EDPB Announces Stakeholder Event to Address the Intersection of Competition Law and Data Protection

The European Data Protection Board (EDPB) has announced an upcoming stakeholder event focused on the complex relationship between competition law and data protection. As digital markets become increasingly concentrated among a few dominant players, the boundaries between antitrust enforcement and privacy regulation have become blurred. This event aims to bring together regulators, legal experts, and industry representatives to discuss how these two legal frameworks can work together rather than in isolation.

The Legal Intersection

At the heart of this discussion is the tension between different regulatory objectives. Competition law, primarily governed by the Treaty on the Functioning of the European Union (TFEU), seeks to prevent market distortions and ensure fair play among businesses. Data protection law, specifically the General Data Protection Regulation (GDPR), focuses on the fundamental rights of individuals to control their personal information.

In recent years, regulators have observed that data is often the primary asset used to establish market dominance. When a company collects vast amounts of user data, it creates a barrier to entry for smaller competitors. This creates a feedback loop where more data leads to better services, which attracts more users, which in turn generates even more data. This phenomenon makes it difficult for traditional antitrust tools to address the power held by large tech platforms.

Why This Matters for Users and Companies

For users, the intersection of these laws is critical because privacy and competition are two sides of the same coin. When competition is low, companies have less incentive to protect user privacy. If a user has no alternative platform to switch to, a service provider can degrade privacy protections without fear of losing its customer base. In this sense, a lack of competition directly threatens the enforcement of GDPR principles.

For companies, the stakes involve significant compliance risks. A business might find itself in a position where a move to increase market efficiency or interoperability could inadvertently violate data minimization or purpose limitation principles. Conversely, strict data silos intended to protect privacy might be viewed by competition authorities as a way to prevent data portability and stifle innovation. The EDPB event seeks to clarify these friction points to provide more predictable regulatory environments.

Expected Outcomes and Regulatory Shifts

The event is expected to influence how the EDPB and the European Commission coordinate their enforcement actions. One major area of focus is the concept of data portability. While the GDPR grants users the right to move their data between services, the technical and legal implementation of this right is a central pillar of both privacy and competition strategy.

As the Digital Markets Act (DMA) begins to take full effect, the dialogue between data protection authorities and competition regulators will become even more essential. The goal is to ensure that the enforcement of one set of rules does not undermine the objectives of the other. By fostering a collaborative approach, regulators hope to protect the digital economy from monopolistic practices while ensuring that individual privacy rights remain non-negotiable.