Global digital policies are undergoing intensive adjustments, with AI and the platform economy facing a new regulatory landscape.

Global Digital Policies Undergo Intensive Adjustments, AI and Platform Economy Face a New Regulatory Landscape

Lead: In January 2025, global digital economy policies entered a period of intensive adjustments. From the European Union's in-depth investigation into Platform X, to South Korea's official signing of the AI Basic Act, to China's new data security regulations, governments around the world are building new rules for the digital economy at an unprecedented pace. These policies will directly affect the future of platform companies, AI firms, and data-driven business models. The global digital economy is shifting from "wild growth" to a new phase of "rule-driven" development.

Event Background: The Global Regulatory Race Behind a Policy Document

This article is based on Digital Policy Alert's continuous monitoring of G20 countries and reviews the major developments in global digital policy in January 2025. In the field of content moderation, the European Commission continued to advance the implementation of the Digital Services Act (DSA) and, ahead of the German elections, conducted joint inspections with member states of large platforms' risk mitigation measures. At the same time, the European Commission expanded its investigation into Platform X, requiring the platform to provide information on its recommendation systems and technical interfaces to examine issues of content moderation and the viral spread of accounts. France's Digital Space Security and Regulation Law officially took effect, requiring platforms to remove illegal content within 24 hours and authorizing ARCOM to block non-compliant websites; its technical standards for age verification on adult content platforms have also taken effect. The UK's Ofcom published the Age Assurance Practice Guidance, requiring platforms containing adult content to implement age verification immediately, with user-to-user services required to achieve compliance by July 2025. In addition, the UK's CMA announced that it had obtained commitments from Google regarding the handling of fake reviews, while Russia fined Google 8 billion rubles (approximately $77.9 million) for failing to fulfill a previous administrative penalty.

In the field of AI regulation, the European Commission released the Competitiveness Compass, proposing an "AI Continent" strategy, planning to build AI Gigafactories, and promoting the EU Cloud and AI Development Act. Meanwhile, the provisions of the EU AI Act prohibiting unacceptable AI practices officially became applicable, covering manipulative and deceptive AI systems. South Korea signed the AI Basic Act, which stipulates design requirements and governance frameworks for AI systems and establishes an AI Management Authority. China's National Cybersecurity Standardization Technical Committee solicited comments on the draft AI safety standard system and the coding rules for providers of AI-generated synthetic content. The UK released the AI Cyber Security Code of Practice and the AI Opportunities Action Plan, proposing 50 measures to promote AI development.

In terms of competition policy, Indonesia fined Google for abuse of market dominance. The UK's CMA launched an investigation into the mobile ecosystems of Google and Apple. South Korea took antitrust action against game companies and Kakao.Data governance is equally intensive: China issued data security measures and facial recognition payment guidelines; Italy's data protection authority banned DeepSeek from processing personal data; South Korea imposed fines on unauthorized data transfers; Brazil restricted Worldcoin's collection of biometric data.

Digital Economy Analysis: How Is Regulation Reshaping Market Structure?

On the surface, these policies belong to different domains, but they all point to one trend: governments are redefining the boundaries of "legal" and "illegal" in the digital economy. In the past, platforms achieved rapid expansion through network effects generated by user-generated content and data accumulation; today, content moderation, age verification, and AI transparency requirements are changing platforms' operating cost structures.

Taking the EU's investigation into X as an example, recommendation systems are the core mechanism of platform growth. The Commission's requirement to open up technical interfaces means regulation will reach into the "black box" of algorithms. This not only affects X's ad-targeting capabilities, but may also force other platforms to redesign recommendation logic to improve explainability. As a result, the value distribution of content recommendations may shift from pursuing "user engagement time" to "content safety," and platforms will need to find a new balance between high growth and compliance.

In the UK, Ofcom's age verification requirements will directly impact adult content platforms. These platforms rely on anonymity and free access to attract users; mandatory age verification may lead to user attrition, but it may also foster a safer, more trustworthy digital space, offering compliant platforms a differentiating advantage. Ofcom has already fined MintStars £7,000 as a warning against inadequate protection of minors.

The tightening of data governance policies is also reshaping enterprises' data value chains. China's facial recognition payment guidelines have drawn red lines for the use of biometric data, which will affect the commercialization of payment and identity recognition technologies, but at the same time provide protection for enterprises that meet the standards. Italy's ban on DeepSeek shows that cross-border data flows relied upon by AI model training are now subject to stricter scrutiny. For AI companies that depend on global data training, future data acquisition strategies must become more localized and transparent.

