EC starts legal action over Phorm
The European Commission has started legal action against Britain over the online advertising technology Phorm. — It follows complaints to the EC over how the behavioural advertising service was tested on BT's broadband network without the consent of users.
Context & Ripple Effects
The European Commission had already put targeted web advertising on its agenda in November 2007, when it announced plans to scrutinise behavioural targeting across the EU, so this move converts that stated concern into formal legal action against a member state. The trigger is concrete: confirmed complaints that Phorm's behavioural advertising service was tested on BT's broadband network without users' consent.
It also fits an established pattern in the Commission's dealings with Britain — as with its 2007 threat of legal action over BBC downloads, Brussels is again using infringement proceedings rather than persuasion to push the UK government into line.
First-order effects
- The UK government must now respond formally to an infringement proceeding, defending how it handled complaints about the unconsented BT trials of Phorm's technology.
- BT and Phorm face immediate exposure: the ISP that hosted the tests and the ad-tech firm behind them are named in a live EU-level dispute over consent.
Second-order effects
- Other European ISPs weighing network-level behavioural advertising now have to assume their own deployments would attract the same complaint-and-infringement path, pushing them toward explicit opt-in designs or abandonment.
- Ad-tech vendors selling deep-packet-inspection products into Europe see their go-to-market gated on demonstrating lawful consent, shifting procurement conversations toward compliance evidence.
Third-order effects
- If the pattern holds, ISP-level behavioural advertising in Europe consolidates around models where consent is enforced at the network operator, not assumed by default — making the access provider the accountable party for what its pipes reveal about users.
- Brussels' willingness to escalate privacy complaints into member-state legal action establishes a repeatable enforcement route that shifts leverage from national governments toward the Commission on data-use disputes.
The trend: European regulators are moving from scrutinising behavioural advertising to enforcing consent requirements through formal legal action against member states and the carriers that run the networks.