Digital Commerce, Platforms and Social Media

Introduction

Digital commerce has transformed marketing from a largely linear activity into a networked system involving merchants, marketplaces, app stores, payment providers, advertisers, data brokers, influencers, logistics firms, cloud providers and consumers. A consumer may discover a product through a social-media recommendation, view an advertisement selected through automated bidding, purchase through a marketplace, pay through a third-party processor and receive customer service through an artificial-intelligence chatbot. Each stage creates legal duties, ethical risks and compliance responsibilities.

The central managerial challenge is that digital commerce is not governed by one body of law. Consumer-protection, contract, privacy, intellectual-property, competition, advertising, payments, cybersecurity, product-safety and platform-governance rules may apply simultaneously. In addition, legal duties vary by jurisdiction, business model, user location, product category and the platform’s role in the transaction. A global marketing manager must therefore distinguish universal principles from jurisdiction-specific requirements and obtain local legal advice before deployment.

This chapter examines the governance of e-commerce, online marketplaces, mobile applications, online contracts, user-generated content, content moderation, intermediary liability, advertising technology and platform power. It treats compliance not as a narrow legal function but as a design, risk-management and stakeholder-governance problem.

Learning objectives

By the end of this chapter, students should be able to:

1. Explain the principal legal relationships and risks in digital commerce and platform markets.
2. Analyze the formation and enforceability of online contracts and digital disclosures.
3. Distinguish platform liability, intermediary protections and duties of care.
4. Evaluate user-generated content, influencer marketing and content-moderation systems.
5. Map the participants and data flows in an ad-tech ecosystem.
6. Apply a risk-based governance framework to a digital marketing initiative.
7. Critically assess ethical issues involving autonomy, fairness, privacy, transparency and accountability.

1. The architecture of digital commerce

1.1 Linear commerce and platform commerce

In linear commerce, a seller markets directly to a buyer. In platform commerce, an intermediary facilitates interactions among multiple participant groups. A marketplace may connect sellers and buyers; a social network may connect users, advertisers and content creators; an app store may connect developers and users; and a delivery platform may connect restaurants, couriers and consumers.

Platforms create value through network effects. A direct network effect occurs when a service becomes more valuable as more users join it, as with messaging. An indirect network effect occurs when growth on one side increases value for another side, as when more buyers attract sellers and more sellers attract buyers. These effects can produce efficiency and innovation, but they can also create dependency, concentration and barriers to entry.

A platform’s legal position depends partly on what it actually does. A service that merely hosts information may receive different treatment from one that selects, edits, promotes, ranks, sells or guarantees the information. The label “intermediary” does not automatically eliminate responsibility. Courts and regulators commonly examine functional reality, contractual arrangements, knowledge, control, economic benefit and the platform’s conduct after receiving notice.

1.2 Participants and relationships

A digital transaction may involve the following parties:

A compliance analysis should identify each relationship rather than treating “the platform” as a single undifferentiated actor.

2. Online contracts and consumer protection

2.1 Contract formation

Online contracts may be formed through clickwrap, sign-in wrap, browsewrap or an individually negotiated digital agreement. Clickwrap requires the user to affirm agreement, usually by selecting a box or button. Sign-in wrap links account creation to terms through a notice. Browsewrap attempts to bind users merely because terms are available through a hyperlink.

Enforceability depends on applicable contract law and facts including notice, conspicuousness, language, accessibility, assent, capacity, incorporation of terms, and whether an unreasonable clause was hidden or imposed after the transaction. A well-designed interface should:

• present the relevant terms before commitment;
• use clear language and an identifiable agreement action;
• distinguish terms from marketing content;
• preserve the version accepted, date, user identity and relevant interface;
• make material terms accessible on mobile devices;
• provide legally required cancellation, renewal and refund information; and
• avoid making consent to unnecessary data processing a condition of purchase.

A pre-ticked box, confusing button, or design that makes rejection materially harder than acceptance may be challenged as inadequate consent or an unfair commercial practice. Contractual freedom does not authorize deception or the exclusion of mandatory consumer rights.

2.2 Digital disclosures and dark patterns

Consumer-protection law generally requires that material information be truthful, understandable, timely and sufficiently prominent. A disclosure cannot cure an otherwise deceptive headline if it is hidden, contradicted, displayed briefly or written in language the target audience cannot reasonably understand.

