Restricting Digital Marketing
Restricting Digital Marketing
Some rights reserved. This work is available under the Creative Commons Attribution-NonCommercial-
ShareAlike 3.0 IGO licence (CC BY-NC-SA 3.0 IGO; https://creativecommons.org/licenses/by-nc-sa/3.0/igo).
Under the terms of this licence, you may copy, redistribute and adapt the work for non-commercial purposes,
provided the work is appropriately cited, as indicated below. In any use of this work, there should be no
suggestion that WHO endorses any specific organization, products or services. The use of the WHO logo is
not permitted. If you adapt the work, then you must license your work under the same or equivalent Creative
Commons licence. If you create a translation of this work, you should add the following disclaimer along with
the suggested citation: “This translation was not created by the World Health Organization (WHO). WHO is not
responsible for the content or accuracy of this translation. The original English edition shall be the binding and
authentic edition”.
Any mediation relating to disputes arising under the licence shall be conducted in accordance with the mediation
rules of the World Intellectual Property Organization (http://www.wipo.int/amc/en/mediation/rules/).
Suggested citation. Restricting digital marketing in the context of tobacco, alcohol, food and beverages, and
breast-milk substitutes: existing approaches and policy options. Geneva: World Health Organization; 2023.
Licence: CC BY-NC-SA 3.0 IGO.
Third-party materials. If you wish to reuse material from this work that is attributed to a third party, such as
tables, figures or images, it is your responsibility to determine whether permission is needed for that reuse and
to obtain permission from the copyright holder. The risk of claims resulting from infringement of any third-party-
owned component in the work rests solely with the user.
General disclaimers. The designations employed and the presentation of the material in this publication do not
imply the expression of any opinion whatsoever on the part of WHO concerning the legal status of any country,
territory, city or area or of its authorities, or concerning the delimitation of its frontiers or boundaries. Dotted and
dashed lines on maps represent approximate border lines for which there may not yet be full agreement.
The mention of specific companies or of certain manufacturers’ products does not imply that they are endorsed or
recommended by WHO in preference to others of a similar nature that are not mentioned. Errors and omissions
excepted, the names of proprietary products are distinguished by initial capital letters.
All reasonable precautions have been taken by WHO to verify the information contained in this publication.
However, the published material is being distributed without warranty of any kind, either expressed or implied.
The responsibility for the interpretation and use of the material lies with the reader. In no event shall WHO be
liable for damages arising from its use.
Contents iii
Contents
Foreword . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . v
Acknowledgements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vii
Abbreviations. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . viii
Executive summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ix
1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1
2. Audience, scope and methodology. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2
3. Defining marketing, including cross-border marketing and digital marketing . . . . . . 4
3.1 How is marketing defined in this report?. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
3.2 Digital marketing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
4. Coordinating fragmented laws applicable to digital marketing. . . . . . . . . . . . . . . . . 12
4.1 Advertising laws and codes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
4.1.1 General advertising laws and codes....................................................................................14
4.1.2 Sector- and product-specific marketing laws and codes.................................................15
4.1.3 Standalone laws prohibiting specific advertising techniques: Spam control laws.....17
4.1.4 Digital marketing codes and guidance.................................................................................17
4.2 Consumer protection laws. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
4.3 Audiovisual, broadcasting and other media laws . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
4.4 Data protection laws. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
4.5 Digital markets laws. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
4.6 Observations and policy options. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
5. Defining an effective jurisdictional scope for regulation of digital marketing and
enforcement . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
5.1 The concept of jurisdiction. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
5.2 Jurisdictional rules in practice . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
5.3 Challenges and policy options. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
6. Restricting digital marketing to children and other vulnerable populations: targeting
and data protection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
6.1 Protecting children from accessing content: online
age-verification mechanisms. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
6.2 Protecting vulnerable groups from being reached by digital marketing: regulating the
collection, processing and use of personal data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
6.2.1 Defining vulnerable populations in the digital environment.............................................37
6.2.2 Limiting the collection and processing of personal data that may be used for
targeting................................................................................................................................................39
6.2.3 Limiting the use of personal data for targeted advertising .............................................39
6.2.4 Targeting marketing away from vulnerable populations .................................................40
Restricting digital marketing in the context of tobacco, alcohol, food and beverages, and breast-milk substitutes: existing approaches and policy options iv
Foreword
We live in an age of digital transformation nicotine products, comprehensive restrictions
where governments are increasingly called on marketing are essential to protect health.
upon to respond to and enable digital For others, such as alcoholic beverages and
transitions occurring within the economy unhealthy foods, we know that comprehensive
and society. These transitions create obvious restrictions are likely to have a larger impact
opportunities, such as to make health systems on protecting health than partial restrictions.
more efficient and sustainable, or to reach But irrespective of the level of health protection
large audiences with health campaigns and pursued, there are some common policy options
messages. But they also create and exacerbate for governments, including:
health risks, such as risks to children’s mental
and physical health, or the risk that we are • Coordinating product specific health laws
targeted with marketing of unhealthy products and their enforcement with more general
in a way and when doing so would maximize the marketing laws such as those on advertising,
possibility and ease of purchase. consumer protection, data protection, and
digital markets.
Like the economy and society, health promotion
and public health must also undertake digital • Giving careful consideration to the
transitions to maximize the opportunities and jurisdictional scope of restrictions in parallel
minimize the risks. This means translating with how compliance will be monitored and
existing public health approaches to the digital enforced.
environment and developing new approaches fit
for digital spaces. • Ensuring that (where comprehensive
restrictions are not in place) strong laws are
This publication takes a step in that direction by put in place to regulate targeted marketing,
describing the ways in which Member States can such as age verification requirements,
translate marketing restrictions to the digital prohibitions on collection or use of personal
environment. In this respect, World Health data for certain types of advertising
Organization has long recommended marketing (including where more general consent
restrictions in the contexts of tobacco and based approaches are used), prohibitions on
nicotine products, alcoholic beverages, foods and the targeting of vulnerable groups or even
beverages with respect to children, and breast- positive obligations to target any permitted
milk substitutes. But the question of how to advertising away from those groups.
implement these recommendations has become
more complex as digital media has grown and • Restricting influencer marketing (just as any
large online platforms have centered their other form of marketing is restricted) and
businesses around advertising, and specifically limiting user engagement techniques, such
around targeting of advertising to consumers as the ability of alcohol manufacturers to use
based on their activity online or personal data online posts by users in their own marketing
they have shared. or stimulate viral campaigns through user
engagement.
The good news is that there are policy options
available for governments and that many of • Adopting new monitoring techniques,
these are described in this publication. For including use of artificial intelligence to
some product categories, such as tobacco and supplement online inspections by humans,
and requiring online platforms and product those duties and enforcing the law. It is possible
manufacturers to disclose permitted for governments to do all of these things while
marketing. also respecting other rights, such as privacy
rights and the right to free expression. In fact, it
• An array of enforcement mechanisms, most is essential for governments to act using a
obviously to be applied to the advertisers / rights-based approach to keep pace with the
product manufacturers themselves, but also broader digital transformation while protecting
to online platforms and other actors in the public health.
marketing supply chain.
Acknowledgements
This publication was authored by Dr. Elisabet and Helena Wilson (Ministry of Health and
Ruiz Cairó, consultant, and Dr. Benn McGrady, Care Services of Norway), Monique Muggli
Head of Unit, from the Public Health Law (Campaign for Tobacco-Free Kids), Prof. Paula
and Policies Unit (LAW), Health Promotion O’Brien (Melbourne Law School, The University
Department. of Melbourne), Katherine Shats (UNICEF), and
Fiona Sing (University of Auckland).
At various stages of preparation, the publication
benefited from comments, discussions and WHO also recognizes the valuable
inputs from Ma Luján Abramo (Global Health contributions from colleagues across WHO: Dr.
Advocacy Incubator), Jorge Alday, Dr. Tom Eric Carlin, Dr. Nina Chad, Dr. Tim Chadborn,
Carroll, Trish Cotter, Dr. Alexey Kotov, and Dr. Katrin Engelhardt, Dr. Carina Ferreira-
Dr. Nandita Murukutla (Vital Strategies), Dr. Borges, Kathrin Hetz, Daniel Hougendobler,
Tazeem Bhatia, Sakhi Dodhia, Rachel Elsom, Daniel Hunt, Kritika Khanijo, Monika Kosinska,
Dr. Tharindu Fernando, Jennifer Garry, Clive Dr. Ruediger Krech, Alicia Nicolaï, Paba
Henn, Diya Mukherjee, and Casey Sharpe Piyarathne, Kathryn Robertson, Sebastian
(United Kingdom Office of Health Improvement Rositano, Dr. Juan Tello, Amber Van Den
and Disparities), Prof. Nicholas Carah (School Akker, Dr. Kremlin Wickramasinghe, Olga
of Communication and Arts, The University Zhiteneva, and the Legal Team from the WHO
of Queensland), Jeff Chester, Dr. Katharina FCTC Secretariat.
Kopp, and Dr. Kathryn Montgomery (Center for
Digital Democracy), Sandra Lárudóttir Gjernes
Abbreviations
AANA Australian Association of National Advertisers
AI Artificial intelligence
AiMCO Australian Influencer Marketing Council
ARB Advertising Regulatory Board of South Africa
ASA Advertising Standards Authority of the United Kingdom of Great Britain and
Northern Ireland
ASAS Advertising Standards Authority of Singapore
ASCI Advertising Standards Council of India
AVMS Directive EU Audiovisual Media Services Directive
CAP Code Code of Non-broadcast Advertising and Direct & Promotional Marketing
CETA EU-Canada Comprehensive Economic and Trade Agreement
CJEU Court of Justice of the European Union
CPC Consumer Protection Cooperation network
DMA EU Digital Markets Act
DMCA Digital Millenium Copyright Act of the United States
DSA EU Digital Services Act
EU European Union
FDA Food and Drug Administration
FTA Free trade agreement
FTC Federal Trade Commission
GDPR EU General Data Protection Regulation
ICPEN International Consumer Protection and Enforcement Network
ISBA Incorporated Society of British Advertisers
ISP Internet service provider
OECD Organisation for Economic Co-operation and Development
SCAP Singapore Code of Advertising Practice
TERM Tobacco Enforcement and Reporting Movement
TRIPS Agreement Agreement on Trade-Related Aspects of Intellectual Property Rights
UCPD EU Unfair Commercial Practices Directive
UN United Nations
UNICEF United Nations Children’s Fund
WHO FCTC WHO Framework Convention on Tobacco Control
WTO World Trade Organization
Executive summary
WHO guidance addresses
restrictions on marketing
(including digital marketing) in the
and robust restrictions or bans on alcohol
marketing.
contexts of tobacco and nicotine Prior to the internet, the technical difficulty
products, alcohol, unhealthy foods and of implementing marketing restrictions was
beverages, and breast-milk substitutes. relatively low. Traditional media (such as
newspapers, television and radio) was highly
concentrated, meaning that enforcement efforts
In the WHO Framework Convention on Tobacco could be focused on a limited set of actors in
Control (WHO FCTC), Parties recognize that a the marketing supply chain. The advertisers
comprehensive ban on domestic and cross- themselves, such as tobacco companies, often
border advertising, promotion and formed part of highly concentrated industries,
sponsorship would reduce the consumption of thereby limiting the number of actors against
tobacco products. The Action Plan to which marketing restrictions might be enforced.
Effectively Implement the Global Strategy to But the advent of digital media and new
Reduce the Harmful use of Alcohol as a Public marketing techniques has increased exposure
Health Priority proposes that Member States to marketing, increased the power of marketing,
implement comprehensive and robust and has resulted in Member States taking action
restrictions or bans on alcohol marketing. The to update marketing restrictions, monitor digital
Set of Recommendations on the Marketing of marketing and enforce restrictions.
Foods and Non-Alcoholic Beverages to
Children calls for global action to reduce the Digital marketing is pervasive. Display
impact on children of marketing of foods high advertising features prominently on websites.
in saturated fats, trans-fatty acids, free sugars Search engines make search ads appear.
or salt. The International Code of Marketing of Native ads, which are designed not to look like
Breast Milk Substitutes recommends commercial content, appear in online news
prohibiting marketing of breast milk and similar sites. Influencers offer product
substitutes to ensure the protection of endorsements through social media platforms
exclusive breastfeeding for the first six with differing degrees of disclosure regarding
months of life and continued breastfeeding of the commercial character of the endorsements.
24 months or beyond. The Set of Advertising features in apps, such that use
Recommendations on the Marketing of Foods of some apps is suspended while ads are
and Non-Alcoholic Beverages to Children calls displayed. Products are placed in online content,
for global action to reduce the impact on including content directed at children or to
children of marketing of foods high in which children are exposed. And online retail is
saturated fats, trans-fatty acids, free sugars or increasingly integrated with digital marketing.
salt. The Action Plan to Effectively Implement Through digital marketing, consumers are
the Global Strategy to Reduce the Harmful use therefore more frequently and intensively
of Alcohol as a Public Health Priority proposes exposed to advertisements than through
that Member States implement comprehensive marketing in traditional media.
