← Home The lag
One story on a single timeline. What was built, when the harm was first documented, and when the law finally responded. Read top to bottom.
Every entry links to the page on this site that carries its source. The timeline adds no new claims of its own — it is a map of the argument made everywhere else.
◆ The Machine what was built
● Symptoms harm first documented
■ Laws & Regulation the response
The shape of the page is the argument. The Laws column is almost empty for its first twenty years — and its one early entry, Section 230 (1996), protected platforms rather than users. Hate sites were documented in 1995; the first binding response, GDPR, arrived in 2018. Election interference was documented in 2016; the DSA applied in 2024. Not negligence — structural lag.
◆ The Machinewhat was built
● Symptomsharm first documented
■ Laws & Regulationthe response
1995
◆ ◆ The Machine: Commercial web and early search engines arrive. source → ● ● Symptom: Stormfront, the first major hate website, is set up — a decade before social media. source → 1996
◆ ◆ The Machine: DoubleClick begins tracking people across sites with cookies. source → ■ ■ Law: US Section 230 shields platforms from liability for what users post. The one early law — and it protects platforms, not users. source → 1998
◆ ◆ The Machine: Google is founded. source → ● ● Symptom: A retracted MMR–autism paper is published, seeding decades of anti-vaccine content. source → 2000
◆ ◆ The Machine: Google AdWords turns attention into a real-time auction. source → 2004
◆ ◆ The Machine: Facebook launches. source → ● ● Symptom: The OSCE documents online hate feeding real-world hate crime. source → 2007
◆ ◆ The Machine: Facebook opens advertising; the iPhone puts the feed in every pocket. source → 2009
◆ ◆ The Machine: Gamification goes mainstream — streaks, badges, points, levels. source → 2012
◆ ◆ The Machine: The image-first era (Instagram); targeting grows granular. source → ● ● Symptom: Researchers begin documenting a decline in adolescent mental health. source → 2013
● ● Symptom: Body-image harm is tracked as image-first feeds spread. source → 2016
◆ ◆ The Machine: Engagement-ranked feeds become the default. source → ● ● Symptom: Election interference at scale is documented. source → 2017
● ● Symptom: UN investigators link Facebook to violence against the Rohingya in Myanmar. source → 2018
◆ ◆ The Machine: AI recommendation systems mature. source → ■ ■ Law: GDPR becomes enforceable across the EU. source → ↑ first binding response — 23 years after the first documented harm
2019
● ● Symptom: Christchurch; the algorithmic radicalisation pipeline is documented. source → 2020
● ● Symptom: The COVID “infodemic”; social-media scams begin an eight-fold climb. source → 2022
◆ ◆ The Machine: Generative AI (ChatGPT) makes personalised manipulation cheap. source → ■ ■ Law: The EU Digital Services Act is passed. source → 2024
◆ ◆ The Machine: AI Overviews; the rise of zero-click search. source → ● ● Symptom: Police warn of “violence as a service” recruiting children online. source → ■ ■ Law: The DSA applies; Australia legislates an under-16 social-media ban; first major liability cases. source → 2025
■ ■ Law: Courts move — a major US product-liability ruling against a platform. source → 2026
■ ■ Law: A California bellwether verdict in the social-media harms litigation. source → How to read this page
Read it top to bottom. The left track is what the industry built. The middle track is when each harm was first documented — in peer-reviewed research, official investigations, or court. The right track is when the law responded. Every entry links to the page on this site that carries its evidence; the timeline itself makes no claim of its own.
Why the lag matters
What the layout shows is a delay. The response track stays almost empty for two decades, and its single early entry — Section 230, in 1996 — gave platforms protection rather than giving users any. Hate sites were documented in 1995; the first law that could reach them, the GDPR, became enforceable in 2018. Election interference was documented in 2016; the rules written to address it, the Digital Services Act, applied in 2024. The gap is not the same as malice. It is what it looks like when technology moves at the speed of code and law moves at the speed of institutions.
A note on how this page is built
This is a narrative timeline, a format research finds keeps comprehension intact while making a dense subject easier to follow. The three tracks are a standard parallel-track (“swim-lane”) encoding; each track is marked by shape and colour so it works without colour, and the content is plain HTML that reads on a slow connection and with JavaScript switched off. The design choices follow established accessibility guidance.
Laws & Regulation →
Symptoms →
The Attention Machine →