Dark patterns are interface designs that steer, pressure or manipulate users into decisions they would not otherwise make. Examples include false scarcity, hidden subscriptions, confirm-shaming, confusing cancellation paths, disguised advertisements, preselected options and repeated prompts after refusal. The ethical issue is not only whether a user technically clicked “accept,” but whether the design respected informed and voluntary choice.

A practical review asks four questions:

1. What decision is the user being asked to make?
2. What information would a reasonable user consider material?
3. Does the interface make acceptance and refusal comparably clear and easy?
4. Would the organization defend the design if shown to a regulator, journalist or consumer panel?

2.3 Pricing, reviews and subscriptions

Digital sellers should state the total price, mandatory charges, delivery conditions, taxes where required, material limitations and cancellation terms. Drip pricing—advertising an incomplete price and revealing unavoidable charges late in the process—can undermine informed comparison.

Reviews must be genuine and representative. Businesses should not purchase fabricated reviews, suppress negative reviews selectively, manipulate ratings, or present incentivized testimonials without appropriate disclosure. A platform that verifies purchases should explain what “verified” means; verification of purchase does not necessarily verify product quality or independence of the opinion.

Subscription models require particularly careful disclosure of trial duration, renewal date, recurring amount, cancellation method and any restrictions. A sound compliance control is to test the entire customer journey from advertisement through cancellation, not merely the wording of the terms.

3. Mobile apps, data and online identity

Apps combine commerce, communications, location, device identifiers, behavioral data and software permissions. Legal and ethical analysis should separate data necessary to provide the service from data used for personalization, advertising, analytics or product development.

Privacy regimes differ, but common governance principles include lawfulness, transparency, purpose limitation, data minimization, accuracy, security, retention control and accountability. Consent, where relied upon, should be informed, specific, freely given and withdrawable. A privacy notice is not a substitute for lawful processing or responsible design.

App developers and platforms should control software development kits, or SDKs, supplied by analytics and advertising vendors. An organization may remain responsible for data flows it failed to investigate, even when a third party collected the information. Appropriate controls include a data inventory, vendor due diligence, permission review, encryption, access controls, retention schedules, incident response and documented assessments for high-risk processing.

Children and other vulnerable users require heightened care. Age assurance, parental controls and child-directed design raise difficult issues: collecting more identity data may create privacy risks, while collecting too little may fail to protect children. The proportionate approach depends on the service, jurisdiction, risk and available technology.

4. Marketplaces and platform governance

4.1 Marketplace responsibilities

A marketplace should distinguish its own products from third-party listings and provide meaningful information about seller identity, product characteristics, delivery, returns and complaint channels. Risk increases where the platform controls ranking, payment, fulfillment, guarantees or customer communications.

Important controls include seller onboarding, identity verification, product traceability, prohibited-goods screening, counterfeit detection, recall cooperation, complaint management, refund procedures and audit rights. Automated screening should be complemented by human escalation because fraudsters adapt and legitimate sellers may be incorrectly blocked.

Ranking is a governance decision, not a neutral technical fact. Search results may be ordered by relevance, paid placement, conversion probability, seller performance, margin or inventory. Platforms should disclose material ranking parameters and avoid presenting paid placement as organic relevance without clear labeling.

4.2 Competition and platform power

Platforms can use data and scale to improve service, but they may also preference their own products, impose unfair access terms, restrict interoperability or make switching difficult. Competition authorities in different jurisdictions have addressed self-preferencing, tying, app-store restrictions, data portability, exclusive dealing and acquisitions of potential competitors. Specific obligations depend on applicable law and the firm’s market position.

Managers should assess both legal competition risk and ethical dependency risk. A small seller may technically agree to platform terms yet lack meaningful bargaining power. Sudden commission changes, opaque de-ranking or inaccessible appeals can create substantial economic harm even without an obvious breach of contract.

4.3 Platform governance as an institutional system

Platform governance includes rules, technical architecture, enforcement procedures, incentives, transparency practices and remedies. A credible system should answer:

• What conduct is prohibited?
• How are rules communicated and updated?
• How are reports prioritized?
• What evidence is considered?
• Who makes the decision?
• Can an affected party appeal?
• Are enforcement outcomes measured for accuracy and bias?
• What independent oversight exists?