Business Model Observations: Compliance Becomes a New Competitive Advantage

The new regulatory environment is changing the way enterprises create value. In the AI field, the EU's AI bans and South Korea's design standards will force companies to embed compliance review into their product R&D processes. This may extend the time-to-market for AI products, but it also improves product quality and user trust. The AI cybersecurity code of practice provides clear technical standards for enterprises, helping to reduce uncertainty.

Taking content platforms as an example, France's 24-hour removal requirement means platforms must deploy more efficient content moderation systems. Manual review is costly, and machine review has a high false-positive rate, which will drive demand for AI-assisted moderation tools. In fact, this creates new business opportunities for AI companies, namely providing precise content recognition and risk control systems.For data-driven enterprises, the new data governance regulations require them to establish data compliance systems, giving rise to markets for data protection officers, compliance consulting, and legal technology. Although this increases costs in the short term, in the long run, data compliance capability will become an important part of corporate reputation and brand value.

Market Competition Analysis: Offense-Defense Transition Under Antitrust Pressure

The antitrust developments in January show that global regulators remain vigilant against tech giants. Indonesia's fine on Google, the UK's investigation into mobile ecosystems, and South Korea's action against Kakao all indicate that "gatekeeper" behavior is being strictly scrutinized.

For Google and Apple, the mobile ecosystem is a major pillar of their revenue. The UK CMA's investigation may require them to open up third-party app stores or payment systems, which would weaken their commission capabilities in in-app payments and provide higher profit margins for game developers and content subscription services. Similarly, the handling of Google's fake reviews will enhance the integrity of the advertising ecosystem, but will also increase compliance burdens for advertisers.

At the same time, these regulatory actions have created a window of opportunity for competitors. For example, the EU's investigation into X may lead advertisers to shift to more stable platforms; the UK's restrictions on adult content may enable independent platforms with age verification to gain more users. However, it is worth noting that large enterprises have richer legal and compliance resources, and regulatory pressure may instead consolidate their market position, because smaller companies find it harder to bear compliance costs.

Data and Regulatory Impact: "Warlord Separatism" in Cross-Border Data Flows

The trends in data governance clearly show that data localization and digital sovereignty are becoming a global consensus. Restrictions on cross-border data transfers and biometric data collection imposed by economies such as China, South Korea, and Brazil will affect the data architecture design of multinational enterprises. For example, EU companies transferring data to South Korea need to reassess compliance; Brazil's restrictions on Worldcoin suggest that digital identity projects must consider local data laws.

This fragmentation trend poses a major challenge to the global digital economy. Data is the foundation of AI training and personalized services, and restricted cross-border flows will raise R&D costs for AI models and may lead to "data silos" in regional markets. However, this also incentivizes enterprises to develop privacy-enhancing technologies, such as federated learning and homomorphic encryption, thereby opening up new technological tracks.

Global Trend Observation: AI Infrastructure and Governance in Parallel

In the long run, the policy releases in January highlight two parallel mainlines: first, governments as investors in AI infrastructure, such as the EU's AI Gigafactory and the UK's AI Opportunities Action Plan; second, governments as rule-makers, ranging from content credentials to AI safety standards.The former indicates that global AI competition has risen from the corporate level to the national strategic level. The latter signals that AI governance frameworks will move from principles to operational details. For example, the content credentials guidelines issued by Australia, Canada, and the United Kingdom use encrypted metadata, digital watermarks, and media fingerprints to ensure content authenticity, which will become critical infrastructure for online trust amid the growing proliferation of generative AI deepfakes.

DigitalEcoNews Insight

The global digital policies of January 2025 are not just a policy list; they are a barometer of the evolution of the digital economy. We see that regulation is deeply intervening in every key link of algorithms, data, and AI, and business models must incorporate a "compliance by design" mindset. In the short term, this raises the operating threshold; in the long term, it may drive the digital economy from being "traffic-driven" to "trust-driven."

For enterprises, it is necessary to build flexible compliance capabilities across different global jurisdictions, especially to strike a balance between data localization and global operations. For regulators, how to protect citizens' rights while avoiding stifling innovation will be a long-term challenge.

DigitalEcoNews will continue to track the actual impact of these policies on business models, platform competition, and AI commercialization.