The pervasiveness of digital marketing can be web search history, browsing history, use of
seen in Figure 1. apps and wearables such as smartwatches.
Digital marketing is also powerful. Digital The contexts in which marketing occurs, such
platforms such as social media platforms as on social media, can also differ substantially
facilitate user engagement and participation in from marketing in ‘traditional media’. This
unique ways. Marketing is targeted at recipients combination of targeting and context can lead
based on collection and use of their personal and recipients to view marketing and identify with it
other data, much of which has been gathered in personalized ways that differ from responses
in digital spaces such as through smartphones, to marketing in traditional media.
More than traditional marketing, digital marketing exposes consumers to advertisements frequently
and intensively through multiple channels.
Native ads are designed to not look like commercial content and appear on sites
like online news
In Member States, digital marketing is often • Establish mechanisms that better enable
regulated through a variety of laws under the marketing to be monitored in the online
supervision of multiple government agencies, environment, including dark and ephemeral
thus requiring legislative coordination. marketing.
Collectively, these laws contain many elements,
and often: • Delegate authority for enforcement and define
enforcement measures against unlawful
• Have a broad scope of application covering marketing practices.
all forms of digital marketing, including
influencer marketing, and technological Figure 2 summarises some of the functions of
innovations in marketing. laws regulating digital marketing.
marketing
influencer marketing, and
technological innovations
in marketing.
This publication examines how restrictions on enforcement authority to agencies other than
digital marketing are implemented by Member health agencies and respond to policy concerns
States as part of broader marketing restrictions, more general than marketing of the specific
describes current challenges specific to digital products mentioned.
marketing and provides policy options to be
considered in addressing those challenges. The involvement of different laws and
Policy options are summarized in Annex 1. authorities can result in gaps in the coverage
of laws, as well as gaps in monitoring and
There is no single, simple step Member States enforcement activities carried out by different
can take that will address the challenges government agencies. Each applicable law will
associated with digital marketing, and as is define different restrictions, impose different
the case with traditional marketing, there will sanctions in case of non-compliance, and assign
always be some gaps in implementation and authority to different agencies.
some level of non-compliance with restrictions.
Nonetheless, this publication has identified Legislative coordination is a policy option
policy options and approaches that Member available to Member States to close these gaps,
States can adopt to strengthen the design and and involves considering how laws restricting
implementation of restrictions. marketing of specific product categories can
be coordinated with other more general laws
Coordinating fragmented laws applicable to governing marketing to achieve a Member
digital marketing (Please refer to Section State’s policy goal. For example:
4.). At the national level, digital marketing
regulation is typically fragmented, as many Laws restricting marketing of specific product
pieces of legislation and government agencies categories can:
are involved. Some Member States have sector
specific restrictions on marketing in place to • Define forms of marketing that are prohibited
some degree, such as laws governing marketing or restricted with respect to specific product
of tobacco products, alcoholic beverages, foods categories or explicitly define forms of
and non-alcoholic beverages and breast-milk marketing that are allowed for specific
substitutes. The implementation of these laws product categories.
is typically assigned to health agencies such
as ministries of health or regulatory agencies, • Include cross references to general
although other actors may also be involved. marketing laws where appropriate to
establish restrictions.
But laws and rules applicable to digital
marketing practices can also be found in laws • Establish any rules specific to the product
or other instruments that are not specific category that enable health agencies to
to alcohol, tobacco, foods and non-alcoholic supervise the market and supply chain for
beverages or breast-milk substitutes, for the products in question, such as by:
example those governing advertising, consumer
protection, broadcasting, data protection or the • Requiring public disclosure of marketing
internet. These laws and rules are important by brands, manufacturers, distributors
components of some marketing restrictions in and retailers so as to facilitate monitoring
that they regulate digital marketing, prohibit of marketing.
specific advertising practices, impose disclosure
obligations, regulate targeted advertising and • Using supply side controls such as
the use of profiling techniques for advertising licensing measures or strict liability
purposes, and grant strengthened protection to provisions to place responsibility on
children in advertising. These laws also allocate
brands, manufacturers, distributors and In legal terms, countries have the policy
retailers, where appropriate. option to legislate, adjudicate disputes and
sanction digital marketing within their scope of
• Allowing consumers, civil society jurisdiction to cover:
organizations and economic operators
(usually competitors) to bring actions • actions by their nationals
for violation of sector specific marketing
restrictions before national courts. • actions occurring inside their territory
• Establish the jurisdictional reach (the • actions that have effects or likely effects in
geographic scope) of sector specific their territory
marketing restrictions.
Member States also sometimes define a
• Allocate enforcement authority among jurisdictional scope that is more limited than
government agencies, by means such as this, but that can be effectively enforced by
using cross-references to other legislation public authorities, such as to cover actions
to allocate enforcement authority to non- targeting consumers in their territory but not
health agencies, where appropriate. all actions that have effects in their territory.
Although all actors involved in digital marketing
• General marketing laws can: (brands, advertising agencies, websites, search
engines, social media platforms, influencers,
• Restrict or prohibit the marketing of specific distributors, retailers) may be liable for
product categories. violations of the law, laws and enforcement
actions often focus first on those actors
• Include cross references to sector specific directly linked to the products themselves
laws to enable agencies with enforcement (manufacturers, distributors, retailers).
powers to enforce those sector specific These actors often have assets located in the
restrictions through marketing laws. jurisdiction, manufacture, import or distribute
the products posing risks to health, and fall
As this suggests, health agencies can take an within the oversight of health agencies. Put
important first step by considering how sector differently, there are often actors within a
specific laws interact with other relevant jurisdiction against which the laws can be
laws governing digital marketing and move enforced.
towards overcoming any challenges posed by
fragmentation. Restricting digital marketing to children and
other vulnerable populations (Please refer to
Defining an effective jurisdictional scope for Section 6.). Comprehensive product-specific
regulation of digital marketing and enforcement restrictions on marketing are likely to cause
(Please refer to Section 5.). Questions often the greatest reduction in exposure of children
arise concerning whether and how a country and other vulnerable populations to digital
has jurisdiction over marketing in digital marketing.
environments. This concern results from the
cross-border nature of digital marketing, as Where comprehensive restrictions are not
brands, ad agencies, publishers (websites, in place, protecting vulnerable populations,
search engines, social media platforms, including children, is a challenge in the
influencers) and customers are often established regulation of digital marketing. In the context
in different countries. of partial restrictions, requiring effective age-
In the absence of a ban on targeted advertising • Require that advertisers proactively target
of specific product categories, countries policy advertising of specific product categories
options include: away from defined vulnerable populations.
Digital
marketing to
children and
vulnerable
populations
Comprehensive restriction
on marketing of specific
product categories
In the absence of
comprehensive
restriction
Partial restrictions
Influencer
marketing
and user
engagement
Comprehensive restriction
on marketing of specific
product categories
In the absence of
comprehensive
restriction
Partial restrictions
Monitoring approaches
include:
Enforcing digital marketing rules (Please refer functions to Ministries of Health and to other
to Section 8.). Enforcement measures relating to government entities, with a clear separation of
digital marketing restrictions are diverse. These functions and coordination mechanisms.
include voluntary measures adopted by online
platforms, tools established in industry self- Options for enforcement procedures include
regulatory instruments and sanctions provided allowing a variety of information sources
by law. In order to facilitate enforcement, Member that can constitute a basis for investigation
States can allocate appropriate enforcement and enforcement, granting authorities broad
investigative powers, and granting legal standing measures include automated preventive
to consumers, civil society organizations and warnings, warning letters, content moderation
economic operators to bring actions for violation obligations, orders for amendment or removal of
of digital marketing rules. Countries may also marketing, civil or criminal liability, and blocking
consider establishing an administrative dispute and filtering measures, amongst others. Figure
settlement mechanism where appropriate. 6 summarizes the enforcement measures and
procedures.
Enforcement measures can be imposed against
all actors in the marketing supply chain including In some instances, cross-border cooperation on
upon brands, online platforms and/or influencers. enforcement matters can be useful to ensure the
They can be adopted before the product is effectiveness of enforcement measures through
marketed as preventive measures, or after the entire marketing supply chain.
publication as reactive measures. Enforcement
Enforcement requires:
Enforcement Enforcement
measures procedures
Legal considerations in restricting digital Sector specific marketing restrictions have been
marketing (Please refer to Section 9.). National implemented in many countries that comply
constitutions and legislation, international with these domestic and international legal
human rights law and international trade obligations. Any prior litigation that Member
agreements all establish legal duties, rights and States have had with respect to marketing
restrictions on government action that may be restrictions may be relevant in designing and
relevant to controlling digital marketing. implementing restrictions on digital marketing.
Marketing restrictions will generally be lawful
In designing and implementing marketing if the measures are non-discriminatory and
restrictions governments may need to consider, appropriate and necessary to attain the public
in particular, their duty to protect the right to health objectives pursued, proportionate to
health, food, privacy, consumer protection and those objectives, and if they provide adequate
children’s rights. However, they may also need procedural safeguards. A government’s legal
to consider limits imposed by the freedom of position may be strengthened by, among other
speech, the freedom to conduct a business, things, establishing clear health objectives and
the right to property and commitments and collecting evidence of the risks associated with
exemptions provided in trade agreements, while digital marketing (exposure, power, consumer
keeping in mind that those rights and freedoms perceptions and behaviour) and the impact of
are not absolute and can ordinarily be restricted any restrictions.
for public health reasons.
1. Introduction
WHO guidance addresses
restrictions on marketing
(including digital marketing) in the
Digital marketing is often regulated through a
variety of laws under the supervision of multiple
government agencies, thus requiring legislative
contexts of tobacco and nicotine coordination. These laws typically:
products, alcohol, unhealthy foods and
beverages, and breast-milk substitutes. • Have a broad scope covering all forms
of digital marketing and allowing for
technological innovation.
The WHO guidance on marketing restrictions
and the contexts in which that guidance is set • Define a jurisdictional scope (the geographic
differs across each of these product categories. scope of restrictions or prohibitions), enabling
But digital marketing has become increasingly enforcement within that scope.
important to each product category because
it increases the power of marketing through • Regulate the use of commercial user-
consumer targeting and user engagement generated content in digital marketing.
techniques and increases exposure to marketing
because of how pervasive marketing is in digital • Restrict targeting techniques in specific
environments. contexts where marketing is permitted.
There is no cross-cutting WHO guidance on how • Establish mechanisms that better enable
to restrict digital marketing. This publication marketing to be monitored in the online
seeks to fill that gap by describing: environment, including dark and ephemeral
marketing.
• how marketing, including digital marketing, is
typically regulated at the national level; • Delegate authority for enforcement and define
enforcement measures against unlawful
• challenges posed by digital marketing, marketing practices.
monitoring compliance with the restrictions
and enforcing them; By describing these practices and policy options,
this publication provides information on the
• policy options available to Member States; and question of how to restrict digital marketing.
This publication describes how governments
• legal considerations that Member States may have and can restrict digital marketing
wish to take account of in policy design and without prescribing or recommending a single
implementation. generalizable approach, or set of approaches, for
all Member States to follow.
Member State may differ depending Finally, comparative legal analysis is used to
on domestic circumstances, including describe legal considerations for governments
priorities and capacities. The publication when restricting digital marketing. This
is primarily aimed at government analysis draws on case law from different
officials designing or implementing jurisdictions to consider the potential legal
marketing restrictions, including policy challenges to restrictions on digital marketing
and legal officers. and the legal considerations governments may
wish to consider.
Comparative legal analysis is the primary Notably, this publication does not evaluate the
methodology underpinning this publication. evidence of the risks posed by digital marketing
This methodology involves comparing laws to health, or the evidence of the impacts of
and legal approaches to restricting digital restricting digital marketing, or of different
marketing in different jurisdictions in order to approaches to restricting digital marketing.1
describe the most prominent legal approaches. These are empirical questions beyond the scope
This comparison and analysis are carried out of this publication.
point-by-point to produce a description specific
to a given point or issue. The most prominent This publication does not seek to extend or
approaches are highlighted, meaning that the alter the scope of existing WHO guidance on
methodology favours presentation of common restricting marketing. Nor does this publication
approaches over presenting and considering change the media neutrality of existing WHO
every approach. Similarly, the methodology guidance on restricting marketing. WHO
groups issues for analysis, rather than purely guidance (and legal instruments) on marketing
describing country approaches side-by-side. of tobacco and nicotine products, alcoholic
beverages, unhealthy foods and beverages to
Comparative legal analysis is supplemented children, and breast-milk substitutes, apply
with legal reasoning by analogy. This involves irrespective of the medium through which
drawing on analogous laws from other marketing is transmitted. The purpose of
domains, such as regulation of gambling this publication is not to suggest that digital
advertising or restrictions on digital content, in marketing should be restricted above and
order to analyse their relevance and potential beyond other media. Rather, this publication
1 Evidence has however been evaluated in other WHO documents on specific risk factors; see Scope and
impact of digital marketing strategies for promoting breast-milk substitutes. Geneva: World Health
Organization; 2022 (https://www.who.int/publications/i/item/9789240046085, accessed 16 March 2023);
Digital marketing of alcohol: challenges and policy options for better health in the WHO European Region.