The European Union’s Digital Services Act illustrates a contemporary regulatory model that combines notice-and-action processes, transparency, risk assessment and enhanced duties for very large services. Other jurisdictions use different intermediary-liability statutes, safe harbors, takedown rules or platform codes. No single model should be assumed to apply globally.

5. User-generated content and intermediary liability

User-generated content includes reviews, comments, videos, images, product listings, livestreams and user questions. It creates engagement and social proof but may involve defamation, harassment, fraud, hate speech, privacy violations, unlawful discrimination, intellectual-property infringement, unsafe advice or illegal goods.

Intermediary-liability regimes often attempt to balance three interests: protecting users from harm, preserving freedom of expression and avoiding a monitoring burden that would suppress lawful speech. Some systems provide conditional safe harbors if the intermediary meets requirements such as notice-and-action, transparency or cooperation with authorities. Others impose broader duties based on the service’s role, size or risk.

A responsible notice-and-action system should include:

1. accessible reporting channels;
2. enough information for a report to be assessed;
3. prioritization of credible and urgent risks;
4. notice to the affected user where appropriate;
5. reasoned decisions and evidence preservation;
6. proportionate remedies;
7. appeal or review mechanisms; and
8. publication of aggregate enforcement information.

Automated moderation can classify large volumes of content, but accuracy varies by language, context, irony, cultural practice and emerging vocabulary. Human review is essential for high-impact cases. Removing lawful criticism to reduce operational risk is not ethically equivalent to addressing credible threats. Conversely, leaving clearly harmful content online because review is difficult can externalize risk to users.

6. Advertising, influencers and ad-tech ecosystems

6.1 Truthful advertising and substantiation

Marketing claims should be accurate, supported by reliable evidence and presented in a way that does not create a misleading overall impression. “Eco-friendly,” health, performance, comparative, scarcity and ranking claims require particular care. Substantiation should exist before dissemination, not be assembled after a complaint.

Influencer marketing creates a dual relationship: the creator communicates to an audience, while the brand benefits from the creator’s credibility. Material connections—including payment, free products, affiliate commissions, employment or family relationships—should be disclosed clearly and close to the endorsement. A disclosure hidden among hashtags or placed after a “more” link may be ineffective.

Advertisers should train creators, monitor posts, correct violations and retain evidence. A contract cannot transfer all regulatory responsibility if the brand directed, paid for or benefited from the communication.

6.2 The ad-tech chain

A simplified ad-tech transaction may involve an advertiser, agency, demand-side platform, data-management or customer-data platform, supply-side platform, publisher, ad exchange, measurement vendor and identity service. When a user visits a page, information may be sent to several parties, audience segments may be inferred, an auction may occur and an advertisement may be delivered within milliseconds.

Figure: Simplified relationships in an ad-tech ecosystem. Actual systems may contain many more participants and data flows.

The principal risks are lack of meaningful consent, excessive profiling, opaque responsibility, sensitive inference, discriminatory targeting, security leakage, inaccurate identity matching and difficulty exercising data rights. Contextual advertising—based on page content rather than an individual’s behavioral history—may reduce some privacy risks, although it does not eliminate all compliance obligations.

6.3 A risk-based ad-tech assessment

Before launching a campaign, a marketing team should document the purpose, data categories, sources, vendors, legal bases, retention periods, audience exclusions, geographic scope, measurement methods and deletion process. It should test whether optimization rewards harmful outcomes, such as systematically excluding protected groups from housing, employment or credit opportunities. The fact that an algorithm optimizes conversion does not establish that the resulting allocation is fair or lawful.

7. Ethics and responsible platform design

Legal compliance is a minimum threshold. Ethical marketing asks whether conduct is justifiable to affected stakeholders even when formal law is uncertain. Four principles are especially useful.

Autonomy. Users should understand material choices and retain meaningful control. Personalization should assist rather than exploit vulnerability.

Fairness. Benefits and burdens should not be allocated through unjustified discrimination. Testing should examine disparate outcomes, not only average accuracy.

