New complicated privacy and transparency regulations might be a mere speed bump for Facebook but an insurmountable burden for startups
You know what tech startups hate? Complicated legal compliance. The problem is, Facebook isn't a startup any more, but its competitors are.
Context & Ripple Effects
This piece lands between two regulatory pressure points on Facebook: senators had already pressed Facebook, Twitter and Google on shell firms obscuring advertiser identities, making transparency rules concrete rather than hypothetical, and Facebook itself had warned the EU years earlier that fragmented regulation could mean fewer features rolling out in Europe. The article's argument is that the same compliance machinery Facebook can absorb becomes existential for the startups competing with it.
The follow-on coverage validates the asymmetry: weeks later Facebook's GDPR-era consent flows were criticized for complying with the letter of the law while pushing users to opt in, and by 2019 its executives were arguing that more US regulation would aid Chinese rivals — while Alphabet and Microsoft were simultaneously clamoring for facial-recognition rules that pose existential threats to smaller players.
First-order effects
- Startups building social or ad-driven products must staff up for privacy and transparency compliance immediately, while Facebook spreads the same cost across an existing legal and policy apparatus.
- Facebook gains a relative advantage from every new rule: transparency requirements like the senatorial scrutiny of shell-company advertisers raise costs per advertiser relationship that scale with headcount, not revenue.
Second-order effects
- Incumbents acquire an incentive to shape — or quietly welcome — regulation: Alphabet and Microsoft publicly calling for facial-recognition rules shows large platforms converting compliance capacity into a competitive moat against startups.
- Regulators respond to incumbent lobbying with structural remedies aimed at the leader, such as the FTC considering forcing Facebook to make its social graph portable so users can export friend lists to rival apps — a rule that would lower barriers for exactly the startups the compliance burden squeezes.
Third-order effects
- If the pattern holds, privacy and transparency regimes systematically consolidate social platforms around the few companies that can afford compliance teams, with Facebook, Instagram, YouTube and TikTok already capturing over 90% of social ad revenue.
- The endgame is contested: either regulation hardens into an incumbency moat, or portability-style mandates flip it into a deconcentration tool — which side wins depends on whether regulators design rules around company size or around user rights.
The trend: Tech regulation is becoming a scale game: compliance-heavy privacy and transparency rules function as an implicit tax that entrenches the largest platforms unless paired with portability mandates that reopen the market to challengers.