← For You

For Lawmakers

The evidence base, the regulatory landscape, and the levers open to legislators. This page is not partisan, and it does not recommend a policy. The documented harms apply across political affiliations.

How to read this page. Tap any underlined word to see the precise term and a short definition. Expand any "Deeper" box for the evidence and contested points. The main text works on its own — you can skip both and still get the whole argument.

The evidence — what is well-established

Most of the harms documented on this site are not contested at the level of whether they exist; they are contested at the level of causal weight and policy response. The exception is adolescent mental health: whether social media causes the decline, or accompanies it, is a live scientific dispute. The following rest on peer-reviewed research, official investigations, or primary documents, and say where a finding rests on one study:

Engagement-optimised algorithms amplify emotionally provocative content — including misinformation, hate speech, and politically extreme content — because this content spreads further than measured alternatives. Facebook's own internal research documented this. One peer-reviewed study of survey data from the US and Italy (Germano, Gómez & Sobbrio, 2026) finds that the 2018 algorithm update contributed to increased political polarisation in both countries; the evidence is observational. The largest experiments on the question, run with Meta's data around the 2020 US election, found no measurable change in polarisation from three months of a chronological feed, so how much any one ranking change moves polarisation is not settled.

Heavier social media use correlates with worse mental health outcomes in adolescents, with a large UK cohort study finding the association with depressive symptoms stronger for girls; whether passive scrolling is the harmful part is contested: experiments with adults found that it lowered mood, but a review of 40 survey studies found that most did not bear the link out. Facebook's own research found that, among teenage girls who already felt bad about their bodies, one in three said Instagram made them feel worse. The causality debate is ongoing; the correlation is not in dispute.

Real-time bidding (RTB) broadcasts a person's profile to dozens of companies at a time — 376 times a day for the average EU user, 747 for a US user, by the ICCL's 2022 estimate from industry data. The Belgian DPA found the industry's consent framework for it in breach of the GDPR (2022); the CJEU, on questions referred by a Belgian court, confirmed key parts of that reasoning (2024).

×

Real-time bidding (RTB)

The system that auctions each ad slot in the moment a page loads. To run the auction, a "bid request" describing the user — location, inferred interests, identifiers — is broadcast to many potential bidders at once. The privacy problem is structural: the data is shared with every participant in the auction, not only the winner, hundreds of times a day per person. The CJEU's IAB Europe ruling (Case C-604/22) held that the TC String, the consent string at the heart of that framework, is personal data.

Sources

What the intelligence agencies say

Several European intelligence agencies now say publicly that much of today's radicalisation happens online. That is narrower than this site's argument about engagement ranking — the agencies describe where it happens, not what ranks it — but they say it on the record. AIVD Jaarverslag 2025 (April 2026): as it was published, Director-General Smit was quoted by NOS describing a threat picture without precedent in the service's eighty years; the report finds young people now a third of its jihadist caseload, with jihadist ideas widely available on social-media platforms. MI5 (October 2025): terrorism now "breeds in squalid corners of the internet"; Home Office figures show that 43 of the 232 terrorism arrests in Great Britain in the year to March 2025 — nearly one in five — were of children aged 17 or under. BfV Verfassungsschutzbericht 2024: 57,701 extremism crimes, up 46% on 2023, with online chat groups named as "catalysts" for radicalisation.

Dutch regulatory evidence

The Commissariaat voor de Media (CvdM) concluded in May 2026 that algorithmic feeds are "demonstrably risky for our democracy" (aantoonbaar riskant voor onze democratie) and called for better enforcement of existing European legislation. The CvdM's youth research (2,010 respondents aged 16–24, fieldwork by Ipsos I&O in March 2024, published October 2024) found that social media and search engines now form the primary gateway to news for most young people, with the assumption that news interest increases with age described as no longer guaranteed.

The levers, and who argues what

Five levers come up in almost every discussion of platform regulation. For each one: what a law or a regulator can do, what is being done with it now, and where the disagreement sits. This page does not say which to pull.