Non-maleficence. Businesses should prevent foreseeable harm, including fraud, unsafe products, harassment, privacy loss and financial exploitation.

Accountability. A responsible organization can explain who made a decision, what evidence was used, how errors are corrected and how affected persons obtain remedy.

Artificial intelligence intensifies these issues. Generative systems may produce false product claims, synthetic reviews, impersonation, copyrighted material or discriminatory recommendations. Automated moderation may incorrectly remove legitimate speech. Predictive models may infer sensitive traits even when those traits were not directly collected. Governance should therefore include model inventories, data-quality review, human oversight, adversarial testing, incident reporting, documentation and a clear allocation of responsibility. “The algorithm did it” is not an adequate governance explanation.

8. An integrated compliance framework

A practical framework combines legal analysis, design controls and organizational accountability.

Step 1: Define the service and jurisdictions

Identify the product, users, countries, age groups, transaction types and regulated sectors. Determine whether the organization is seller, publisher, host, marketplace, advertiser, processor, controller or several of these.

Step 2: Map the data and decision flows

Record what information enters the system, where it travels, who receives it, how long it is retained and what automated decisions occur. Include SDKs, pixels, cookies, APIs, payment providers and outsourced moderators.

Step 3: Identify material risks

Assess deception, privacy, security, intellectual property, product safety, competition, discrimination, speech, accessibility and operational continuity. Rank risks by severity, likelihood, affected population and reversibility.

Step 4: Design controls

Controls may include clear disclosures, consent management, seller verification, claim substantiation, content rules, access restrictions, encryption, audit logs, human review, appeals, vendor contracts, incident response and deletion mechanisms.

Step 5: Test before launch

Conduct usability testing, legal review, accessibility testing, red-team exercises, bias analysis and end-to-end transactional testing. Review the actual interface rather than relying solely on policy documents.

Step 6: Monitor and remedy

Track complaints, false positives, refund rates, unsafe listings, misleading ads, security events, appeal outcomes and demographic disparities where lawful and appropriate. Correct errors promptly and provide meaningful remedies.

Step 7: Govern change

A new recommendation model, market expansion, payment method, data source or influencer campaign may change the risk profile. Change-management procedures should require reassessment rather than assuming prior approval remains sufficient.

Applied case: The “ShopSphere” marketplace (illustrative)

Background

ShopSphere is a fictional global marketplace selling consumer electronics through independent merchants. It ranks listings using relevance, price, delivery speed, seller history and predicted conversion. It also sells its own branded accessories, operates a loyalty program and permits customers to post reviews and upload photographs.

Problem

A consumer group reports that counterfeit chargers are being sold under legitimate brand names. Sellers complain that ShopSphere’s own accessories receive preferential placement. The platform’s review system suppresses some negative reviews because an automated classifier labels them “abusive.” Meanwhile, the loyalty program shares purchase histories with an advertising partner, and the consent interface makes acceptance of personalized advertising more prominent than refusal.

Analysis

The counterfeit issue creates product-safety, intellectual-property and consumer-protection risks. ShopSphere’s role is more significant than that of a passive host because it controls ranking, payment, fulfillment and customer guarantees. It therefore needs effective seller screening, traceability, rapid notice-and-action and cooperation with rights holders and authorities.

Self-preferencing may create competition concerns, particularly if the platform uses non-public seller data to compete against merchants or manipulates ranking without disclosure. The review system raises procedural fairness and speech concerns: automated classification is useful for triage but should not make irreversible decisions without context-sensitive review and appeal.

The loyalty-program data sharing requires a clear purpose, appropriate legal basis, transparent notice and controls over the advertising partner. The consent design may be challenged as manipulative if refusal is materially more difficult or if personalized advertising is bundled with essential marketplace access without adequate justification.

Approach and solution

ShopSphere should establish a risk committee with legal, product, safety, privacy, competition and trust-and-safety representation. It should:

• verify high-risk sellers and require supply-chain documentation;
• use serial-number and brand-owner authentication for sensitive products;
• quarantine suspicious listings and preserve evidence;
• disclose material ranking factors and label paid placement;
• separate marketplace ranking from self-preferencing decisions;
• create human review and appeal for removed reviews;
• publish moderation and counterfeit-enforcement metrics;
• redesign consent so acceptance and refusal are equally clear;
• restrict advertising-partner data to documented purposes; and
• test outcomes for false removal, seller impact and consumer harm.

