective deterrence hypothesis. The evidence is, however, consistent with the alternative hypothesis that the horizontal mergers in either of the two countries were expected to generate productive efficiencies”). Regarding the effect of mergers on investment, see, e.g., Gordon M. Phillips & Alexei Zhdanov, Venture Capital Investments and Merger and Acquisition Activity Around the World, NBER Working Paper No. w24082 (Nov. 2017), available at https://ssrn.com/abstract=3082265 (“We examine the relation between venture capital (VC) investments and mergers and acquisitions (M&A) activity around the world. We find evidence of a strong positive association between VC investments and lagged M&A activity, consistent with the hypothesis that an active M&A market provides viable exit opportunities for VC companies and therefore incentivizes them to engage in more deals.”). And increased M&A activity in the pharmaceutical sector has not led to decreases in product approvals; rather, quite the opposite has happened. See, e.g., Barak Richman, Will Mitchell, Elena Vidal, & Kevin Schulman, Pharmaceutical M&A Activity: Effects on Prices, Innovation, and Competition, 48 Loyola U. Chi. L.J. 799 (2017) (“Our review of data measuring pharmaceutical innovation, however, tells a different story. First, even as merger activity in the United States increased over the past ten years, there has been a steady upward trend of FDA approvals of new molecular entities (“NMEs”) and new biological products (“BLAs”). Hence, the industry has been highly successful in bringing new products to the market.”).

[16] Henry G. Manne, Mergers and the Market for Corporate Control, 73 J. Pol. Econ. 110 (1965).

[17] See Harold Demsetz, Information and Efficiency: Another Viewpoint, 12 J.L. Econ. 1, 22 (1969) (“The view that now pervades much public policy economics implicitly presents the relevant choice as between an ideal norm and an existing “imperfect” institutional arrangement. This nirvana approach differs considerably from a comparative institution approach in which the relevant choice is between alternative real institutional arrangements.”).

[18] Cunningham et al., supra note 7, at 692 (“Given these assumptions and estimates, what would the fraction ν of pure killer acquisitions among transactions with overlap have to be to result in the lower development of acquisitions with overlap (13.4%)? Specifically, we solve the equation 13.4% = ν × 0 + (1 − ν) × 17.5% for ν which yields ν = 23.4%. Therefore, we estimate that 5.3% (= ν × 22.7%) of all acquisitions, or about 46 (= 5.3% × 856) acquisitions every year, are killer acquisitions. If instead we assume the non-killer acquisitions to have the same development likelihood as non-acquired projects (19.9%), we estimate that 7.4% of acquisitions, or 63 per year, are killer acquisitions.”).

[19] See Value of Mergers and Acquisitions (M&A) Worldwide from 1985 to 2020, Statista (Jan. 15, 2021), https://www.statista.com/statistics/267369/volume-of-mergers-and-acquisitions-worldwide. See Gross Domestic Spending on R&D, OECD (last visited Apr. 29, 2021) https://data.oecd.org/rd/gross-domestic-spending-on-r-d.htm.

[20] See supra note 15.

[21] Running the antitrust system is itself a cost to society.

[22] See, e.g., Olivier E. Williamson, Economies as an Antitrust Defense: The Welfare Tradeoffs, 58 Am. Econ. Rev. 18 (1968). See also, Easterbrook, supra note 14; Henry G. Manne, supra note 16; William M Landes & Richard A Posner, Market Power in Antitrust Cases, 94 Harv. L. Rev. 937 (1980).

[23] Easterbrook, id., at 14.

[24] See Easterbrook, id., at 17 (“The task, then, is to create simple rules that will filter the category of probably beneficial practices out of the legal system, leaving to assessment under the Rule of Reason only those with significant risks of competitive injury.”).

[25] Id. at 15 (“They should adopt some simple presumptions that structure antitrust inquiry. Strong presumptions would guide businesses in planning their affairs by making it possible for counsel to state that some things do not create risks of liability. They would reduce the costs of litigation by designating as dispositive particular topics capable of resolution.”).