Copenhagen: WHO Regional Office for Europe; 2021 (https://apps.who.int/iris/handle/10665/350186,
accessed 16 March 2023).
seeks to assist Member States to address the by their nature, purely voluntary approaches
reality that restrictions on digital marketing that are not enforced through law do not apply
often lag behind restrictions on other media consistently across the marketing supply chain,
in the sense that comparable restrictions are leaving space for economic operators to opt in
either not legislated, that digital environments or out of the restrictions. With this in mind and
are not monitored in a comparable way, or recognizing that the purpose of this publication
restrictions are not enforced as effectively as is to support governments in restricting digital
for other media. marketing, the focus is on legislation, regulation,
monitoring and enforcement. In short, the goal
Similarly, this publication does not seek to of this publication is to illustrate how marketing
alter WHO guidance on mandatory versus restrictions can be legislated, regulated,
voluntary approaches to restricting marketing. monitored and enforced across a range of
Nonetheless, it is worth observing that product categories in the digital environment
approaches enforced through law and applied and to present these as policy options for
to all actors in the marketing supply chain are Member States to consider in their specific
designed to regulate actors in the marketing national contexts.
supply chain in a consistent way. In contrast,
3. Defining marketing,
including cross-border
marketing and digital
marketing
T here is no uniform definition of
marketing, cross-border marketing,
or digital marketing within WHO. These
concepts are defined in this report by
reference to several WHO instruments
and reports.
Click to view
WHO Framework The FCTC does not use the term “marketing”.
Convention on Tobacco
Article 13 of the WHO FCTC requires Parties to undertake a
Control (WHO FCTC)
comprehensive ban on “tobacco advertising, promotion and
sponsorship”.
Article 1(c) of the WHO FCTC defines tobacco advertising and promotion
as “any form of commercial communication, recommendation or action
with the aim, effect or likely effect of promoting a tobacco product or
tobacco use either directly or indirectly”.
Article 1(g) of the WHO FCTC defines tobacco sponsorship as “any form
of contribution to any event, activity or individual with the aim, effect or
Click to view likely effect of promoting a tobacco product or tobacco use either directly
or indirectly”.
Marketing under the WHO FCTC can be understood as comprising all of
the above-mentioned elements.
Click to view
Marketing is therefore characterized by three undertaken via written or oral messages, via
main elements: traditional or modern media platforms, and
via advertising, promotion or sponsorship
1. It includes any form of commercial activities.
communication: marketing activities can be
2. It has as its aim, effect, or likely effect 3. Marketing can aim at advertising a specific
increasing the recognition, appeal and/or product, normalising the product category
consumption of a product, a service or a brand: more generally, or increasing brand
the intention is not a necessary element for a recognition for brands that include several
message to constitute marketing, and even the products in brand portfolios.
hypothetical effects of a communication can
lead to a message being defined as marketing.
DSP
SSP
Ad exchange
(Bidding)
Supply Side Ad server Publisher
(website, online
Platform platform, search
engine, etc.)
The actors in the digital marketing supply chain advertisers fall within both supply chains and
cannot be understood without considering digital marketing restrictions can often be
those in the product supply chain, which enforced against them directly.
are summarized in Figure 8. For example,
Manufacturers use the raw materials to manufacture the final product that will
be distributed, marketed and ultimately sold to customers.
Distributors are persons or businesses that ensure that the final goods are
distributed to retailers. They often promote the products too.
Customers are the final recipient of the product; those who buy goods or services.
Users are persons that are active in online settings (websites, search engines, online
platforms, etc.) either to post online content, to interact with content posted online
(liking and sharing content), or just to see that content without any interaction.
Brands a brand is a name, symbol or other marker that distinguishes one business’s
good or service from others. The (tobacco/nicotine/alcohol/food and beverages/
breast-milk substitutes) brands are usually responsible for the manufacturing of the
product. However, brands may also be responsible both for the production and the
distribution of the product, or they may also conduct the sale of the product. The term
“brand” can therefore refer to manufacturers, distributors and/or retailers. Brands
may also license production or distribution to third parties.
WHO instruments and reports addressing WHO documents refer to marketing techniques
marketing have not addressed digital marketing that use digital technologies, although without
in a comprehensive way. As Table 2 illustrates, precisely defining this notion.2
WHO FCTC (2005) Article 13(4)(e) of the WHO FCTC requires Parties to comprehensively
ban tobacco advertising, promotion and sponsorship on radio, television,
print media “and, as appropriate, other media, such as the Internet”.
The WHO FCTC guidelines for implementation of Article 13 state that a
comprehensive ban on tobacco advertising, promotion, and sponsorship
should cover traditional media “and all media platforms, including
Internet, mobile telephones and other new technologies as well as films”.
The WHO FCTC requires Parties to ban “advertising, promotion and
sponsorship originating from [their] territory with cross-border effects”
Click to view
(out-flowing marketing) (1). The WHO FCTC Article 13 Guidelines adopt
a broad understanding of what constitutes cross-border out-flowing
marketing. It includes, for example:
• printed publications targeting or used in other jurisdictions and
originating from the Party’s territory;
• internet communications, whether the material is targeting persons
outside or inside the Party’s territory; or
• broadcasted material that could be received in another jurisdiction (2).
The WHO FCTC also notes the sovereign right “to ban those forms of
cross-border tobacco advertising, promotion and sponsorship entering
their territory” (in-flowing marketing) (3). In-flowing marketing includes:
• publications printed or produced in other jurisdictions and entering
the territory of a Party or targeting persons in that Party’s territory;
• all internet content that is accessible within a Party’s territory; and
• any audio, visual or audiovisual material received in a Party’s
territory, whether it targets persons in that territory or not (4).
2 An exception can be found in the 2022 WHO report “Scope and impact of digital marketing strategies for
promoting breastmilk substitutes”, where digital marketing is defined as “promotional activity, delivered
through a digital medium, that seeks to maximize impact through creative and/or analytical methods”.
However, this definition is not comprehensive either, as it does not define the methods that are used in
digital marketing and does not refer to data processing. The 2022 WHO Europe report “Digital marketing of
alcohol: challenges and policy options for better health in the WHO European Region” does not define digital
marketing but provides several examples of techniques that fall within the scope of digital marketing, such as
digital sponsorship, viral content, augmented reality, native advertising, online contests, influencer marketing,
or localized digital marketing, amongst others.
Click to view
International Code of The Code bans advertising or other form of promotion of breast-milk
Marketing of Breast-Milk substitutes to the general public, but does not directly address specific
Substitutes (1981) strategies used in digital marketing.
Following a mandate from the World Health Assembly in 2020, it has
however been exposed that digital marketing is extensively used for
the promotion of breast-milk substitutes (5).
Click to view
Digital marketing is thus addressed differently digital marketing. However, some examples of
in each of the instruments described above. marketing and digital marketing techniques that
Approaches to digital marketing will continue will be mentioned in this report are provided in
evolving in the future, making it difficult to the following table.
define a comprehensive list of different types of
Name Definition
4. Coordinating fragmented
laws applicable to digital
marketing
M arketing practices are generally
not regulated by a single piece of
legislation. Instead, rules applicable to
are also relevant. This section describes each
of these bodies of law to illustrate how some
jurisdictions have regulated this area. As is
marketing practices are usually illustrated below, the diversity of laws involved
incorporated into consumer protection necessitates legislative and institutional
laws, to media (broadcasting) laws or coordination.
laws specific to tobacco control,
alcohol or foods and beverages The following figure depicts relevant laws that
(sector-specific laws). frequently regulate digital marketing practices
in Member States. These laws are described in
the following sub-sections. Member States can
When examining digital marketing, rules assess what their current legal environment
applicable to data protection and to digital is in this regard using the Legal Environment
markets, telecommunications, or the internet Assessment provided in Annex 2.
• Restrict the advertising of specific products. • United Kingdom: United Kingdom Code of Non-
For example, Viet Nam’s advertising law bans Broadcast Advertising, Sales Promotion and
the advertising of cigarettes, some alcoholic Direct Marketing (CAP Code), established by the
beverages, breast-milk substitutes for children Advertising Standards Authority (ASA) (28);
under 24 months old, dietary supplements
for children under 6 months old and artificial • Singapore: Singapore Code of Advertising
feeding bottles and pacifiers (20). Practice (SCAP), established by the Advertising
Standards Authority of Singapore (ASAS) (29);
• Impose or prohibit the use of disclosures or
claims for certain advertisements. For example, • Australia: Australia Association of National
the Advertisement Law of the People’s Republic Advertisers (AANA) Code of Ethics (30);
of China (PRC Advertisement Law) requires
advertising for prescribed drugs and medical • South Africa: Advertising Regulatory Board
devices to include certain health claims (21). (ARB) Code of Advertising Practice (31);
• Provide an enhanced level of protection for • India: Advertising Standards Council of India
vulnerable populations, such as children (22). (ASCI) Code for Self-Regulation in Advertising
(32); and
Advertising laws do not typically refer to digital
marketing, but they have in practice been applied
• Spain: Code of Advertising Behaviour the Chilean Law on the nutritional composition of
Autocontrol (33). foodstuffs and their advertising (36).
All these codes require advertising to be honest, These laws regulate the advertising of specific
decent, and truthful (34). Other typical provisions products in at least three ways:
in advertising codes concern the identification of
advertisements to enable consumers to recognize • They plainly prohibit the advertising,
them, the prohibition of misleading or harmful promotion and sponsorship of that product
advertising, or specific rules for advertising aimed category. This is typically the case with
at children. tobacco products (37) but is also found in
some alcohol control laws (38) and breast-
milk substitutes laws (39).
4.1.2 Sector- and product-specific marketing
laws and codes • They strictly regulate such advertising by
requiring or prohibiting the use of health
In the absence of general advertising laws, some claims or warnings,3 prohibiting certain
jurisdictions adopt laws regulating marketing messages,4 providing strengthened protection
in specific sectors or with respect to specific for children,5 or restricting digital marketing
product categories. Under a broader approach, explicitly.6
jurisdictions can regulate the marketing of all
health-related products and services. Mexico has • They explicitly define what advertising is
followed this path by adopting the Regulation permitted by requiring, for example, that
of the General Law on Health in Matters of advertising may only contain factual or
Advertising (35). Under a narrower approach, informative data and objective qualities.7
jurisdictions regulate the marketing of one product
category. Examples of this model are the European
Union (EU) Tobacco Advertising Directive and
3 For example, the Mexican General Health Law requires the use of health claims in advertising, both in
traditional and digital media; in Chile, the Law on the composition and advertising of foodstuffs requires all
food advertising in mass media to include a health warning promoting a healthy lifestyle; in Viet Nam, the
Decree on nutritious products for infants, feeding bottles and teats requires complementary foods for under
24 month infants to include the claims “breast milk is the best food for health and all-sided growth of infants”
and “the product is a complementary food and may be used as a supplement to breast milk for infants over 6
months”(Art. 6(2)(a) and (b)).
4 In Chile, the law on the composition and advertising of foodstuffs prohibits breast-milk substitutes advertising
that disincentivizes breastfeeding.
5 In Chile, the law on the composition and advertising of foodstuffs prohibits the advertising of food high
in calories, fat, sugar or salt in schools; the offer of such products for free to children under 14; their
advertising if targeted at children under 14; or the use of promotional elements such as toys, accessories
or other incentives.
6 Finland’s Alcohol Control Act incorporates special regulations on social media alcohol advertising; see
Section 7.
7 For example, in France, alcohol advertising can only describe the alcohol content, origin, name, composition
of product, name and address of manufacturer, agent and stockists, the method of production, methods
of sale, and methods of consumption. Alcohol advertising can also refer to production areas, awards
obtained, designations of origin or geographical indications, and objective references related to the
product’s colour, smell and taste; see Code de la santé publique (https://www.legifrance.gouv.fr/codes/ id/
LEGITEXT000006072665, accessed 16 March 2023), Art. 3323-4.
In some jurisdictions where marketing is not distributors, importers and any other seller of
comprehensively restricted, law requires tobacco products (41).
manufacturers to provide clear and transparent
information about their marketing campaigns.8 Typically, sector specific laws such as those
For example, in the United States, tobacco governing tobacco advertising are set out in
manufacturers are obliged to report on their legislation governing that sector more broadly,
domestic advertising and promotional activity such as a national tobacco control law. Unlike
to the Federal Trade Commission (FTC), which laws governing advertising more broadly, sector
then publishes regular reports aggregating all specific laws of this type usually sit within the
information received (40). In Nigeria, a disclosure domain of ministries of health or other health-
obligation applies to manufacturers, wholesale related agencies.9
Beyond formal legal instruments, some bodies that a media service code may be made to
have also adopted codes to regulate advertising ensure that commercial communications protect
practices of specific products including, but not the interests of the audience. This may result
limited to, those that are harmful to health (42). in prohibitions or restrictions of commercial
communications relating to foods or beverages
The adoption of such codes may be contemplated of public concern in respect of the general
in the law itself. For example, the Online Safety public health interests of children, in particular
and Media Regulation Bill in Ireland provides infant formula, follow-on formula, or foods
8 This obligation applies to tobacco products, for example, in Canada, Ireland, Israel, Nigeria, Thailand, and the
United States.
