Laws & Regulation
The governance gap.
Regulators were looking at online behavioural profiling long before the first privacy law with penalties on the scale of the companies it addressed, the GDPR, became enforceable in 2018. International monitors were documenting racist online propaganda feeding hate crimes long before the EU law that can hold platforms accountable for it applied in 2024. This is not primarily negligence. It is structural lag.
Section 230 The 26 words that created the internet. Why they made sense in 1996 and what has changed since. GDPR The most significant privacy legislation ever passed. What it requires, what it has achieved, and where it falls short. Digital Services Act The EU's attempt to hold platforms accountable for algorithmic harm. What it requires and how enforcement is going. Online Safety Act The UK's route: duties of care on almost every service where people can post, enforced by Ofcom. What has happened since 2025. AI Act The EU sorts artificial intelligence by risk. What is banned outright, what has to be disclosed, and from when. Age Restrictions A global wave. By April 2026 the OECD counted 25 countries with age restrictions in force or under consideration — three of them in force. Courts & Liability The tobacco moment. What the 2026 US liability verdicts mean for the future of platform accountability.
Did this page help? Tell us what was wrong →