Global digital policies are being introduced intensively, as AI and data governance reshape the competitive landscape of the digital economy.

Global Digital Policies Introduced Intensively, AI and Data Governance Reshape Competitive Landscape of Digital Economy

Introduction

In January 2025, major global economies intensively introduced or implemented digital policies, covering four major areas: content moderation, artificial intelligence (AI) regulation, competition enforcement, and data governance. From the continued enforcement of the EU's Digital Services Act (DSA), to the age verification requirements of the UK's Online Safety Act, to the signing of South Korea's AI Basic Act, regulators are shaping the rule framework of the digital economy at an unprecedented pace. These policies not only affect the operating models of tech giants, but are also redefining the boundaries of AI commercialization, platform responsibility, and data flows. Based on Digital Policy Alert's monthly review, this article sorts out key policy trends and analyzes their deep impact on the global digital economy's competitive landscape.

Event Background

The January 2025 global digital policy review published by Digital Policy Alert (DPA) systematically summarizes policy changes in G20 countries over the past month. In content moderation, the European Commission cooperated with Germany to assess platforms' risk mitigation measures before elections and expanded its investigation into X's (formerly Twitter) recommendation system; France's Law on Securing the Digital Space came into effect, requiring platforms to remove illegal content within 24 hours; the UK's Ofcom issued age assurance practice guidelines, requiring adult content platforms to implement age verification immediately. In AI regulation, the provisions of the EU AI Act banning unacceptable risk AI systems began to apply; South Korea signed the AI Basic Act, scheduled to take effect one year later; China solicited opinions on an AI safety standard system. In competition policy, Indonesia fined Google for abusing its dominant market position; the UK's CMA launched an investigation into Google's and Apple's mobile ecosystems. In data governance, Italy's data protection authority blocked DeepSeek from processing personal data; Brazil imposed restrictions on Worldcoin's collection of biometric data.

Digital Economy Analysis: How Regulation Reshapes Value Creation

These policy signals indicate that the "rule dividend" of the digital economy is replacing "regulatory arbitrage." For platform companies, content moderation obligations have shifted from "voluntary" to "mandatory," directly changing their operating costs and risk structures. Taking the EU's DSA as an example, the Commission requires large platforms to submit information related to recommendation systems, meaning algorithmic transparency has become a compliance necessity. This is not merely a compliance burden; it extends platforms' responsibility boundaries to the algorithmic level, affecting user growth and traffic distribution mechanisms. For example, if X's recommendation system is found to amplify harmful content, it may face sanctions, which in turn could affect its advertising model and user trust.In the AI field, the application of the prohibitive provisions of the EU's AI Act marks a shift in AI governance from principle discussions to the enforcement stage. When deploying AI systems, companies need to reassess high-risk use cases, such as social scoring and manipulative recommendations. This directly constrains the viability of certain AI business models, especially advertising recommendation models that rely on "attention capture." At the same time, South Korea's AI Basic Act requires AI systems to meet traceability and human oversight standards, which may increase the development costs of AI products, but also creates market entry barriers for trustworthy AI, benefiting companies with strong compliance capabilities.

Business Model Observation: Compliance Becomes the New Competitive Advantage

Tightening policies are giving rise to "compliance-driven" business models. France's new law grants ARCOM the power to block non-compliant websites, meaning that copyright filtering and age verification technologies on content platforms are no longer optional features but necessary conditions for market entry. The UK Ofcom's age assurance requirements may drive digital identity verification services to become a new growth point. From a business logic perspective, this is similar to the KYC (Know Your Customer) requirements in the fintech sector—compliance needs themselves can give rise to a third-party services market.

In terms of data governance, Italy's prohibition on DeepSeek processing personal data highlights the geopolitical risks of cross-border data flows. AI model training relies on massive amounts of data, but the trend toward data localization or "sovereign AI" is forcing companies to redesign their data architectures. For example, the introduction of facial recognition payment guidelines may limit the commercial application of biometric data, but it also creates demand for privacy-enhancing technologies (such as federated learning).

Market Competition Analysis: Who Benefits, Who Bears the Pressure

Regulatory enforcement often redistributes market power. The fine imposed on Google by Indonesia shows that developing countries are beginning to challenge the market power of tech giants. If the UK's investigation into the Google and Apple mobile ecosystems requires opening up app stores or payment systems, it could weaken their "walled garden" advantages and open up space for third-party app stores and payment service providers. Conversely, strict AI compliance requirements may favor large enterprises with strong legal and engineering resources, while small and medium-sized AI companies may become marginalized due to high compliance costs.

Notably, China's progress in setting AI safety standards may strengthen its voice in international standards competition. The TC260 AI safety standard system and synthetic content encoding rules will affect the compliance path for global AI products entering the Chinese market. At the same time, Europe's AI Act contrasts with the fragmented regulation across U.S. states, and multinational companies need to simultaneously meet multiple standards in different jurisdictions, adding complexity to global operations.

Data and Regulatory Impact: Data Sovereignty and Individual Rights Become the Core of PolicyPolicy trends in January 2025 show that data governance is extending from privacy protection to data sovereignty. China's proposed data security measures, Italy's ban on DeepSeek, and Brazil's restrictions on Worldcoin all point to a common trend: personal data is regarded as a national strategic resource, and cross-border flows are subject to stricter scrutiny. This poses challenges to AI training and digital advertising models that rely on global data pools. Enterprises may need to adopt localized deployment or data minimization strategies, which will change the cost structure of the cloud services and data analytics industries.

The EU's inclusion of the Code of Conduct on hate speech into the DSA framework means the legal foundation for online speech regulation is further consolidated. This not only affects platforms' content moderation policies, but may also affect their unified operational strategies across multiple markets. If platforms enforce different content standards in different countries, they will face dual pressures on brand reputation and operational efficiency.

Global Trend Watch: The 'Normalized Warfare' Era of Digital Regulation

Taken together, the policy pace of January 2025 indicates that digital regulation is no longer sporadic intervention but systematic, normalized governance. Countries are advancing simultaneously in content moderation, AI, competition, and data, and are increasingly emphasizing cross-border coordination (such as Australia, Canada, and the UK jointly issuing content credential guidelines). This marks the end of the 'Wild West era' of the digital economy and the entry into a new, rule-driven stage.

In the long run, the maturity of the AI Economy will be highly dependent on the clarity of regulatory frameworks. The EU's 'Competitiveness Compass' proposes building AI infrastructure, showing that regulation and industrial policy are converging. Major economies such as the United States, China, the EU, and ASEAN are each forming distinct AI governance models, which may lead to the fragmentation of AI technology stacks and ecosystems.

DigitalEcoNews Insight

From the editorial perspective, the global digital policy developments in January 2025 send a strong signal: competition in the digital economy has extended from product innovation to institutional innovation. Regulation is no longer merely an external constraint but a core variable shaping business models and market structures. If enterprises want to sustain growth in the global market, they must treat compliance as a strategic capability rather than a cost center. Especially in the AI field, Europe's 'prohibitive provisions' and Asia's 'empowering legislation' coexist, and multinational enterprises need to develop multi-track compliance systems. Stricter data governance may increase operating costs in the short term, but in the long run it will give rise to new technology and service markets, such as privacy computing, data intermediaries, and trustworthy AI certification. For investors and policymakers, paying attention to how these policies affect platforms' network effects and the marginal value of data will be key to understanding the future landscape of the digital economy.