9 Note that health-related agencies may operate under ministries other than the Ministry of Health. For
example, food safety authorities sometimes sit within ministries of agriculture or trade.
and beverages which contain fat, trans-fatty messages that will be sent; requester’s name
acids, salts or sugars (43). It also provides that and contact information (physical mailing
commercial communications relating to those address and either a telephone number,
products may be prohibited or restricted in an e-mail address or a website URL); a
programmes or user-generated content through statement that the recipient may unsubscribe
an online safety code (44). Where industry at any time (50).
codes are adopted, linking them to laws and/
or making them enforceable through legislation • Requirement of clear identification of the
is a policy option for governments to consider. message. For example, the Singapore Spam
The merits of this approach may depend on a Control Act requires all unsolicited commercial
range of factors, including the extent to which communications to be titled “ADV”, so that
industry codes are government led and capable recipients know they are an advertisement
of government objectives, such as a high level before opening the message (51).
of health protection. Where this is not the case,
governments might opt to regulate marketing • Availability of a facility to unsubscribe
directly through law. at any moment. For example, in Chile,
SMS advertising needs to include a quick
mechanism for recipients to be able to
4.1.3 Standalone laws prohibiting specific request not to receive such commercial
advertising techniques: Spam control laws communications (52).
10 For example, South Africa includes provisions on unsolicited direct marketing via e-mail or SMS in its data
protection legislation; Chile includes such rules in its consumer protection law.
Region: EU
1) a list of unfair commercial practices that are always prohibited (blacklisted practices); and
2) a prohibition of any other commercial practice not included in the list that is misleading or
aggressive.
The UCPD contains rules on two elements that can have implications for digital marketing.
• Disclosure obligations: The blacklist of unfair commercial practices includes using editorial content
in the media to promote a product without making that clear (68), providing search results in
response to a consumer’s online search query without clearly disclosing any paid advertisement
or payment for achieving higher ranking of products (69), falsely claiming that a product cures
illnesses, dysfunction or malformations (70), or hidden advertising (71). Social media platforms
present increased risks for hidden advertising, native advertising, or problematic algorithmic
practices. Therefore, all forms of commercial communications in social media must be clearly
disclosed to avoid falling within one of those categories (72). The failure to disclose information
may also lead to misleading advertising. For example, marketplaces must clearly inform whether
the third party offering the product is a trader or not (73). Online interfaces showing several
search results must inform about the parameters determining the ranking of products and the
relative importance of those parameters (74). As influencers fall within the notion of “trader”
under the UCPD, they also have an obligation to declare any commercial practice and make clear
that a brand has paid for the promotion of a product (75). However, the UCPD does not impede
influencers from conveying their personal opinion on unhealthy products if there has not been
any agreement with the producer (76).
• Prohibition of unsolicited messages or exhortation: the UCPD prohibits persistent and unwanted
solicitations (77), or direct exhortation to children to buy advertised products (78), Displaying
advertisements in the inbox of an email service in a form similar and in the same position as
real emails falls within the concept of persistent and unwanted solicitations if the display of the
advertising is frequent and if the consumer has not given consent (79).
Argentina EU
The broadcasting media law The audiovisual media law is
incorporates sector specific used to establish any applicable
restrictions by reference, thereby restrictions on marketing in the
bringing those restrictions within audiovisual context
the scope of the broadcasting
media law for enforcement
and other purposes
11 Enhanced protection for sensitive personal data is granted in the EU, Thailand or Brazil, for example.
12 Each of the conditions are typically provided in the law. For example, in the GDPR, consent has to cover all
processing activities carried out for the same purpose, the data subject has to be informed of the existence
of the processing operation and its purposes, and consent should be given by an unambiguous indication of
the data subject’s agreement to the processing of personal data, such as a written or oral statement, but not
a pre-ticked box or inactivity. The data subject also needs to be informed of the existence of profiling and the
consequences of such profiling.
Meta’s reasoning. They decided that Meta is children and adolescents’ personal data must
required to obtain consent to provide targeted take account of their best interests. This results
and behavioural advertising. Similarly, in July in the following requirements (103).
2022, the Italian authority issued a formal
warning against TikTok for basing t11 Enhanced
protection for sensitive personal data is granted
in the EU, Thailand or Brazil, for example. • Specific consent must be granted by at
rocessing of personal data for the purposes of least one parent or responsible person.
targeted advertising on its legitimate interests
and not on consent. The Italian authority was • The controller must publish information
also concerned by the protection of children, on the kind of data collected, their use,
as difficulties in implementing effective age and the procedure to exercise data
verification mechanisms in the platform entailed rights.
the risk that personalized advertising would
be served to children without consent (99). A • Information on data processing must
limitation of the extent to which data protection be published in a simple, clear and
laws restrict targeting of digital marketing accessible manner.
is that the obtaining consent is sufficient to
process data for marketing purposes. Individual • Controllers cannot subject games, apps
users may receive numerous consent requests, or other activities to more children
making their acceptance routine and thus and adolescents’ data processing than
limiting the protective purpose of legislation. strictly necessary.
13 The age covered by child-protection clauses varies from one law to the other. For example, Australia
defines rules for children under 15 years old, the EU grants strengthened protection to children under 16
years old, and Thailand establishes two sets of rules (minors and under 10 years old).
Box 2. Case study: the EU digital markets and digital services acts
Region: EU
In the EU, two parallel instruments have been adopted, the Digital Markets Act (DMA) and the Digital
Services Act (DSA) (104). Both instruments introduce rules for digital services including digital
advertising.
The DSA primarily concerns online intermediaries and platforms – such as online marketplaces, social
networks, content-sharing platforms or app stores. The DMA governs gatekeeper online platforms
providing core platform services. These are digital platforms that function as bottlenecks between
businesses and consumers for important digital services, such as search engines or social networks
with a strong turnover or capitalization.14
The DMA complements the GDPR, as it adds new consent requirements for the processing of personal
data (105). It also adds disclosure obligations by requiring gatekeepers to submit to the European
Commission an independently audited description of any techniques of profiling of consumers that the
gatekeeper applies in its core platform services. An overview of such description should be publicly
available (106).
The DSA has a more direct impact on digital marketing by regulating two main aspects. On the one
hand, it provides detailed rules for online platforms to make users aware that they are viewing
advertising (107). Article 24 requires online platforms engaging in advertising to disclose the authors
and the parameters used to determine the recipient of the advertisement. Very large online platforms
(as defined in Article 25(1) of the DSA) that use recommender systems should display the parameters
used for such systems (108). Very large online platforms that display advertising should also create
and make publicly available a repository containing information on the advertisement displayed in
their interfaces. Such repository should provide whether the advertisement was targeted at specific
categories of recipients and, if so, the main parameters used for the targeting (109).
On the other hand, the DSA limits targeted advertising. Providers of online platforms cannot present
advertising based on profiling when they are aware with reasonable certainty that the recipient of the
service is a minor (110). Moreover, they cannot present advertising based on profiling conducted using
sensitive data (111).
14 Under the DMA, a gatekeeper is a provider of core platform services that serves as an important gateway for
business users to reach end users, enjoys a durable position in its operations and has a significant impact in
the internal market (Art. 3).
In the United States, a Digital Advertising Act Google, Meta or Amazon to divest significant
was proposed in May 2022 (112). This proposal portions of their advertising businesses (113).
regulates competition and anticompetitive This would result in companies collecting and
practices among digital advertising platforms, processing a more limited amount of data and
rather than data protection and targeting therefore not being able to fully personalize and
practices. Digital advertising is dominated by target their advertising.
a few undertakings that are active in all sides
of the supply chain. The proposed Act would Similar legislation has been proposed in
prohibit large digital advertising companies other jurisdictions, such as Republic of
from owning more than one part of the digital Korea and Australia (114). Rules regulating
advertising ecosystem, which is comprised of digital markets therefore have the potential
the digital advertising exchange, the sell-side to limit targeted advertising and strengthen
brokerage, the buy-side brokerage, and the disclosure obligations.
buyer or seller of digital advertising space.
The Digital Advertising Act would also require A recent development in the regulation of
medium and large digital advertising companies digital markets concerns the adoption of
to abide by several obligations to protect their content moderation laws, which are examined
customers and competition. If adopted, this in section 8.
instrument would require companies such as
Strengthen existing laws applicable to Where industry codes are in place, link them
marketing (including consumer protection, to formal laws to make them enforceable.
5. Defining an effective
jurisdictional scope for
regulation of digital
marketing and enforcement
D igital marketing often involves more
than two jurisdictions, as brands,
advertising agencies, publishers and
regulate digital marketing? Who can
investigate and gather information? Who
can impose sanctions and enforce those
customers may all be established in sanctions? Governments have adopted
different territories. This characteristic different approaches to this issue, as the
raises jurisdictional concerns: who can following sub-sections reveal.
The advertisement is targeted at an audience prohibits all unhealthy food advertising targeting
comprising customers residing in several children under 12. The cereal manufacturer is
countries. The advertisement has, in particular, found to have violated the law and is ordered to
reached citizens of country C, which bans take down the campaign, publish a corrective
alcoholic beverage advertising. Can a court statement warning against the impact of
from country C adjudicate a dispute about unhealthy food, and pay a fine. The cereal
the compliance by the alcoholic beverages manufacturer does not follow the required
manufacturer with the law? actions. Can the authorities of country B enforce
these sanctions against company A? Otherwise,
Jurisdiction to enforce: when are authorities are there any other mechanisms to implement
competent to enforce sanctions imposed for a such sanctions?
failure to comply with marketing regulation?
The scenarios above underline some of the
The third type of jurisdiction defines the limits on questions that can arise when adopting and
the executive branch of government responsible implementing legislation in a digital context, as
for implementing the law. Enforcement actions take place in several jurisdictions and
jurisdiction in international law is almost the question of what authorities are competent
exclusively territorial. The police or similar to address arises. While the three categories of
forces may only operate within the limits of their jurisdiction are distinct, laws need to address all
territory, in the absence of an authorisation from of them in their provisions, to avoid situations
other States or a special permissive rule under where the law defines a number of prohibited
international law (116). practices but does not grant the necessary
powers to public authorities to implement,
Example: monitor and enforce the rules. It is thus relevant
to describe if and how different countries have
A cereal manufacturer established in country A approached this question. This section examines
has launched an advertising campaign on social the jurisdiction to regulate and adjudicate. The
media. This campaign targeted children aged jurisdiction to enforce is addressed in Section 8.
5-10, in violation of country B’s legislation, which
Jurisdictional
scope includes:
Jurisdiction
to legislate
Jurisdiction Jurisdiction
to enforce to adjudicate
Territory
they are located and wherever their activities Targeting as the connecting factor
are conducted. Nationality is understood
here in a broad manner, as it may cover the A broader jurisdictional claim is established
nationality of natural persons, the place of by laws that subject all advertising directed at
establishment of legal persons but also the their nationals, wherever the undertakings are
place of residence. established and wherever the advertisements
are produced, edited or published. It assesses
In Australia, the Competition and Consumer jurisdiction based on the effects that an online
Act provides the extended application of action has produced in a certain territory.
the Act, including most of its consumer law,
to conduct outside Australia by Australian The Mexican Regulation to the General Health
citizens, legal persons incorporated or Law on Advertising follows this approach.
carrying on business in Australia or persons It provides that “advertising aimed at being
ordinarily resident in Australia (119). disseminated in the national territory,
independently of its origin, must abide by
EU Member States laws transposing the this law, the regulation and other applicable
AVMS Directive also define the place of provisions” (124). Similarly, the ASCI code
establishment of service providers as the for self-regulation in advertising “applies to
main connecting factor to exercise jurisdiction. advertisements read, heard or viewed in India
However, they do so by following a broad even if they originate or are published abroad
interpretation of the notion of “place of as long as they are directed to consumers in
establishment”. For example, the Spanish India or are exposed to significant number of
Law on Audiovisual Communication (120) consumers in India” (125).
determines the place of establishment based
on the provider’s central establishment, where Combining several connecting factors
the provider conducted its first activities, or
where the satellite uplink used by the provider More complex jurisdictional clauses result from
is based. Video-sharing platforms are also the combination of a variety of connecting factors,
considered to be established in Spain if they which allows broader jurisdictional claims.
have a parent company, a subsidiary or a
partner company in Spain. A service provider The Singapore Spam Control Act combines
established in another EU Member State that territoriality and nationality as a basis for
targets its services to the Spanish market is jurisdiction. In accordance with section 7, the Act
also subject to some of the rules provided in does not apply unless an electronic message has
the law (121). Similar provisions are found a Singapore link. It is considered that a message
in other national laws transposing the AVMS has a Singapore link if one of the following
Directive (122). conditions is met (126).
