And social media regulations.

Alex Hern, “TechScape: Warnings of a ‘splinternet’ were greatly exaggerated – until now,” The Guardian, 03-23-2023, https://www.theguardian.com/technology/2023/may/23/techscape-splinternet-meta-facebook-fine

Those fights led to this week’s ruling, which found that by transferring data from European citizens to servers in the US, Facebook was exposing them to unacceptable risk that their “fundamental rights and freedoms” would be infringed.

If you’re wondering why it took almost three years to make that final ruling, there’s a second background plot here, which is the longstanding accusation that Ireland’s Data Protection Commission is too close to the tech companies it regulates. In this case, the Irish DPC initially declined to levy a fine, forcing the European Data Protection Board (EDPB), a transnational regulator that arbitrates disputes between national bodies, to step in. The EDPB overruled the Irish regulator and ordered that the record fine be imposed.

Splinternets

It’s unclear how Facebook intends to respond to the ruling. A blogpost co-signed by Nick Clegg, Meta’s president for global affairs, says the company intends to appeal “both the decision’s substance and its orders including the fine, and will seek a stay through the courts to pause the implementation deadlines”, complaining that the company has been “singled out when using the same legal mechanism as thousands of other companies looking to provide services in Europe”.

If that doesn’t work, Facebook is hoping that third time is the charm: where Safe Harbour and Privacy Shield failed, a new agreement, the Data Privacy Framework, might succeed. “If the DPF comes into effect before the implementation deadlines expire, our services can continue as they do today without any disruption or impact on users,” Clegg and Meta’s chief legal officer Jennifer Newstead write, based on a finding by the Irish DPC.

But if the DPF gets held up on either side of the Atlantic – or if Schrems strikes again and gets a third international agreement torpedoed by the courts – then Facebook will have a much more difficult decision to make. Meta has insisted it is not possible to provide its services without the sort of data transfers that it was today fined for, even going so far as to warn in its most recent quarterly results that, without some sort of resolution, it would “likely be unable to offer a number of our most significant products and services, including Facebook and Instagram, in Europe”.

Few believe the maximal reading of the threat. The EU is a huge market, and Meta is unlikely to simply evacuate, even if it becomes harder to run profitably. But the days of multinationals unthinkingly pursuing global platforms already feel like a thing of the past, and this is another nail in that coffin.

For another example, take the launch of Google’s Bard chatbot, available in 180 countries and territories – but not the EU. From Wired:

A number of experts who spoke to Wired suspect that Google is using Bard to send a message that the EU’s laws around privacy and online safety aren’t to its liking. But more than this, it could be a sign that generative AI technology as it exists now is fundamentally incompatible with existing and developing privacy and online safety laws in the EU.

The uncertainty around Bard’s rollout in the region comes as the bloc’s lawmakers are negotiating new draft rules to govern artificial intelligence via the fledgling AI Act. A number of existing laws, from GDPR to the Digital Services Act (DSA), may also be holding up the rollout of generative AI systems in the bloc.

And let’s not forget the UK government’s face-off with WhatsApp, another Meta company, over end-to-end encryption:

The UK government risks sleepwalking into a confrontation with WhatsApp that could lead to the messaging app disappearing from Britain, ministers have been warned, with options for an amicable resolution fast running out.

The limits aren’t just coming from the eastern coast of the Atlantic. As the American right jettisons its historic lip service to free speech, the country’s own internet regulations are threatening to impose state-level borders on the web. Take TikTok, which was banned in Montana last week:

Montana’s new law, which will take effect 1 January, prohibits downloads of TikTok in the state and would fine any “entity” – an app store or TikTok – $10,000 per day for each time someone “is offered the ability” to access the social media platform or download the app. The penalties would not apply to users.

I don’t want to overstate things. Warnings of a splinternet have been floating around the web for as long as I’ve been reporting on technology, with the outcome often cited as a lazy argument against any attempt to impose regulatory burdens on the net at large. But it feels closer to reality than it ever has before. Is that a good thing?