[26] See Number of Merger and Acquisition Transactions Worldwide from 1985 to 2021, Statista (May 14, 2021), https://www.statista.com/statistics/267368/number-of-mergers-and-acquisitions-worldwide-since-2005.

[27] See 15 U.S.C. §18a (1976). See also, FTC Premerger Notification Office Staff, HSR Thresholds Adjustments and Reportability for 2020, FTC Competition Matters (Jan. 31, 2020), https://www.ftc.gov/news-events/blogs/competition-matters/2020/01/hsr-threshold-adjustments-reportability-2020. See also Council Regulation 139/2004, 2004 O.J. (L 24) 1, 22 (EC).

[28] See Federal Trade Comm’n & U.S. Dep’t of Justice, Hart-Scott-Rodino Annual Report Fiscal Year 2019 (2020), available at https://www.ftc.gov/system/files/documents/reports/federal-trade-commission-bureau-competition-department-justice-antitrust-division-hart-scott-rodino/p110014hsrannualreportfy2019_0.pdf. See also, European Commission, Merger Statistics, 21 September 1990 to 31 December 2020 (2021), available at https://ec.europa.eu/competition/mergers/statistics.pdf.

[29] See FTC and European Commission, id.

[30] See U.S. Dep’t of Justice & Fed. Trade Comm’n, Horizontal Merger Guidelines (2010), U.S. Dep’t of Justice & Fed. Trade Comm’n, Vertical Merger Guidelines (2020). See also Commission Guidelines on the Assessment of Non-Horizontal Mergers Under the Council Regulation on the Control of Concentrations Between Undertakings, 2008 O.J. (C 265) 6, 25.

[31] See Federal Trade Commission & U.S. Department of Justice, Antitrust Guidelines for the Licensing of Intellectual Property 15 (Jan. 12, 2017) (“The existence of a horizontal relationship between a licensor and its licensees does not, in itself, indicate that the arrangement is anticompetitive. Identification of such relationships is merely an aid in determining whether there may be anticompetitive effects arising from a licensing arrangement.”). See also European Commission, Communication from the Commission—Guidance on the Commission’s Enforcement Priorities in Applying Article 82 of the EC Treaty to Abusive Exclusionary Conduct by Dominant Undertakings, O.J. C. 45, 7–20 (Feb. 24, 2009).

[32] See Antitrust Guidelines for the Licensing of Intellectual Property, id. See also, Commission Guidelines on Vertical Restraints, 2010 O.J. (C 130) 1, 46, available at https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:52010XC0519(04)&from=EN.

[33] Easterbrook, supra note 14, at 15.

[34] It requires only limited government resources to function, compared to, for example, a system that reviews every merger in detail.

[35] Companies can self-assess whether their mergers are likely to be struck down by authorities and adapt their investment decisions accordingly.

[36] Even in-depth merger investigations are typically concluded within months, rather than years.

[37] See Demsetz, supra note 17, at 1 (“The view that now pervades much public policy economics implicitly presents the relevant choice as between an ideal norm and an existing “imperfect” institutional arrangement. This nirvana approach differs considerably from a comparative institution approach in which the relevant choice is between alternative real institutional arrangements.”).

[38] See Cunningham et al., supra note 7; Zingales et al., supra note 7; Kevin A Bryan & Erik Hovenkamp, Antitrust Limits on Startup Acquisitions, 56 Rev. Indus. Org. 615 (2020); Mark A. Lemley & Andrew McCreary, Exit Strategy, Stanford Law and Economics Working Paper No. 542 (2020), available at https://papers.ssrn.com/sol3/papers.cfm?abstract_id=3506919.

[39] See Cunningham et al., id. at 650 (“We argue that an incumbent firm may acquire an innovative target and terminate the development of the target’s innovations to preempt future competition. We call such acquisitions ‘killer acquisitions,’ as they eliminate potentially promising, yet likely competing, innovation.”).