Other instruments bring conduct within their • The sender of the message is an individual
jurisdiction where that conduct occurs in the physically present in Singapore when the
territory concerned. For example, the PRC message is sent.
Advertisement Law provides that “advertisers,
advertising agents and advertisement • The sender is:
publishers shall abide by this law in engaging
in advertising business within the territory of • an entity formed or recognized under the law
the People's Republic of China” (123). of Singapore; or
Country: Brazil
Brazil’s Law of the Internet considers Brazilian data subjected to Brazilian jurisdiction, wherever
it is actually stored (128). In accordance with this legislation, the collection, storage, retention and
treating of personal and communications data by connection providers and internet application
providers, where at least one of those activities is conducted in the national territory, is subject to
Brazilian law, even if the activities are carried out by an entity established abroad, provided that it
offers services to the Brazilian public or that at least one member of the same economic group is
established in Brazil.
Brazil illustrates broad jurisdictional rules in has a much more limited extraterritorial effect,
data protection legislation. However, this is not as it applies to natural persons residing in
an exception, and the same model has been Nigeria or Nigerian citizens residing outside
followed by other countries such as Colombia, of Nigeria and no further provisions are
Mexico, or Thailand, and by the EU (129). By established on extraterritorial scope in respect
contrast, the Nigerian Data Protection Regulation of controllers and processors (130).
Overview Restrict
Restrict Monitor Enforce Annex
5. Defining an effective jurisdictional scope for regulation of digital marketing and enforcement 33
Overview Restrict
Restrict Monitor Enforce Annex
Restricting digital marketing in the context of tobacco, alcohol, food and beverages, and breast-milk substitutes: existing approaches and policy options 34
6. Restricting digital
marketing to children and
other vulnerable populations:
targeting and data protection
In the absence of comprehensive
restrictions on marketing,
governments frequently restrict
group in instruments regulating
marketing in this partial way. For
example, sector-specific marketing
marketing to vulnerable groups. restrictions or other laws might:
Children are the most often protected
• Prohibit marketing that appeals to children, although this leaves open to argument the
question of what content is considered to appeal to children.15
In the physical environment, these rules or permitting certain types of marketing only
are implemented through, among others, in specific settings. The question that follows
verifications of official identifications when is how to implement these approaches to
entering certain premises or buying certain protecting vulnerable populations, including
products, watersheds on broadcast advertising, children, in the digital environment. Policy
the prohibition of advertising in certain media, options depend on being able to identify
15 For example, the ASA considered that a Heineken advertising on Twitter using a goat character, the G.O.A.T.
acronym (Greatest of all times), and garage music was not likely to have more appeal to people aged
under 18 than to over 18; see ASA ruling on Heineken UK Ltd [website]. London: Advertising Standards
Authority; 2022 (https://www.asa.org.uk/rulings/heineken-uk-ltd-g22-1155950-heineken-uk-ltd.html,
accessed 16 March 2022). By contrast, the ASA considered that a Captain Morgan advertising campaign
on Snapchat allowing users to add a pirate lens to their picture to look like Captain Morgan was of
particular appeal to children due the bright colour and character features of the lens, and to the fact that
Snapchat is particularly popular among under 18; see ASA ruling on Diageo Great Britain Ltd [website].
London: Advertising Standards Authority; 2018 (https://www.asa.org.uk/rulings/diageo-great-britain-
ltd-a17-390017.html, accessed 16 March 2023).
Overview Restrict
Restrict Monitor Enforce Annex
6. Restricting digital marketing to children and other vulnerable populations: targeting and data protection 35
vulnerable populations including children. In this to regulate collection, processing and use of
context, national laws seek to establish effective personal data (6.2).
online age-verification mechanisms (6.1) and
Partial restrictions that seek to protect children approach to recognizing the age of users which
from marketing depend on the ability of involves that:
economic operators to identify children. This is
true if economic operators are to ensure that • either online service providers are able to
marketing is not directed at children or that establish age with a level of certainty that
children are not exposed to it, as well as in the is appropriate to the risks to the rights and
context of online retail. freedoms of children that arise from the data
processing; or
The first policy option to protect children from
accessing age-restricted content is to require • they must apply the higher standards
effective age-verification mechanisms in specific applicable to children to all users (135).
contexts. For example, while most social media
platforms include a minimum age between 13 A similar problem is encountered by online
and 16 years old, they solely require entering marketplaces, which may sell products such
a valid date of birth when signing up, without as tobacco or alcoholic beverages that may
requesting any proof of the veracity of such not be sold to children. In these contexts, in
information (132). Children can therefore easily order to enforce sales restrictions in the digital
register on social media under false ages, environment, effective mechanisms to verify age
leading to marketing being directed at them are required. Usual methods in age-restricted
or them being exposed to marketing that they sectors involve requiring a passport, ID or driving
should otherwise be protected from (133). licence copy, as established for example in British
rules on online gambling. Under such rules,
This problem is encountered in all age- operators must verify, at a minimum, the name
restricted sectors. The overall consequence address and date of birth of a customer before
of these challenges is that even if advertisers allowing him or her to gamble. If operators think
formally restrict advertisements to consumers there may be fraudulent activity, they may also
above a certain age, these will de facto be ask for a selfie to verify identity (136).
visible to children (134). In this respect, partial
restrictions that permit marketing to adults However, these types of mechanisms do not
but not children are likely to result in children prevent all under-age activity and there is
being exposed to a greater volume of marketing concern that detection may be more difficult
than comprehensive restrictions. An option given the anonymity experienced in digital
provided in the United Kingdom code of practice environments. Several options exist including:
for online services is to adopt a risk-based
Overview Restrict
Restrict Monitor Enforce Annex
Restricting digital marketing in the context of tobacco, alcohol, food and beverages, and breast-milk substitutes: existing approaches and policy options 36
• using biometric data to verify age: speech, fingerprints, facial traits, iris or ear features
(137);
• requiring users to enter the age on the device upon acquisition and using that birthdate to
allow or deny installing applications (139);
• requesting an ID scan, verifying its authenticity and matching it to the user through a live
picture with a webcam or a phone camera (140);
• requiring a picture or a video of the user and verifying it with an age-checking AI technology
(141); or
• for online purchases, using credit card details to verify age (142).
One challenge with these approaches, however, These recommendations are made in
is that they require consumers (including parallel to a legal dispute in France, in which
children) to share highly sensitive data. This can pornographic sites have challenged the legal
run contrary to the objectives underpinning data requirements for age verification which are
protection and privacy laws, thereby requiring general in nature, arguing instead, that French
governments to balance those objectives against law should specify distinct methods for doing
effective age-gating (143). AI technologies have so.16 The dispute highlights one challenge in
also raised concerns about potential biases legislating for effective age-gating, which is
and discrimination, as the accuracy of facial that imposing a general obligation may leave
analysis software can depend on the individual’s open the space for argument on whether
gender or skin colour, amongst others (144). an economic operator has taken sufficient
Accordingly, the French Commission on steps. On the other hand, requiring specific
Informatics and Liberty has recommended that techniques may not be future proof as ways to
age-verification systems comply with principles circumvent those techniques become known
such as proportionality, minimal intervention, over time. This also highlights the absence of
robustness, simplicity, or standardisation. It an international standard or other instrument
also recommends prioritising third-party age- that could evolve over time and be a point of
verification systems, which would avoid directly reference for domestic laws or regulations.
providing personal data to the site the user is
trying to enter (145).
16 A dispute is currently open in France for the failure of pornographic sites to effectively verify age. Legal
concerns are related with the absence of guidance in French legislation on age-verification tools, the
proportionality of remedies adopted for failure to effectively verify age, and the impact of such remedies
in the freedom of expression; see Tribunal judiciaire de Paris, Jugement de transmission de la question
prioritaire de constitutionnalité, MG Freesites LTD c. ARCOM, 4 October 2022, and Conseil d’État, aff. N°
463163, 29 November 2022, FR:CECHR:2022:463163.20221129.
Overview Restrict
Restrict Monitor Enforce Annex
6. Restricting digital marketing to children and other vulnerable populations: targeting and data protection 37
Overview Restrict
Restrict Monitor Enforce Annex
Restricting digital marketing in the context of tobacco, alcohol, food and beverages, and breast-milk substitutes: existing approaches and policy options 38
vulnerability. External comments submitted for vulnerability provisions have been identified in
the review of this instrument mentioned that the legislation related to digital marketing.
concept should embrace the ways in which data
is processed to target consumers and create please add before note 16 and update number:
vulnerability, that it should not be confined to "17 People targeted most aggressively by
mental or physical capacity, nor be associated alcohol companies are those who already buy
to a specific group. Taking other instruments as alcoholic products in high amounts. "Online
a model, such as the Australian Banking Code targeted advertising may also exacerbate
of Practice or the General Insurance Code of discrimination that is already present offline.
Practice, vulnerability factors in the new Online The intentional or unintentional discrimination
Privacy Act could include domestic violence, resulting from targeted advertising can exclude
financial abuse, language and literacy barriers, minorities from opportunities (ie housing) and
or cultural background amongst others (148). push them towards exploitative products (e.g.
payday loans). This can be done by explicitly
Legislation can also have special regard for targeting or excluding an advertisement, for
populations that are intrinsically vulnerable example, based on ‘ethnic affinity’. But even
in a specific sector, notably consumers of where there is no discriminatory intention, the
dependence-forming substances (149). While no system is optimized to show advertisements
examples have been found in current legislation, to users that are most likely to click on them,
it is technically possible to restrict alcoholic which can lead to racist or sexist predictions. In
beverages advertising from being targeted at the United States, Meta and the US Department
people with drinking disorders or people who for Housing and Urban Development reached
abstain (150),1717 unhealthy food advertising a settlement in 2022 to restrict Meta’s ability
from being targeted at children, and advertising to use certain targeting tools in housing ads.
of breast-milk substitutes or infant and young Meta announced it would extend similar
child food products from being targeted at measures to employment and credit ads (151).
pregnant women or mothers of children aged Similar concerns can be raised for tobacco,
under 3 years. Laws and regulations could also nicotine, alcohol, food and beverages and
restrict advertising from reaching populations breast-milk substitutes. For example, food and
that are most at risk of being influenced by such beverage brands have intensified marketing
practices and thus developing certain health efforts towards racial minorities in the United
conditions. Sector-specific vulnerability has States, leading to increased exposure to digital
been recognized in other areas, such as energy marketing of unhealthy foods (152). In short,
or the financial sector and there is a live laws could recognize a range of characteristics
debate about prohibiting targeting of weight as a source of vulnerability for purposes of
loss advertisements to people with eating restrictions on marketing specific product
disorders18. But to date, no sector-specific categories.
17 People targeted most aggressively by alcohol companies are those who already buy alcoholic products in
high amounts.
18 In the EU, the Electricity Markets Directive and the Gas Directive require Member States to ensure there
are adequate safeguards to protect vulnerable customers, leaving the definition of vulnerable customers
to Member States; this vagueness aims at protecting against energy poverty. The Basic Payment Account
Directive requires Member States to ensure that unbanked vulnerable consumers (people with no access
to a basic bank account) are sufficiently informed about the availability and characteristics of payment
accounts with basic features. See Sajn N. Vulnerable consumers. Brussels: European Parliament ; 2021
(https://www.europarl.europa.eu/RegData/etudes/BRIE/2021/690619/EPRS_BRI(2021)690619_EN.pdf,
accessed 16 March 2023).
Overview Restrict
Restrict Monitor Enforce Annex
6. Restricting digital marketing to children and other vulnerable populations: targeting and data protection 39
Once a country has defined specific vulnerable collected and processed by manufacturers of
groups to be afforded strengthened protection, specific product categories. For example, the
it may consider the policy options below to food industry continuously monitors children
protect those groups more effectively. and teens. They follow their interactions with
acquaintances, their engagement with digital
devices and platforms, and their relationship
6.2.2 Limiting the collection and processing of with brands. Through branded mobile apps they
personal data that may be used for targeting track children’s geolocation, purchasing and
eating patterns, and interact directly with them.
Where comprehensive restrictions are not in Manufacturers therefore amass big amounts
place, targeted advertising for specific product of data that are then used to develop the most
categories can be regulated by restricting data effective marketing strategies (156).
collection and processing.
