Precisely 20 years ago in the European Union, the e-Commerce Directive (ECD)Footnote 1 introduced a conditional liability regime that has so far shielded online intermediaries – or, more accurately “information society service providers” performing mere conduit, caching and hosting – from liability for the unlawful conduct of third parties acting online through their services. For the last two decades, the “safe harbour” regime set forth by the ECD has been a foundational cornerstone for the free circulation of information and the expansion of digital markets. However, over the years the scenario has changed significantly. The rapid development of online intermediaries has allowed new opportunities for information to be freely and massively shared online and made e-commerce a new standard of doing business. At the same time, new issues have arisen. The online dissemination of illegal content is only one of the problems deriving from large use of services offered by online intermediaries. According to the European Commission,Footnote 2 online sales of counterfeit or dangerous products, as well as of other illegally traded goods, are constantly increasing. In addition, the biggest share of the value stemming from digital markets appears to be captured by just a few online intermediaries, which take advantage of their role as gatekeepers and benefit from strong network effects.

The combination of these phenomena – the pivotal role of online intermediaries in allowing third parties to perform legal as well as illegal activities and the growing economic power of such intermediaries – poses a profound challenge to the legal framework established some 20 years ago. European courts initially, and legislatures more recently, have taken a position regarding the need for the further regulation of online intermediaries.

To mention only the most evident patterns, EU jurisprudence has moved along two parallel lines, on the one hand, narrowing the scope of the safe harbours protecting intermediaries from liability for hosting illicit third-party content,Footnote 3 on the other hand, progressively increasing the use of injunctions against online intermediaries.

First, especially in the field of intellectual property rights (IPRs), EU case law has evolved towards depriving internet service providers of their liability privilege by questioning and curbing the concept of a “passive” or “neutral” provider. According to the Court of Justice of the European Union (CJEU),Footnote 4 intermediaries can benefit from the ECD’s safe harbour privileges when they take a mediating, passive or neutral position only. Any further actions involving optimizing the presentation of user-generated content or promoting this content would qualify intermediaries as “active”, thus falling outside the safe harbour of Art. 14 ECD.

The distinction between active and passive providers was also embraced by the European Court of Human Rights (ECtHR), which in Delfi found as compatible with the European Convention on Human Rights a decision against an electronic newspaper held liable for the defamatory comments posted by readers in the newspaper’s forum.Footnote 5 The ECtHR qualified as “active” the role of the publisher and even evaluated the word-based filter adopted by the publisher as insufficient for preventing harm being caused to third persons.

At the Member States’ level, the scenario is more nuanced, but it is fair to state that many national courts are following the same approach.Footnote 6 In Italy, for instance, the active or passive role of online intermediaries proved to be relevant not only in the field of IPRsFootnote 7 but even with reference to unfair commercial practices.Footnote 8 In the 2017 Viagogo decision, the Italian Competition Authority (Autorità Garante della Concorrenza e del Mercato, AGCM) considered the secondary marketplace for tickets to live events as an “active” intermediary and sanctioned it for deceptive practices performed by its users (for instance, lack of information concerning the original price of tickets, the number of tickets left and the seat location). The decision by the AGCM was eventually reformed by the Italian Supreme Administrative Court (Consiglio di Stato), which held Viagogo as a “passive” hosting provider.Footnote 9 However, it is worth noting that this was not the first case where the AGCM attempted to hold an online intermediary liable for the conduct of its users.Footnote 10

One further relevant development towards enhanced liability of online intermediaries concerns the CJEU’s interpretative effort to determine, under certain conditions, direct (primary) liability rather than merely accessory (secondary) liability of intermediaries in relation to users’ copyright infringements. Over time, the possibility of direct liability for copyright infringement has been envisaged by the CJEU in its case law on the right of communication to the public within Art. 3(1) InfoSoc Directive. In various recent cases, the Court held online intermediaries providing access to users’ content as undertaking acts relevant under Art. 3(1) InfoSoc Directive and therefore potentially liable for copyright infringement.Footnote 11

The second path concerns the use of injunctive reliefs against online intermediaries. As Arts. 12–14 ECD do not affect injunction orders, these have become the most important instrument to contrast illicit content shared through services offered by online intermediaries. Despite the fact that Art. 15 ECD prohibits general monitoring obligations on hosting providers, intermediaries are not relieved from the obligations to comply with injunctions, for instance under Art. 8(3) InfoSoc Directive or Art. 11 Enforcement Directive.Footnote 12 At least in some cases, injunctions have been applied to require providers not only to take down actual illicit content, but also to prevent further uploading of the same (or even similar) content (stay-down obligations).Footnote 13 As a result, online intermediaries are increasingly playing a role in the circulation of information uploaded by third parties.