Outcome

In this illustrative scenario, the program reduces counterfeit exposure and improves review reinstatement accuracy, but it also increases operating costs and slows some listings. That trade-off is appropriate because speed and conversion are not the only measures of platform performance. Trust, safety, lawful competition and remedy are strategic assets.

Learning points

The case demonstrates that platform compliance is systemic. A marketplace cannot manage product safety, ranking, reviews, privacy and competition as isolated legal checklists. Technical architecture, commercial incentives and user remedies jointly determine the platform’s social impact.

Challenges and limitations

First, law develops unevenly across jurisdictions. A global interface may need localization of disclosures, consent, withdrawal, age assurance, taxation and complaint processes. Second, platform scale makes complete human review impossible, but automation introduces error and bias. Third, transparency can conflict with security or trade-secret protection; disclosure should be meaningful without revealing exploitable safeguards. Fourth, users may consent formally while lacking realistic alternatives, raising questions about power and fairness. Fifth, compliance metrics can become targets that obscure unmeasured harms. Organizations should combine quantitative indicators with qualitative investigation and stakeholder feedback.

Best-practice checklist for marketing managers

• Define the organization’s role in every digital relationship.
• Obtain legal review before launch in each material jurisdiction.
• Substantiate claims before publication and monitor influencers.
• Make prices, renewals, rankings, sponsorships and material limitations clear.
• Avoid manipulative interface patterns.
• Minimize data and control third-party SDKs and vendors.
• Build notice, explanation, appeal and remedy into moderation systems.
• Test algorithms for accuracy, discrimination and unintended incentives.
• Maintain records of consent, claims, decisions, complaints and corrective action.
• Treat compliance, safety and trust as product-design responsibilities rather than solely legal paperwork.

Chapter Summary

Digital commerce is a multi-party governance environment in which legal duties depend on function, control, data flows and jurisdiction. Online contracts require meaningful notice and assent; consumer interfaces must avoid deception and dark patterns. Marketplaces must address seller identity, product safety, ranking transparency, reviews, refunds and competition. User-generated content requires proportionate rules, notice-and-action systems, human oversight and appeals. Intermediary protections are conditional and do not remove every duty.

Advertising and influencer communications must be truthful, substantiated and clearly disclosed. Ad-tech creates complex data and accountability chains, making minimization, transparency, vendor governance and discrimination testing essential. Ethical platform governance extends beyond legal compliance by protecting autonomy, fairness, safety and accountability. An integrated risk framework—mapping roles and data, assessing harms, designing controls, testing systems, monitoring outcomes and providing remedies—enables marketing managers to govern digital ecosystems responsibly.

Key Terms

Platform: A service that facilitates interactions among two or more participant groups.

Marketplace: A platform that enables transactions between buyers and third-party sellers.

Network effect: An increase in service value associated with growth of a user group or related group.

Clickwrap: An online agreement accepted through an affirmative click or equivalent action.

Browsewrap: Terms alleged to bind users through mere website use and linked notice.

Dark pattern: An interface design that manipulates or unfairly steers user decisions.

User-generated content: Material created and submitted by users rather than solely by the service provider.

Intermediary liability: Legal responsibility associated with hosting, transmitting or facilitating third-party content or conduct.

Notice-and-action: A process for reporting, evaluating and responding to potentially unlawful content.

Content moderation: Rules and processes for reviewing, ranking, restricting or removing content.

Self-preferencing: Giving a platform’s own products or services preferential treatment.

Ad-tech: Technologies and intermediaries used to buy, sell, target, deliver and measure digital advertising.

Demand-side platform: Technology used by advertisers or agencies to purchase digital advertising inventory.

Influencer disclosure: A clear statement of a creator’s material relationship with a brand.

Behavioral advertising: Advertising selected using information about observed or inferred user behavior.

Data minimization: Limiting collection and use of data to what is necessary for a defined purpose.

Algorithmic bias: Systematic and unjustified differences in model performance or outcomes.

Platform governance: Rules, technical systems, enforcement, oversight and remedies governing a platform.