On the one hand, general data protection laws 6.2.3 Limiting the use of personal data for
in some jurisdictions restrict data collection targeted advertising
and processing. Data protection and privacy
laws often grant a special level of protection to In addition to restricting the collection or
sensitive data, which generally includes health processing of data, governments can limit
data. Thus, these laws can prohibit the collection, the use of personal data in marketing. In this
processing, use or disclosure of personal data context, a comprehensive ban on all targeted
in ways that can reveal information on health marketing of tobacco, nicotine, alcohol,
conditions that could be used for marketing unhealthy food and beverages, and breast-
purposes. Data protection and privacy laws milk substitutes is a policy option open to
also restrict the processing of children’s data. governments. A ban on targeted advertising in
This can contribute to protecting them from general has been advocated in Europe and in
profiling and targeted advertising (153). For the United States (157). Imposing such a ban
example, in the EU, the AVMS Directive prohibits to specific product categories would partially
personal data of minors collected or generated implement those calls.
by audiovisual media service providers and by
video-sharing platform providers from being A comprehensive ban on targeted advertising
processed for commercial purposes, such as would not per se affect contextual advertising.19
direct marketing, profiling and behaviourally For example, a banner advertising a fast-food
targeted advertising (154). The United Kingdom restaurant could be displayed when visiting
has developed a code of 15 standards that the website of a cinema located nearby that
organizations providing online services likely to restaurant. Hence, restrictions on contextual
be accessed by children in the United Kingdom advertising may still be needed even where a
should conform to. The code includes taking comprehensive ban on targeted advertising is in
the best interests of the child as a primary place (158).
consideration, transparency obligations, and
switching geolocation or profiling off by default, Where a general ban on all targeted advertising
amongst other requirements (155). is not in place, countries can still ban marketing
targeted at specific population groups. This
On the other hand, Member States could can be implemented through data protection
also consider restricting the data that can be laws. For example, In the EU, the AVMS
19 Contextual advertising is advertising that is shown in accordance with the website being visited or the
content being viewed.
Overview Restrict
Restrict Monitor Enforce Annex
Restricting digital marketing in the context of tobacco, alcohol, food and beverages, and breast-milk substitutes: existing approaches and policy options 40
Directive requires Member States to ensure the digital environment. For example, in the
that audiovisual commercial communications on United States, Utah has recently adopted a law
alcoholic beverages are not specifically aimed at prohibiting children under 18 years old to use
minors (159). Moreover, personal data of minors social media between 10.30 pm and 6.30 am and
collected or generated by audiovisual media requiring social media services to block Utah
service providers and by video-sharing platform minors from accessing their accounts during the
providers cannot be processed for commercial watershed, a default setting that only parents
purposes, such as direct marketing, profiling and or guardians can modify (165). However, use
behaviourally targeted advertising (160). of watershed times is less adapted to regulate
targeting.
Alternatively, these types of restrictions can be
implemented through the standards established
in sector specific laws. For example, in Brazil, 6.2.4 Targeting marketing away from vulnerable
a 2014 resolution considers all commercial populations
communications targeted at children and
adolescents to be abusive (and therefore Proactively targeting marketing away from
prohibited) (161). Similarly, in Chile, the Law children and other vulnerable populations is
on nutrition and composition of foodstuffs and another practice available for advertisers. A
their advertising bans advertising of food high very broad example of this can be found in
in calories, fat, sugar or salt directed at children the above-mentioned law adopted in Utah,
under 14 (162). which also prohibits social media platforms
to display any advertising on accounts held
Whether digital marketing is ‘directed at’ by Utah minors (166). In this case, brands or
children might involve analysis of the content online platforms are required to process users’
of the marketing and the contexts in which data to determine their age and make sure that
it appears. For example, in 2018, the ASA certain advertisements do not reach children.
considered that rum advertising by Diageo In a narrower example, the ASA has highlighted
on Snapchat was directed at people under 18 the merits of taking several factors into account
because it provided a lens that allowed users to in addition to age when targeting age-restricted
look like buccaneers (163). But beyond content advertising. Those factors should be interest-
and context, the prohibition of marketing based. For example, an alcoholic beverages
directed at children implies a prohibition on advertiser may target its campaign at customers
targeting of children (even though these laws that have a registered age above 18 years old
do not explicitly focus on targeting in digital and are interested in house buying. Conversely,
marketing). Similarly, in determining whether they may de-select from their campaign
marketing ‘appeals to’ children, the primary customers that have a registered age above 18
consideration might be the content of that years old but are interested in a clothing brand
marketing, but how marketing is targeted may that is particularly appealing to teenagers (167).
also be a relevant consideration.
Whether an advertiser has taken steps to
Other jurisdictions protect children from target marketing away from vulnerable
marketing by providing watershed times in their populations might be a factor for consideration
legislation. For example, the United Kingdom in determining whether marketing is ‘directed at’
prohibits TV and on-demand programme or ‘appeals to’ a vulnerable group. Alternatively,
services provided between 5.30 am and 9 pm positive obligations could be established to
from including advertisements for less healthy target marketing away from these groups to
food and drink products (164). These watershed reduce their exposure. Please see a summary
times are intended to reduce exposure to graphic in Figure 13.
marketing and might be transposed into
Overview Restrict
Restrict Monitor Enforce Annex
6. Restricting digital marketing to children and other vulnerable populations: targeting and data protection 41
Digital
marketing to
children and
vulnerable
populations
Comprehensive restriction
on marketing of specific
product categories
In the absence of
comprehensive
restriction
Partial restrictions
Overview Restrict
Restrict Monitor Enforce Annex
Restricting digital marketing in the context of tobacco, alcohol, food and beverages, and breast-milk substitutes: existing approaches and policy options 42
Overview Restrict
Restrict Monitor Enforce Annex
7. Restricting influencer marketing and user engagement 43
7. Restricting influencer
marketing and user
engagement
B eyond paid marketing directly by
brands on digital platforms, social
media platforms enable advertisers
can be considered paid-for advertisement
subjected to marketing restrictions.20 This can be
contrasted with user-generated content, which
to market their products through is not distributed pursuant to a commercial
other means, including influencer relationship and is not restricted in the same
marketing and user-engagement. way as influencer marketing.
Influencer marketing involves a direct
commercial collaboration between For purposes of this discussion, user-generated
a brand and an influencer to market content is material produced or shared by
a product or the brand itself. User consumers (users), which does not qualify
engagement techniques encourage users as advertising or prohibited promotion by
to participate actively with a brand or the user because there is no commercial
product online, including by commenting, relationship with the brand, but this content
sharing or liking content. nonetheless contributes to promoting products
and normalising their consumption (168).
Brands themselves can also produce their
Today, national laws restrict influencer own content in their social media profiles,
marketing, including by requiring disclosure which might not always be characterized as
where social media posts by an influencer are advertising or prohibited promotion, but may
linked with a commercial relationship and by still be a way to promote their products, as such
applying marketing restrictions to influencers. content contributes to brand recognition and
As a general rule, where there is a commercial the normalization of products. This content can
relationship (a material connection) between typically be liked and shared by consumers and
an influencer and an advertiser the content is thus capable of broad dissemination.
20 What constitutes a material connection may vary from one country to the other but India, for example,
includes the following non-exhaustive list: monetary or other compensation; free products, discounts,
gifts; contest and sweepstakes entries; trips or hotel stays; media barters; coverage and awards; family,
personal or employment relationships. See Endorsements know-hows!. Delhi: Department of Consumer
Affairs; 2023 (Endorsement Know-Hows (consumeraffairs.nic.in), accessed 16 March 2023). In France, the
proposal for a law to fight against scams and the excesses of influencers in social media defines influencers
as a natural or legal person that creates and disseminates content through online communication tools
against remuneration or for a benefit in kind in order to promote goods, services or a cause (Article 1)
[unofficial translation by the authors]. See Proposition de loi visant à lutter contre les arnaques et les
derives des influenceurs sur les reseaux sociaux [Proposal for a law to fight against scams and the
excesses of influencers in social media], 2023 (790-i-380-PPL-Delaporte-Vojetta- influenceurs réseaux
sociaux_pastillé_publication (assemblee-nationale.fr), accessed 11 April 2023).
Overview Restrict
Restrict Monitor Enforce Annex
Restricting digital marketing in the context of tobacco, alcohol, food and beverages, and breast-milk substitutes: existing approaches and policy options 44
Where countries decide to regulate user- dispute before the Italian Competition Authority.
generated content, a distinction needs to be In this case, the competition authority alleged
drawn between two categories of content. that British American Tobacco Italia (BAT) and
individual social media influencers violated
• The use of user-generated content for the Italian Consumer Code through Instagram
commercial purposes, which is subject posts promoting a heated tobacco product.
to restrictions in some jurisdictions. This Influencers encouraged their followers to post
category includes: sharing users’ comments content using several hashtags without asking
of a product by the brand; organising contests them to disclose the commercial nature of the
that require users to promote the brand; posts. Influencers then re-posted the ‘best’
allowing users to ‘like’ and share the brand’s user-generated content (169). Ultimately, BAT
posts and content; etc. and the influencers committed, amongst other
things, to removing the posts, using appropriate
• User-generated content that is not of a hashtags in future influencer advertising, and
commercial nature. This category includes asking followers to use hashtags when sharing
users’, including influencers’, comments content. The regulatory authority declined to
or posts regarding a certain product find an offense following these commitments.
without being linked to that product by any This case illustrates how user-generated
commercial relationship. content can be used for commercial purposes
and the challenges this poses to the application
The need to identify commercial user-generated of marketing rules. Some jurisdictions have
content was at the heart of the Glo Hyper attempted to regulate this area.
Country: Finland
“The advertising commercial operator in an information network service administered by itself uses
any textual or visual content produced by consumers or places into the service textual or visual
content, produced by itself or by consumers, which is intended to be shared by consumers”.
Overview Restrict
Restrict Monitor Enforce Annex
7. Restricting influencer marketing and user engagement 45
Restrictions:
The amendment to the Alcohol Control Act limits social media advertising and prohibits user-
generated content in alcohol marketing by advertisers It prohibits the advertising of alcohol in
and with games, lotteries and competitions in any media, including online. Alcoholic beverages
brands cannot distribute content that has been originally uploaded by a consumer via their own private
profile, such as comments, pictures or videos containing alcoholic beverages. The amendment also
restricts any content that is intended to be shared by consumers. Alcoholic beverages brands must
therefore disable the sharing function on all their advertisements on social media, but users are still
allowed to “like” contents. Sponsored advertisements in social media are allowed but the advertiser
must ensure that the advertising is targeted at people of legal drinking age and the sharing function
should be removed from sponsored ads. These restrictions apply to domestic marketing in Finland
as well as any marketing from outside aimed at an audience in Finland. However, enforcing this
legislation to inflowing marketing is challenging. An assessment of the implementation of this law has
also revealed that brands elude legislation by using tags and hashtags, collaboration with retailers and
restaurants, and sponsorship of music and sports events, all of which are still permitted.
Despite the practical difficulties, the Finnish case provides an example of how jurisdictions can
regulate user engagement by advertisers, including their use of third-party user-generated content,
and thus ensure a more comprehensive approach to the regulation of digital marketing.
Ireland has also attempted to regulate user- The distinction between commercial and non-
generated content in its Online Safety and commercial content will also determine whether,
Media Regulation Bill 2022, which provides the and to what extent, such content is protected by
possibility to adopt online safety codes prohibiting the freedom of expression.
or restricting commercial communications
relating to unhealthy foods and beverages in Whether online platforms that host user-
user-generated content (171). generated content could themselves be
liable for such content depends on content
The distinction between commercial and non- moderation rules applicable in the country.21
commercial user-generated content is important In most jurisdictions, online platforms are not
for liability purposes. In the first case, brands, generallyeld liable for content posted on their
online platforms and influencers might be held sites by users. There can be caveats to this
liable for their commercial conduct violating general rule in specific contexts such as with
rules on the use of user-generated content respect to distribution of child pornography,
for commercial purposes. In the second case, incitement to violence or disinformation, but these
however, brands are not ordinarily held liable for caveats have not altered the general rule when it
the content posted by users about their products, comes to user generated content relating to the
where the brands do not control the content. types of marketing addressed in this publication.
21 The legal debate whether platforms should be responsible for content posted by users is currently ongoing
in the United States under the Supreme Court’s cases Twitter v Taamneh and Gonzalez v Google; Chotiner
I. Two Supreme Court cases that could break the Internet. The New Yorker. 25 January 2023 (Two Supreme
Court Cases That Could Break the Internet | The New Yorker, accessed 16 March 2023).
Overview Restrict
Restrict Monitor Enforce Annex
Restricting digital marketing in the context of tobacco, alcohol, food and beverages, and breast-milk substitutes: existing approaches and policy options 46
Overview Restrict
Restrict Monitor Enforce Annex
7. Restricting influencer marketing and user engagement 47
Influencer
marketing
and user
engagement
Comprehensive restriction
on marketing of specific
product categories
In the absence of
comprehensive
restriction
Partial restrictions
Overview Restrict
Restrict Monitor Enforce Annex
Restricting digital marketing in the context of tobacco, alcohol, food and beverages, and breast-milk substitutes: existing approaches and policy options 48
• Marketing is often only visible to the consumer who is being targeted and not to
enforcement authorities.
• Enforcement authorities and consumers do not necessarily see the same content because
consumers are targeted under specific algorithms based on their interests and online
activity.
• Marketing is often ephemeral in nature (displayed for short periods of time) (173).