In line with the above-mentioned judicial approach, among other new legal provisions concerning online intermediaries,Footnote 14 the European legislature recently took a first step toward a real paradigm shift with regard to online intermediaries and their liability for third-party infringements. Article 17 of the Directive on Copyright in the Digital Single Market (DSM Directive)Footnote 15 enacts a direct liability system for online content-sharing services providers (OCSSPs) for copyright infringements committed by their users. Article 17 states that OCSSPs perform an act of communication to the public when they give public access to copyright-protected works uploaded by their users and are liable for such an act unless they fulfil the duty of care as stated in Art. 17(4). Therefore, with specific regard to copyright infringement, Art. 17 derogates from the safe harbour regime of the ECD and opens the way to increased accountability and enhanced liability of online intermediaries.

In the policy and doctrinal debate, it has been discussed – among other relevant issues concerning Art. 17 – whether the liability regime introduced by Art. 17 DSM Directive will solve the alleged mismatch between the value that online content-sharing platforms extract from creative content and the revenue returned to the copyright holders (the so-called "value-gap"). In any case, it is clear that the new liability rules for copyright infringement are just an example of a more general tendency, which goes beyond the copyright realm and includes, to mention one more field, antitrust and competition law. Both in the EU and the US, lately – at least before COVID-19 – the main concern of competition authorities seemed to be reducing the economic and political power of large online platforms (especially those labelled as GAFA).Footnote 16

Finally, in February 2020 the EU Commission announced a Digital Services Act Package.Footnote 17 The package is intended to modernise the current legal framework for digital services by means of two main pillars: first, new rules framing the responsibilities of digital services to address the risks faced by their users and to protect their rights; and second, ex ante rules covering large online platforms acting as gatekeepers, which should ensure that those platforms behave fairly and can be challenged by new entrants and existing competitors. The proposals for EU regulations should be ready by the end of 2020.Footnote 18

These judicial and legislative initiatives are already triggering reactions from online intermediaries, both through lobbying at the level of policy debate and – what is perhaps more critical – through self-regulation. In May 2020, for instance, Facebook announced the creation and empowerment of a new “Oversight Board” to exercise independent judgment over some of the most difficult and significant content decisions.Footnote 19

In these circumstances it is licit to ask whether and how European institutions are considering the collateral effects of the emerging trend “against” online intermediaries. It is beyond dispute that the current scenario is very far from that of 20 and more years ago. As correctly pointed out by the European Commission with respect to the preliminary works for the new Digital Services Act Package, “The European Single Market requires a modern legal framework to ensure the safety of users online and to allow innovative digital businesses to grow, while respecting the basic principles underpinning the current legal framework of the e-Commerce Directive”. At the moment, however, it is not clear how these principles – and, in particular, freedom of expression – will be practically assured in a new legal framework where online intermediaries may not enjoy the safe harbors originally laid down in the ECD. In other words, there is an urgent need to ask what legal instruments will be adopted in the EU to assure freedom of expression in a digital environment where online intermediaries will be potentially liable for the illicit conducts of third parties using their services.

While the specific interests of some stakeholders will be adequately represented during the legislative process, “The Logic of Collective Action”Footnote 20 teaches us that, presumably, fundamental values like freedom of expression and free circulation of information risk being underestimated in the political debate. And this might be the “new value gap”. The risk is that the new rules will just replace one “value gap” with another. Without overestimating the role and weight of academia in the political arena, it seems reasonable to say that in the near future European scholars (and not only them) should step into the technical debate, by designing and proposing workable solutions for actual protection of these fundamental values in the new scenario.