[40] See, e.g., Axel Gautier & Joe Lamesch, Mergers in the Digital Economy, Info. Econ. & Pol’y (2000) (“There are three reasons to discontinue a product post-acquisition: the product is not as successful as expected, the acquisition was not motivated by the product itself but by the target’s assets or R&D effort, or by the elimination of a potential competitive threat. While our data does not enable us to screen between these explanations, the present analysis shows that most of the startups are killed in their infancy.”).

[41] John M. Yun, Potential Competition, Nascent Competitors, and Killer Acquisitions, in GAI Report on the Digital Economy (Ginsburg & Wright, eds. 2000).

[42] See Zingales et al. supra note 7.

[43] See, e.g., Kevin Caves & Hal Singer, When the Econometrician Shrugged: Identifying and Plugging Gaps in the Consumer-Welfare Standard, 26 Geo. Mason L. Rev. 396 (2018) (“Or imagine the platform was appropriating or “cloning” app functionality into its basic service. The only potential harm in this instance would be that independent edge providers would be encouraged to exit or discouraged from entering in future periods. In theory, edge providers might be discouraged to compete in the app space given what they perceive to be a slanted playing field.”).

[44] See, e.g., Eric Fruits, Justin (Gus) Hurwitz, Geoffrey A. Manne, Julian Morris, & Alec Stapp, Static and Dynamic Effects of Mergers: A Review of the Empirical Evidence in the Wireless Telecommunications Industry, OECD Directorate for Financial and Enterprise Affairs Competition Committee, Global Forum on Competition, DAF/COMP/GF(2019)13 (Dec. 6, 2019) at ¶ 61, available at https://one.oecd.org/document/DAF/COMP/GF(2019)13/en/pdf (“Studies that do not consider these [non-price] effects are incomplete for purposes of evaluating the mergers’ consumer welfare effects, and [are] all-too-easily used by advocates to misleadingly predict negative consumer outcomes. This is not necessarily a criticism of the studies themselves, which generally do not make comprehensive policy conclusions. The reality is that it is exceptionally difficult to comprehensively study even price effects, such that a well-conducted study of price effects alone is a valuable contribution to the literature. Nevertheless, in the context of evaluating prospective transactions, the results of such studies must be discounted to account for their exclusion of non-price effects.”).

[45] Luís Cabral, Merger Policy in Digital Industries, CEPR Discussion Paper No. DP14785 (May 2020) at 12, https://papers.ssrn.com/sol3/papers.cfm?abstract_id=3612854.

[46] See Carl Shapiro, Antitrust in the Time of Populism, 61 Int’l J. Indus. Org. 714 (2018).

[47] See Henry G. Manne, supra note 16.

Continue reading
Antitrust & Consumer Protection

The Marketplace of Ideas: Government Failure Is Worse Than Market Failure When It Comes to Social-Media Misinformation

TOTM Today marks the release of a white paper I have been working on for a long time, titled “Knowledge and Decisions in the Information Age: . . .

Today marks the release of a white paper I have been working on for a long time, titled “Knowledge and Decisions in the Information Age: The Law & Economics of Regulating Misinformation on Social-Media Platforms.” In it, I attempt to outline an Austrian law & economics theory of state action under the First Amendment, and then explain why it is important to the problem of misinformation on social-media platforms.

Read the full piece here.

Continue reading
Innovation & the New Economy

Lazar Radic on the UK’s Digital Markets Bill

Presentations & Interviews ICLE Senior Scholar Lazar Radic joined Institute of Economic Affairs (IEA) Director of Public Policy and Communications Matthew Lesh on the IEA Podcast to discuss . . .

ICLE Senior Scholar Lazar Radic joined Institute of Economic Affairs (IEA) Director of Public Policy and Communications Matthew Lesh on the IEA Podcast to discuss the new joint ICLE-IEA paper “Digital Overload: How the Digital Markets, Competition and Consumers Bill’s Sweeping New Powers Threaten Britain’s Economy.” Video of the full podcast is embedded below.