22 A similar, more rudimentary, system has been established by Facebook through its Ad Library; see
Carah N and Brodmerkel S. Regulating platforms’ algorithmic brand culture: The instructive case
of alcohol marketers on social media. In: Flew T and Martin FR, editors. Digital platform regulation:
Global perspectives on Internet governance. Cham: Palgrave Macmillan. 2022; 111-131. https://doi.
org/10.1007/978-3-030-95220-4_6, p. 126.
23 Canada and the State of Washington have established political ads archives.
Court of Columbia, the Campaign Legal Center advertisers, but they do not necessarily
used the advertising archives voluntarily indicate specific patterns of targeting,
established by Facebook to allege a violation of volume of reach, or which particular
federal election law during the 2018 electoral population groups have been reached by
campaign through a series of Facebook ads the advertisements. Hence, while disclosure
(178). obligations may generally be effective at
monitoring digital marketing, they may
A limitation with the archives required by the be of less relevance if applied to sectors
DSA is that they are only imposed upon large where there are only partial restrictions.
online platforms but not upon manufacturers, For example, disclosure of food and non-
distributors or retailers. In the context of alcoholic beverages marketing by large
sector specific restrictions, another approach online platforms might not permit regulators
is to require economic operators in that to observe whether the marketing has been
sector to disclose marketing practices to targeted at children.
government. For example, in Canada tobacco
manufacturers and importers must provide A policy option to partially address these
the government with information about their challenges is to make the reports and
tobacco products, including their marketing repositories public, or permit sharing with civil
campaigns (179). The same obligation is society organizations to enable them to conduct
imposed in other countries. These sector the analysis and monitoring.
specific marketing reports and repositories
have inherent limitations in that: Policy options to support monitoring of online
content, including ephemeral content, consist
• They rely on information provided by of a combination of all previous approaches,
manufacturers and online platforms applied to all actors in the supply chain, as
and require authorities to verify that the Figure 15 illustrates:
information is complete and accurate.
• the use of AI tools allowing the monitoring of
• They tend to involve a high amount of large amounts of advertisements;
information and require authorities to
dedicate considerable resources for the • the selection of humans in charge of
analysis and monitoring. overseeing AI decisions; and
• They provide information on the content • the obligation to keep and publish content
of marketing campaigns launched by archives for potential investigations.
The WHO FCTC recommends rigorous monitoring by multiple stakeholders, including non-State
actors, to enforce existing regulations and facilitate international cooperation (180). One example
of civil society led monitoring in formal partnership with Member States is the Tobacco
Enforcement Reporting Movement (TERM), a continuous, real-time digital monitoring system
that catches tobacco marketing as it happens. TERM can provide immediate information to
governments so they may act in real-time. TERM data is made available to policymakers via situation
reports and to media and other stakeholders via publications (181). Currently operational in Mexico,
India and Indonesia, its modular approach is replicable anywhere and to products beyond tobacco. It is
a freely available resource to governments and their partners.
Civil society also monitors the implementation of the International Code of Marketing of
Breast-Milk Substitutes. In Viet Nam, for example, the Virtual Violations Detector (VIVID)
automatically scans potentially unlawful advertising of selected breast-milk substitutes
brands on Facebook (182). The app also allows any person to upload additional content for
verification. While the app was initially limited to breast-milk substitutes in Viet Nam, it has now been
extended to tobacco and alcoholic beverages in several different countries.
International organizations can also contribute to developing effective monitoring tools. The
WHO Regional Office for Europe is developing the CLICK monitoring framework, which is a tool
to monitor digital marketing of unhealthy products to children and adolescents (183). CLICK
consists of an app that maps exposure to digital marketing and screen-captures content that
children see on their smartphones. The CLICK monitoring framework is currently under development.
In a system where monitoring is also conducted than monitoring social media advertising. The
by non-State actors, granting legal standing to appropriateness of one monitoring tool or
those actors to bring claims against unlawful another may depend on factors such as:
digital marketing practices may also facilitate
enforcement. This possibility is already provided • the amount of advertising available
by advertising associations, such as the ASA or
ASCI, which usually allow any person to bring a • the presence of user-generated content to be
claim under their dispute settlement systems. monitored
The variety of existing monitoring mechanisms • the frequency at which advertising rotates
also reveals that different tools may be adapted content
to different digital marketing techniques.
For example, monitoring display advertising • the visibility and transparency of advertising.
may be easier and require less robust tools
Complaint
lodged
Investigation
A complaint can A complaint is
be lodged by not necessary for
the public or the the ASA to open
industry. an investigation.
ASA communicates
Decision with advertisers, ad
Following ASA may ask agencies, media, etc
the investigation, for interim asking for answers
a recommendation measures until and evidence.
is sent to the ASA the investigation
Council, which takes is complete.
the final decision.
The ASA allows the public and the industry to complaints, media reports, internal
lodge complaints, which can be a mechanism recommendations from consumer protection
to partially delegate monitoring. For example, authorities, or information from other
complaints lodged by Campaign for Tobacco- domestic or foreign authorities. By contrast,
Free Kids, Action on Smoking and Health and other laws may limit the categories of
Stopping Tobacco Organizations & Products actors entitled to request an investigation to
against British American Tobacco’s use of competent authorities.
influencer marketing to advertise e-cigarettes
on Instagram led to the ASA ruling against the • What are the investigative powers of
tobacco manufacturer (185). competent authorities? Consumer protection
authorities are frequently able to request
One distinct feature of this example is that the documents, testimonies or information from
ASA is not completely independent from British the undertakings concerned and from third
law in the sense that the possibility of reference parties, including ISPs. However, in some
to government authorities exists in the event jurisdictions, such as in Canada, authorities
of non-compliance with an ASA decision. This need to obtain approval from a court to
links the CAP Code with consumer law and laws exercise such powers. Data protection laws
governing consumer protection, broadcasting typically provide large investigative powers
and telecommunications. The links between upon data protection authorities.
the ASA and formal legal frameworks are even
stronger for broadcast advertising. Since 2004, • What are the enforcement powers of
the ASA has the sole responsibility for regulating competent authorities? Consumer protection
broadcast advertising in the United Kingdom. authorities may have administrative, civil
Although broadcasters can be referred to Ofcom, and/or criminal enforcement powers, with
the government’s Office of Communications, for strong differences across jurisdictions.
further action when needed, this is extremely Data protection authorities often have
rare (186). Linking self-regulatory codes to corrective powers to issue warnings or
formal laws may be a policy option to support erasure mandates, and they typically have
enforcement of those codes (assuming they have the power to adopt monetary penalties too.
a sufficiently high level of protection to achieve Some data protection laws, such as the Thai
government objectives). Data Protection Act, also grant authorities
with criminal powers . Under the DSA,
the European Commission and national
8.2.2 Enforcement of laws and regulations digital service coordinators can request
commitments and make them binding, and
Several authorities within a government they can adopt a variety of sanctions such as
are involved in the enforcement of different interim measures, fines or periodic penalty
aspects of digital marketing laws. These include payments.
consumer protection, health, culture, anti-trust
and data protection officers, amongst others. The • Do competent authorities have adjudication
enforcement of digital marketing rules by public powers? Under data protection laws,
authorities is hence fragmented. Differences some jurisdictions, such as Nigeria, have
across laws concern: even established an administrative panel
responsible for conducting the investigations,
• Who can trigger investigations? Under hearing parties’ allegations and adopting
consumer protection laws, investigations decisions.
can usually be triggered by a variety of
information sources, including individual, Figure 18 summarizes the differences
consumer organisations or business across laws.
Who can trigger What are the What are the Do competent
investigations? investigative enforcement authorities have
powers of powers of adjudication
competent competent powers?
authorities? authorities?
Preventive
Reactive
Example EU: in the Eva Glawischnig-Piesczek v Facebook Ireland Limited judgment, the CJEU
ruled that online platforms do not have general content moderation obligations, but
they may be required to monitor a specific case (189).
Example Instagram uses preventive warnings when users try to post potentially offensive
comments (190). Instagram also uses pop-up warnings when users search certain
materials, such as hashtags associated with images that could harm wildlife or the
environment (191).
Example EU: Directive 2019/790 on copyright and related rights requires content-sharing
platforms to conduct preventive monitoring of all the contents which their users wish
to upload, in order to be exempted from all liability for giving the public access to
copyright-protected works in breach of copyright (192).
Example United States: in 2018, the FTC and the FDA jointly issued warning letters to
manufacturers, distributors and online retailers for selling e-liquids used in
e-cigarettes with labelling and/or advertising that resembled kid-friendly food
products, such as candies, cookies or juices (193).
Example India: the ASCI has a list of social media influencers and brands that are in breach
of ASCI Guidelines for Influencers Advertising in Digital Media. The influencers
and brands included in that list were contacted by the complaints handling team,
directing them to comply with the guidelines, but the said brands and influencers
failed to respond or comply with requests (194).
Example Australia: the Australian Ad Standards Community Panel found that Heart Attacks
Diner had violated the AANA Food and Beverages Advertising and Marketing
Communications Code through a website advertising campaign that encouraged
excess consumption through representation of a disproportionate burger size. The
advertiser was required to add a disclaimer to the image indicating that the product
was not intended for regular consumption (195).
Example France: in Comité national contre le tabagisme v. BAT France, the tribunal of
Nanterre (France) declared that BAT France had violated the Public Health Code’s
provisions on vaping by promoting Vype in its website instead of merely presenting
the product. BAT France was requested to delete certain elements from its website
and was imposed a pecuniary sanction (196).
Example India: in 2020, the ASCI found that several liquor brands had conducted surrogate
advertising in digital media during the Indian Premier League (IPL) 2020, that is,
using a liquor’s brand name to sell other products, such as music CDs, water, other
non-alcoholic beverages or merchandising (197). As a result of such investigation,
the ASCI banned surrogate advertising of twelve liquor companies during the IPL
2021 (198).
Example Instagram removes false posts from its hashtag search (199).
Example Google ads policy provides the suspension of an advertiser’s account for policy
violations. Suspensions may or may not be preceded by prior warnings depending on
the seriousness of the violation (200).
Example Russian Federation: the Federal Act on the Protection of Children from Information
Harmful to their Health and Development prohibits, among others, the distribution
of information, including on the internet, inducing children to desire tobacco and
alcoholic beverages (202). The blocking measure is taken by the Roskomnadzor,
which is a federal executive authority affiliated to the Ministry of Communications and
Mass Media of the Russian Federation.
Example Singapore: an enforcement action against the illegal sale of electronic cigarettes
over the internet in Singapore led to shutting down the three websites where such
cigarettes had been sold, in addition to fines addressed at the persons convicted
(203).
Countries will frequently include a variety of e-liquids used in e-cigarettes with labelling
enforcement measures in their toolbox and the and/or advertising that resembled kid-
appropriateness of one measure over the other friendly food products, such as candies,
will be based in each country’s context. However, cookies or juices. The products were sold
countries may consider the following elements through multiple online retailers. The
when designing their enforcement toolbox. warning letters specified that the failure
to correct violations could result in further
Enforcement measures might be enforcement actions (204).
progressive, ranging from less to more
intrusive. An example of this approach Countries might adopt both preventive
could be found in the United States and reactive measures. Preventive
in 2018. The FTC and the FDA jointly measures are adopted before the
issued warning letters to manufacturers, publication of the advertisement. These
distributors and retailers for selling measures are more effective at preventing
harm, as the unlawful advertisement does should also be imposed with caution. In
not reach consumers. Reactive measures some jurisdictions, the urgent blocking
are adopted once the unlawful marketing of unlawful material can be adopted
has been published. They do not prevent by administrative authorities, police
the advertisement from reaching authorities or public prosecutors without
consumers unless they are sufficient to a court order. In others, administrative
dissuade a violation. This reactive rather authorities may adopt a blocking order,
than preventive quality has inherent limits but they are required to obtain subsequent
considering how fast online content can be judicial approval of their order. Lastly,
spread worldwide. some jurisdictions require a court order
to block content (205). The procedure
Enforcement measures reflect the to be followed may also depend on the
enforcement capacity of the country. grounds justifying the blocking order (for
Preventive measures may require example, whether it is child pornography
stronger monitoring systems and good or intellectual property infringement).
cooperation mechanisms with online
platforms whereas reactive measures Enforcement measures should be
require less sophisticated monitoring compatible with fundamental rights
mechanisms and can rely on external protected in the country. For example,
complaints filed by citizens or civil society. Switzerland allows blocking measures
Depending on the legal system, some in the online gambling sector. The
enforcement measures may only be Swiss Gambling Law only allows Swiss-
adopted following a court order and may approved gambling companies to the
therefore be difficult to implement if the market and the Gambling Surveillance
judicial system in the country is slow. Authority adopts blocking measures
Other enforcement measures will in such against unauthorized companies in
cases be more appropriate. Switzerland. In practice, these measures
mean that the domain names are blocked.
