A complex framework of consumer protection law has developed to protect consumers from the frequent imbalance in their relationship with traders. Laws also exist to deal with issues around unfair contract terms in B2B situations where the balance of power between the contracting businesses can be a factor in determining whether or not a contractual term is reasonable. The EC has become increasingly concerned that there is insufficient transparency and fairness around the relationship between online platforms and search engines, and their business users, and has taken steps to regulate it.
The Regulation on promoting fairness and transparency for business users of online intermediation services (Online Platforms Regulation or OPR – also called the Online Intermediation Regulation) has been published in the Official Journal and will apply from 12 July 2020.
It introduces:
The new rules will apply primarily to online platforms and marketplaces, app stores, and social media platforms, and, in relation to rules on ranking transparency, to search engines in respect of their business and corporate users. The OPR does not cover business to consumer relationships.
Specifically, the rules will apply to online platforms and search engines irrespective of their place of establishment or residence and of otherwise applicable law, where they offer services to business users and corporate website users which are established or resident in the EU and which offer goods or services to consumers located in the EU through the online platforms or search engines.
The OPR does not apply to online payment services, online advertising tools or online advertising exchanges, which are not provided with the aim of facilitating the initiation of direct transactions and which do not involve a contractual relationship with consumers.
Only Articles 5 (ranking) and 7 (differentiated treatment) place direct obligations on online search engines.
It is unclear what the impact of Brexit will be on whether or not the UK implements the same or equivalent rules. If the UK exits the European Union on or after 12 July 2020, the Regulation will apply in the UK as retained EU law. If Brexit happens before that, the UK will not be required to apply the Regulation unless agreement to the contrary is reached. It may, however, choose to do so anyway.
Whether or not the OPR forms part of UK law, the rules around online platforms and search engines will apply to UK-based platforms and search engines if they are caught by the OPR's extra territorial provisions.
The OPR applies without prejudice to national rules which (in conformity with EU law) prohibit or sanction unilateral conduct or unfair commercial practices, to the extent that the relevant aspects are not covered in the OPR.
The OPR will not affect national civil law, in particular contract law such as the rules on validity, formation, effects or termination of a contract, in so far as those rules conform with EU law and to the extent those aspects are not covered in the OPR.
The OPR is without prejudice to EU law, in particular, to EU law in the areas of judicial cooperation in civil matters, competition, data protection, trade secrets protection, consumer protection, e-commerce and financial services.
Article 9 (access to data) is explicitly without prejudice to the GDPR, the ePrivacy Directive and the Data Protection Law Enforcement Directive.
"Business user" – means any private individual acting in a commercial or professional capacity or any legal person which through online intermediation services offers goods or services to consumers for purposes relating to its trade, business, craft or profession.
"Online intermediation services" – means services which meet all of the following requirements:
"Provider of online intermediation services" – means any natural or legal person which provides, or which offers to provide, online intermediation services to business users.
"Online search engine" – means a digital service that allows users to input queries in order to perform searches of, in principle, all websites or websites in a particular language on the basis of a query on any subject in the form of a keyword, voice request, phrase or other input, and returns results in any format in which information related to the requested content can be found.
"Provider of online search engine" – means any natural or legal person which provides, or which offers to provide, online search engines to consumers.
"corporate website user" – means any natural or legal person which uses an online interface, meaning any software, including a website or a part thereof and applications, including mobile applications, to offer goods or services to consumers for purposes relating to its trade, business, craft or profession.
"Durable medium" – means something which can be personally directed, stored and kept accessible and allows unchanged reproduction.
Note that "terms and conditions" is defined widely to include any terms and conditions or specifications governing the contractual relationship between the Online Intermediation Service (OIS) provider and the business user, where they are defined unilaterally by the OIS provider. The decision as to whether or not it's the OIS which has unilaterally defined the terms and conditions should be an overall assessment. Factors like the relative size of the parties or whether the contract or elements of it have been negotiated will not by themselves be decisive. This has the slightly unusual effect of requiring some consideration as to whether provisions in the OPR which relate to OIS provider terms and conditions apply in a particular instance. They will only be relevant where the terms and conditions are considered to be unilaterally defined by the OIS provider.
OIS providers need to provide their business users with easily available (including pre-contract) terms and conditions which must be written in plain and intelligible language.
The terms and conditions must include information about:
Any proposed modifications of terms and conditions must be provided to the business user on a durable medium. Business users must be given notice prior to changes taking effect which is reasonable and proportionate to the extent of the changes and their impact on the business and which is of at least 15 days. The notice period must be longer than 15 days where the business user needs to make technical or commercial adaptations in order to comply with the changes.
On notification of changes, the business user may terminate the contract before the end of the notice period. Such termination will take effect within 15 days after receipt of the notice (unless the relevant contract stipulates a shorter period).
The business user may also waive the notice period by written statement or clear affirmative action. This may include, for example, submitting new goods or services on the OIS during any 15 day notice period (but not where the notice period is longer).
Notice period requirements will not apply where modifications to terms and conditions are made in response to a regulatory obligation or to address an unforeseen and imminent danger (eg fraud, cyberthreats, data breach).