Algorithmic transparency and independent audits. The lever is access — to how a recommender system behaves, to advertising records, and to data for researchers outside the company. The EU has already pulled it: the Digital Services Act obliges the largest platforms to undergo independent audits and to open data to vetted researchers, and the Centre for Future Generations tracks how far enforcement has actually gone. The case for widening it rests on the information asymmetry: the platform knows how its system behaves, and everyone outside it is estimating. The argument against is that broad access to systems and data exposes trade secrets and users' own data. What outside access can produce is already on the record — the pre-registered audit by Milli and colleagues found that Twitter's engagement ranking amplified emotionally charged, out-group-hostile content, and that users did not prefer it.

×

Independent algorithmic audit

External examination of how a recommender system actually behaves — what it amplifies, to whom, with what effects — by parties who do not work for the platform. It requires genuine access to data and systems, not the platform's own summary reports. The recurring obstacle is the information asymmetry: the platform knows everything about its system and external researchers know comparatively little, which makes independent verification of any safety claim difficult. Closing that gap is what the DSA's audit and data-access provisions set out to do.

Sources

Liability for harmful design. Courts can already reach design choices: the March 2026 Los Angeles verdict against Meta and Google's YouTube found platforms liable for design, not only for content. It is under appeal, so the principle is not settled, and the New Mexico verdict against Meta turned on consumer-protection law instead. In August 2026 Meta settled with 51 US attorneys general for up to $17.1 billion, accepting default time limits and overnight blocks for under-18s — terms agreed between the parties, binding on one company. That is the argument for writing a design duty into statute: litigation binds the parties to a case, one case at a time. The argument against is that "harmful design" is hard to define in advance without a legislature deciding which choices count, which is the question the trials are working through in public.

Age verification that does not build a surveillance system. A legislature can set an age limit; whether the limit holds depends on a method, and how to verify age without building that infrastructure for adult users too is still an open technical question. That is where the argument sits: most of today's minimums are self-declared and largely unenforceable, which is the case for verification, while a check strong enough to work would document adults as well, which is the case civil-liberties organisations make against it. One drafting response separates the duty from the mechanism, so the obligation does not rest on a technology that is not yet there. Neither side has an evaluation to point to yet: as far as this site has found, no rule has been in force long enough to produce one.

Impact assessments before deployment. The model is familiar from environmental and data-protection law: assess a system's foreseeable effects before it ships, and record the assessment where a regulator can read it. The DSA works this way for the largest platforms, which assess and mitigate systemic risks to civic discourse, elections and public health. The argument for it is timing — before deployment is the point at which a design choice is still cheap to change. The argument against is verification: a duty written around outcomes is hard to check, and a compliance document is not the same thing as a changed system.

Platform funding for independent research. The precedent usually cited is tobacco, where the industry was made to fund public-health work it did not control. Applied here, a levy or a settlement fund would pay for work the platforms neither commission nor review. The argument for it is that the data and the money sit on the same side of the table as the subject of the research. The argument against is that the source of funding is not the same as independence: a fund a company pays into is only as independent as the rules that keep the two apart.

Deeper — reading this evidence base: confirmed, contested, and what that means for legislating

For policy purposes the evidence here sorts into three tiers, and conflating them weakens any resulting law. Confirmed (peer-reviewed, official investigation, or primary document): that engagement-ranked systems amplify provocative content; the RTB data-broadcast figures; the intelligence-agency assessments; the March 2026 Los Angeles design-liability verdict and the August 2026 Meta–states settlement. Contested: whether, and how far, social media causes the youth mental-health decline; how much engagement ranking contributes to polarisation (one study finds that the 2018 Facebook change contributed to it in two countries, from survey data; the 2020 election experiments found no measurable change in three months). Genuinely unknown: the long-term developmental effects, and the impact of generative AI on elections.

Why the distinction matters for drafting. A statute that rests its case on "social media causes the mental-health crisis" can be litigated to a standstill on the science, because the causal weight is exactly what is contested. One that rests on "these systems are opaque, their design choices are the company's own conduct, and independent verification is currently difficult" stands on ground the science does not decide. That is the argument drafters make for aiming at the asymmetry and the design rather than at the contested effect size — and the argument against it is that a law aimed at process can leave the harm it was passed for untouched.

Sources

Did this page help?