Continue reading
Antitrust & Consumer Protection

English Company Law: Legal Architecture for a Global Law Market

Scholarship Abstract English-architecture company law describes the distinct and diverse group of company or corporate law used in more than 60 jurisdictions worldwide. English-architecture company law . . .

Abstract

English-architecture company law describes the distinct and diverse group of company or corporate law used in more than 60 jurisdictions worldwide. English-architecture company law provides a robust platform for innovation and development due to its permissive structure, opportunity for choice of law in an entity’s internal governance, and scalability permitting variation for small and large entities. It is the dominant form among International Financial Centers (IFCs), many of which have legal systems with a British connection. This body of law responds to competition and maintains dynamism by engaging its practice community through “learning by doing” and “frictioneering.” An architecture approach permits a broader review of developments in company law that more closely captures the reality of global law practice. The IFC experience of climbing the value chain from tax arbitrage to provide solutions for entities or structures left out in the corporate law of larger jurisdictions provides a useful global governance model to maintain normative, jurisprudential, and regulatory coherence even as it responds to more specialized and unanticipated needs. This Article explores what makes English-architecture company law so successful and how IFCs use it to compete in the global law market.

Continue reading
Financial Regulation & Corporate Governance

Radical New Burdens for Marginal Benefit

Scholarship Abstract The Global Antitrust Institute (“GAI”) provided comments to the U.S. Federal Trade Commission (“FTC”) in response to the FTC’s proposal to make significant amendments . . .

Abstract

The Global Antitrust Institute (“GAI”) provided comments to the U.S. Federal Trade Commission (“FTC”) in response to the FTC’s proposal to make significant amendments to the rules governing premerger notification under the Hart-Scott-Rodino Antitrust Improvements Act. The proposal will, if implemented, substantially increase burdens on all merging parties, regardless of whether the transaction reported poses an anticompetitive risk. In Section I we review the market for corporate control and the benefits it can have for effective firm management, allocative efficiency of economic resources, and consumer welfare. In Section II we explain how, contrary to the FTC’s view, the proposed changes will significantly increase the burden imposed on filing parties. This will impede the market for corporate control and consequently reduce productivity and inhibit innovation in other markets. In Section III we highlight potential conflicts between the proposed rule amendments and the Administrative Procedures Act.

Continue reading
Antitrust & Consumer Protection

Abandoning Antitrust Common Sense: The FTC’s New Normal?

TOTM This symposium wonders what exactly is “The FTC’s New Normal”? The short answer: scary. The current Federal Trade Commission (FTC) leadership is clear that old . . .

This symposium wonders what exactly is “The FTC’s New Normal”? The short answer: scary.

The current Federal Trade Commission (FTC) leadership is clear that old U.S. Supreme Court opinions, rather than more recent jurisprudence, are their lodestones for antitrust analysis. This is dramatically illustrated by the draft merger guidelines recently proposed by the FTC and U.S. Justice Department’s (DOJ) Antitrust Division; as Geoff Manne has noted, of the 48 antitrust decisions cited, only 10 are from this century, and on a weighted-average basis, the cases cited are almost a half-century old!

Read the full piece here.

Continue reading
Antitrust & Consumer Protection

The Digital Competition and Consumers Bill Threatens to Wrap UK Tech in Red Tape

Popular Media The UK has long prided itself as an attractive destination for investors and a hub for innovation. This is no small part due to the . . .

The UK has long prided itself as an attractive destination for investors and a hub for innovation. This is no small part due to the country’s sensible and proportionate, evidence-based approach to regulation, which focuses on correcting market failures. But a new bill currently in Parliament risks undermining Britain’s status as a regulatory role model, as well as Rishi Sunak’s ambition to turn the UK into a “science and technology superpower.” The Digital Competition and Consumers Bill (DMCC) takes its inspiration from the EU’s Digital Markets Act. The DMCC would give the Competition and Market Authority’s (CMA) expansive new powers to prohibit or compel conduct in digital markets, with potentially far-reaching implications for consumers, investment, innovation, and the country’s overall competitiveness.

Read the full piece here.

Continue reading
Antitrust & Consumer Protection