Non-compliant terms and conditions will be null and void.
Note: Article 3(5) is slightly unclear. It says that OIS providers shall ensure the identity of the business user is clearly visible but provides no details as to what that means. The relevant recitals suggest that OIS providers shouldn't block the business user's identity rather than that they must display it.
Where an OIS provider decides to restrict or suspend its services in respect of a business user's individual goods or services, it must provide the business user with a statement of its reasons (including certain mandatory information) on a durable medium prior to or at the time of the termination or restriction. This will not apply where the OIS provider is subject to a legal or regulatory obligation not to disclose such information, or where the OIS provider can demonstrate the business user has repeatedly breached its terms and conditions.
Where an OIS provider decides to terminate the provision of its services to a business user, it must give 30 days' notice and supply a statement of reasons for the decision on a durable medium. The 30 day notice period does not apply (but a statement of reasons must still be supplied) where:
The OIS provider must allow the business user to go through the Article 11 complaints handling procedure.
OIS providers must set out the main parameters determining ranking and the reasons for their relative importance in their terms and conditions with business users.
Online search engine providers (OSEs) must provide an easily and publicly available description in plain and intelligible language on their search engines of the main parameters which, individually or collectively, are the most significant in determining ranking, and their relative importance.
OSEs also have to offer to show their corporate website users the contents of any third party notice which has led to an impact on their ranking or to their delisting.
Both OIS providers and OSEs must include a description of the influence on ranking of any available direct or indirect remuneration mechanisms.
The descriptions of ranking parameters must allow business users or corporate website users (as appropriate) to understand the extent to which ranking takes account of:
OIS providers and OSEs are not required to disclose algorithms or any information which would be reasonably certain to cause consumer harm or deception. This is without prejudice to the Trade Secrets Directive.
Further guidance on transparency requirements will follow.
Where the OIS provider or a third party offers ancillary goods and services to consumers, a description of the types of goods and services offered and whether and under what conditions the business user is also allowed to offer their own ancillary goods through the relevant OIS provider, must be included in the terms and conditions.
OIS providers and OSEs must include in their terms and conditions a description of any differentiated treatment they give or may give in relation to goods or services they (or a business they control) offer to consumers on the one hand, and those of their business users/corporate website users on the other hand.
The description must cover, in particular, any differentiated treatment relating to:
OIS providers shall:
OIS providers must include a description in their terms and conditions of the access of their business users to personal and/or other data generated by business users and/or consumers through their provision/use of services on the platform.
This must cover:
Where OIS providers restrict business users from offering the same goods and services to consumers under different terms and conditions through other means, they must include the reasons for the restrictions in their terms and conditions and make the grounds for the restriction publicly available, except where they are required by EU or Member State law to make such restrictions.
OIS providers must provide an internal complaints procedure for business users. This must be easily accessible, free, provide resolution within a reasonable time, and operate on the principles of transparency and equal treatment for equal situations.
The process should deal with complaints in relation to non-compliance by the provider with the OPR, technological issues interfering with the platform, measures taken or behaviour by the provider which relate to the provision of their services and directly affect the relevant business user.
Outcomes must be conveyed to the complainant in plain and intelligible language and relevant information about the procedure must be included in the terms and conditions. Details must also be made available to the public about the system at least annually including information about the number of complaints, the main types of complaint, the average time period to process a complaint and aggregated information about the outcomes.
Article 11 does NOT apply to OIS providers which are small enterprises (Article 2(2) of Annex to Recommendation 2003/361/EC).
OIS providers must identify two or more mediators with whom they are willing to engage in their terms and conditions. Where mediation is used, the OIS provider must bear a reasonable proportion of the costs.
Legal action by representative organisations, associations and public bodies (Article 14) Organisations and associations legitimately representing business users and/or corporate website users (which comply with specified conditions), as well as public bodies, have the right to take action before competent courts to enforce the OPR.
The rest of the OPR places obligations on Member States and the Commission. These relate to enforcement, specialised mediators, best practice exchanges, codes of conduct, and to monitoring and review of the functioning of the OPR.
If you have any questions on this article please contact us.
PSD2 seeks to improve the existing EU rules for electronic payments taking into account innovations in payment services, such as internet and mobile payments.
1 of 7 Insights
A little over a year ago, we discussed the impact of the German Netzwerkdurchsetzungsgesetz (Network Enforcement Act, or NetzDG) which came into force on 1 October 2017, and its impact on freedom of speech on social networks. On its two year anniversary, we ask: does it work?
2 of 7 Insights
In this post-truth, online world, vast swathes of the global population no longer obtain their information from traditional news organisations or broadcasters.
3 of 7 Insights
From cyberbullying to terrorist attacks, the role of the internet is coming under increasing scrutiny with a number of initiatives at national and supra-national level to assess and mitigate the risks.
4 of 7 Insights
5 of 7 Insights
Article 17 of the new Copyright Directive has been accused of censoring freedom of expression and "breaking the internet" by making platforms caught by the article directly liable for infringing content uploaded by users.
6 of 7 Insights
Return to