Why European privacy rules are dictating the U.S. online experience

The endless cookie-consent notices that dominate many U.S. websites are a byproduct of the European Union’s privacy legislation, not domestic policy. Because the EU’s market is large and its rules are strict, global tech firms—including Google, Facebook and Amazon—have opted to redesign their services to meet GDPR requirements everywhere, a phenomenon scholars call the “Brussels Effect.” This practice exports European standards to American consumers, who see little debate in U.S. Congress about these rules.

Lawmakers are now considering adopting similar frameworks, such as the Digital Markets Act, which would limit how dominant platforms prioritize their own services, and the Digital Services Act, which imposes extensive transparency and oversight duties. Critics warn that the compliance costs could favor large incumbents and stifle innovation, while supporters argue the measures will boost competition. The debate highlights a broader question of whether the future of the American internet will be shaped by domestic democratic processes or by external regulatory pressure from Brussels.