Appeal mechanism: A process allowing an affected person to challenge a platform decision.

Review Questions

5 Short Answer Questions

1. What is the difference between a linear commerce model and a platform commerce model?
2. Identify three features that influence the enforceability of an online contract.
3. What are dark patterns? Give two examples.
4. Why are appeals important in content-moderation systems?
5. Name four common risks in an ad-tech ecosystem.

5 Long Answer Questions

1. Explain how a marketplace’s ranking, payment and fulfillment functions may affect its legal and ethical responsibilities.
2. Compare clickwrap, sign-in wrap and browsewrap agreements and evaluate their principal risks.
3. Discuss the balance between intermediary liability, freedom of expression and user safety.
4. Explain why influencer marketing requires both disclosure and ongoing brand monitoring.
5. Develop an integrated compliance framework for a global mobile-commerce application.

3 Analytical / Application Questions

1. A platform’s algorithm removes 20% of negative product reviews but only 3% of positive reviews because negative language is more likely to be classified as abusive. Analyze the governance problem and propose controls.
2. Design a risk assessment for a campaign using location data, behavioral profiles and automated bidding. Identify legal, ethical and operational safeguards.
3. A marketplace promotes its own products above cheaper third-party alternatives while describing results as “best match.” Evaluate the consumer-protection, competition and transparency issues and recommend a response.

Multiple Choice Questions with Answers

Question 1

Which feature most clearly distinguishes a platform market from a linear commerce model?

A. The platform facilitates interactions among multiple participant groups

B. The platform always manufactures the products it sells

C. The platform eliminates the need for consumer-protection law

D. The platform can operate only through a physical store

Correct Answer: A. The platform facilitates interactions among multiple participant groups

Question 2

Which online contracting method usually provides the clearest affirmative evidence of assent?

A. Browsewrap

B. Clickwrap

C. An unlinked privacy notice

D. A banner advertisement

Correct Answer: B. Clickwrap

Question 3

Which practice is an example of a dark pattern?

A. Showing the total price before checkout

B. Providing an accessible cancellation button

C. Making refusal materially harder than acceptance

D. Explaining how ranking works

Correct Answer: C. Making refusal materially harder than acceptance

Question 4

What is a principal purpose of a notice-and-action system?

A. To guarantee that every reported item is removed

B. To provide a process for reporting and responding to potentially unlawful content

C. To replace all human moderation

D. To prevent users from appealing decisions

Correct Answer: B. To provide a process for reporting and responding to potentially unlawful content

Question 5

Which statement about influencer marketing is most accurate?

A. A brand has no responsibility for a paid creator’s communication

B. Material relationships should be disclosed clearly and prominently

C. Disclosure is unnecessary when the product is free

D. Only negative endorsements require disclosure

Correct Answer: B. Material relationships should be disclosed clearly and prominently

Question 6

What does self-preferencing generally mean in platform governance?

A. Allowing users to change their passwords

B. Giving a platform’s own products preferential treatment

C. Using contextual rather than behavioral advertising

D. Allowing sellers to appeal moderation decisions

Correct Answer: B. Giving a platform’s own products preferential treatment

Question 7

Which practice best reflects data minimization?

A. Collecting all available data in case it becomes useful

B. Retaining data indefinitely for possible advertising

C. Collecting and using only data necessary for a defined purpose

D. Sharing data with every advertising vendor

Correct Answer: C. Collecting and using only data necessary for a defined purpose

Question 8

Why is human review important in automated content moderation?

A. Automated systems cannot process any content

B. Human review can address context, language variation and high-impact errors

C. Human review guarantees that no unlawful content remains

D. Human review eliminates the need for written rules

Correct Answer: B. Human review can address context, language variation and high-impact errors

Question 9

Which is the strongest initial control for a high-risk marketplace product listing?

A. Removing all seller information

B. Seller verification and product traceability

C. Increasing the product’s advertising budget

D. Disabling customer complaints

Correct Answer: B. Seller verification and product traceability

Question 10

Which ethical principle concerns whether users retain meaningful control over material choices?

A. Autonomy

B. Non-maleficence

C. Interoperability

D. Market concentration

Correct Answer: A. Autonomy