Enforcement measures should be The Federal Tribunal confirmed the
proportionate, as, in case of a legal validity of such measures in May 2022, as
challenge, they will be balanced against it considered they did not violate economic
competing interests and rights. Hence, the freedoms and they were proportionate
procedure followed to adopt a measure, (206).
the period given to the addressee
of the measure to comply with it, or The power to impose enforcement
the scope of the measures should be measures might be granted to the most
considered to evaluate the lawfulness appropriate authority, which can be
of the measure. For example, under the health authorities, consumer protection
Australian Online Safety Act 2021, public authorities, data protection authorities
authorities can compel ISPs to remove or others. Countries should therefore
serious harmful content within 24 hours evaluate what is the enforcement capacity
of receiving a formal notice. Whether of health authorities and how they can
24 hours is a reasonable period may share their enforcement powers with
depend on the harm to be avoided and other governmental bodies.
the safeguards provided. Blocking orders
24 Significant social media intermediaries are those with 500.000 users or more.
25 Electronic systems operators include, amongst others, social media platforms, digital marketplaces, search
engines, financial service providers, data processing and communication service providers; see Schmon
C and Pedersen H. Platform liability trends around the globe: recent noteworthy developments [website].
San Francisco: Electronic Frontier Foundation; 2022 (https://www.eff.org/deeplinks/2022/05/platform-
liability-trends-around-globe-recent-noteworthy-developments, accessed 17 March 2023).
One question that may arise from time to time jurisdiction applicable to activities across global
is whether domestic operators in the supply supply chains (215).
chain have effective control over incoming
marketing that violates bans or restrictions. As these examples illustrate, there are legal
In this respect, to ensure protection of the approaches across different sectors to hold
rule of law and that liability is appropriately domestic actors liable for actions that occur
attributed, natural and legal persons are only abroad in their supply chains. These approaches
held liable for acts that are within their control. regulate the offering of goods or services in the
For example, a distributor might not have control domestic market, often based on the actions of a
over marketing created by the manufacturer manufacturer occurring abroad. In each of these
and distributed from abroad that enters the examples, the domestic activities and presence
State in which a distributor has rights to of an economic operator are used to establish
distribute a product. Therefore, there may be liability and effect enforcement. Domestic
limitations on the extent to which the distributor economic operators then manage their legal
can be held personally liable. However, some risk through contractual terms, foreign supplier
potential mechanisms for attributing liability to liability insurance and other techniques.
distributors in this example are described below.
In this context, and based on these examples,
In this example, distributors have control over domestic laws can be used to control
product distribution (the act of placing the product distribution and sale in countries
product on the market) and distribution can receiving incoming marketing. For example,
be further controlled in the event of unlawful if linked through legislation, licensing and tax
marketing in the same jurisdiction while also administration laws could be used to secure
respecting the principle of effective control. In payment of penalties or to suspend or prevent
this respect, it is commonplace in some areas of operation of a business in the supply chain.
law for domestic importers and distributors to be
liable under domestic law for acts that begin or
are completed earlier in the supply chain. In the 8.4.2 Enforcing laws across borders
context of product liability, for example, domestic
distributors and other actors in the supply chain Where it is not possible or practical to enforce
may be held liable for damage (personal injury) laws against actors in the domestic supply chain,
caused by a product they distribute even though it may be necessary to undertake some form of
they have not manufactured it or altered the foreign investigation and or enforcement. In this
product so as to cause the damage. Depending respect, when a jurisdiction seeks to enforce its
on national or sub national laws, this may include laws, it will frequently need to investigate and
strict liability (where no fault by the distributors collect data from other jurisdictions.
need be established for liability to arise) (212).
In the food safety context, some States have Enforcement cooperation is needed in all areas
established supplier verification programs that of consumer protection (216). Enforcement
require importers to take proactive steps for cooperation can be implemented through a
verification of supplier compliance with food variety of means.
safety standards (213). Similarly, laws relating
to sanctions and to addressing bribery and • Domestic legislation: for example, the
corruption often extend up the supply chain, US Safe Web Act 2006 gives the FTC the
making a domestic operator liable for actions of authority to provide evidence to foreign law
suppliers in some circumstances on the basis enforcement agencies regarding consumer
that there is a relationship of agency between protection matters (217). The FTC can
the two (214). Additionally, anti-corruption share confidential information on consumer
and bribery laws often create extraterritorial matters with foreign authorities, conduct
investigations to assist such authorities, and for example, or enable government to seize
redress harm in the United States caused by property.
foreign business or vice versa (218).
However, where court orders or judgements
• Memoranda of Understanding (MoU): for are necessary to compel enforcement and
example, the Mexican Office of the Federal an actor has no assets in the jurisdiction, the
Prosecutor for the Consumer signed an question arises of whether this judgment can be
MoU with the Superintendence of Industry enforced in another jurisdiction. Traditionally,
and Commerce of Colombia to strengthen the recognition and enforcement of judgments
cooperation for protecting consumer rights rendered by foreign courts has been a matter
(219). exclusively governed by the domestic law of
each country. Consequently, judgments rendered
• Bilateral agreements: for example, the by courts of one jurisdiction could ordinarily
EU and Canada have developed a system not be enforced by the courts of another. This
of information exchange and enforcement is particularly an issue in areas that have a
measures on dangerous consumer products transborder character, such as regulating digital
based on the EU-Canada Comprehensive marketing. Jurisdictions have recently made
Economic and Trade Agreement (CETA). efforts to harmonize this field.
• Regional cooperation networks: several At the global level, the most relevant instrument
regions have developed enforcement is the Hague Convention on Recognition and
cooperation networks, such as the Enforcement of Foreign Judgments in Civil
Consumer Protection Cooperation (CPC) and Commercial Matters of 2019 (220). The
network in the EU, the Ibero-American convention has been signed by six parties so far
Forum of Consumer Protection Agencies, (Costa Rica, Israel, Russian Federation, Ukraine,
comprising agencies in Latin America, Spain United States and Uruguay) (221) and only the
and Portugal, or the African Dialogue’s EU has ratified it, although it has not deposited
Principles on Cooperation in Consumer the instrument of accession yet (222) It will
Protection Enforcement (Livingstone come into force after two States deposit their
Principles). At a more global scale, the instruments of ratification, acceptance, approval
International Consumer Protection and or accession (223).
Enforcement Network (ICPEN) represents
70 countries around the world. Several international agreements have been
concluded with the same purpose at the regional
Cooperation often covers all stages of the level (224). In addition to global and regional
enforcement procedure, from the notification efforts, jurisdictions can also conclude bilateral
of a potential violation to consumer redress, agreements on the recognition and enforcement
covering information sharing and investigative of foreign judgments. Some jurisdictions use
powers. all these mechanisms. For example, Argentina
has entered into regional agreements for
enforcement of foreign judgments, while also
8.4.3 Enforcing judgments across borders maintaining bilateral agreements with other
countries. Even so, large geographical gaps
Where government agencies levy a sanction or remain, meaning that the agreements in place
penalty against an economic operator and the do not cover all countries.
operator does not comply, authorities typically
seek enforcement through domestic courts. Where no global, regional or bilateral agreement
Court orders can compel payment of fines, has been concluded, the recognition and
enforcement of foreign judgments is subject to
domestic law. For example, the recognition and Either way, whether through an agreement
enforcement of foreign judgments in Australia or by ad hoc means, foreign enforcement is a
is governed by the Foreign Judgments Act 1991 relatively burdensome process for a government
and by common law principles (225). so it is often less certain that the desired
outcome will be achieved.
9. Legal considerations in
restricting digital marketing
Restrictions on digital marketing protect public depending on national law and the international
health and children’s rights, amongst others.26 commitments undertaken. Additionally, although
However, depending on domestic law and legal issues may be common to some Member
international commitments, other interests States, the application of relevant laws may
and legal rights may need to be considered by differ from one jurisdiction to another. Moreover,
governments when restricting digital marketing. how Member States choose to restrict digital
This can include both domestic and international marketing is likely to differ from one to another.
legal obligations, particularly those arising For these and other reasons, this section is not a
under international and national human rights definitive statement or opinion on the likelihood
(or constitutional) laws (9.1) and international of legal issues arising, or how they will be
trade and investment obligations (9.2). resolved. Rather, the intention is to highlight the
issues and prominent arguments and authorities
The relevance of these legal issues will for consideration by government.
differ from Member State to Member State,
26 The WHO-UNICEF-Lancet Commission has called for an optional protocol to the Convention on the Rights
of the Child to protect children from the marketing of a range of products, including tobacco, alcohol,
formula milk, sugar-sweetened beverages and gambling, and from potentially damaging social media and
the inappropriate use of their personal data; see Clark H, Coll-Seck AM, Banerjee A, Peterson S, Dalglish
SA, Ameratunga S et al. A future for the world’s children? A WHO-UNICEF-Lancet Commission. Lancet.
2020; 395(10224): 605-658. https://doi.org/10.1016/S0140-6736(19)32540-1, p. 607.
necessary to reach that objective and does not considered a strong interest that grants a broad
go beyond what is necessary (that is, that there margin of discretion to governments. Figure 19
are no less restrictive measures achieving the provides an example of a proportionality test.
same objective). Public health protection is often
In practice, governments can strengthen their In the context of digital marketing, freedom
legal positions by defining their policy objectives of expression and opinion might be relevant
in a clear and precise manner that reflects a considerations in two specific circumstances.
theory of change (a theory of how the intended
interventions will achieve their policy objectives).
Doing so can help ensure that the legitimate
interest and its proportionality are later upheld by • Brands may claim that restrictions on
courts in case of a legal challenge. digital marketing interfere with their
exercise of the right.
the conduct restricted falls within the scope of The freedom of commercial speech is not an
the right. absolute right, as it can be limited to protect the
reputation or honour of persons, social safety,
In some countries, marketing practices or public order (231). Hence, it is the least
conducted by brands are considered to fall protected form of expression under the freedom
within the scope of freedom of commercial of expression (232).30
speech,27 which is often protected by the
freedom of expression. This approach is The freedom of expression can be restricted
followed, for example, in the European region under certain conditions, which typically
(227),28 Colombia (228), the United States (229), require assessing whether the limitation is
and Canada (230). However, two caveats need to imposed by law, pursues a legitimate interest
be underlined. and is proportionate. For example, in Philip
Morris, the CJEU examined a rule prohibiting
the labelling of any element to promote tobacco
products or encourage their consumption on
• The level of protection granted to this their packaging (233). The CJEU admitted that
right is subject to limits. this rule was an interference with the freedom
of expression. However, it also considered the
• Any restriction to the freedom of following elements.
commercial speech by a national
regulation needs to be balanced • The prohibition was established in the EU
with other human rights that may be Tobacco Products Directive.
pursued by the said regulation, notably
the right to health.29 • The essence of tobacco manufacturers’
freedom of expression was not affected by
the rule.
27 For a counter-example, see the Supreme Court of Sri Lanka, which held that advertising does not fall
within the scope of the freedom of speech because it is not intended to safeguard the natural right of an
organized freedom loving society to impart and acquire information about a matter of common interest;
Supreme Court of the Democratic Socialist Republic of Sri Lanka, The Lion Brewery Ceylon Ltd., et al. v.
Hon. Attorney General, et al., S.C. (S.D) Nos. 13-22/05, 16 January 2006.
28 Both in the EU and in the Council of Europe.
29 But also the right to life, the right to privacy, or the rights of the child, amongst others. See, for
example, on the links between alcohol marketing and human rights: Realising our rights: How to protect
people from alcohol marketing. Alcohol Focus Scotland. 2022 (https://www.alcohol-focus-scotland.
org.uk/media/440171/realising-our-rights-how-to-protect-people-from-alcohol-marketing.pdf?utm_
source=Report&utm_medium=PDF&utm_campaign=Alcohol+Marketing, accessed 17 May 2023).[30].
30 Supreme Court of Justice of Argentina, Nobleza Piccardo S.A.I.C. y F. c/ Provincia de Santa Fe, CSJ N 188/2006
(42-N)/CSI, 27 October 2015, p. 43: “the speech that the plaintiff considers impaired has the sole purpose
of fomenting the consumptions of goods and services (…) [but] does not bear a close relationship with the
functioning of the republic and democratic system. This entails that there is no constitutional foundation
for granting it a protection as intense as other manifestations of ideas that comprise part of the necessary
participation and deliberation in any democratic society (…)”; Supreme Court of Appeal of South Africa, BATSA
v. Minister of Health, No. 463/2011, 2012, paras 25-26: “when commercial expression is used, as alleged here,
for the purposes of inducing people to engage in harmful and addictive behaviour, its value becomes tenuous”;
Provincial Court of Nova Scotia (Canada), R v Mader’s Tobacco Store Ltd, NSPC 29 (2013), para. 25: “the sale of
addictive and harmful products is not closely linked to the core values of s. 2(b) and clearly does no merit the
stringent scrutiny accorded to political speech for example, but it does merit scrutiny”.
The CJEU then balanced human health To what extent is user-generated content
protection and the right to health, on the one protected by the freedom of expression?
hand, and the freedom of expression, on the
The question may arise whether limitations
imposed upon the content that can be uploaded
Online platforms can adopt on social media violate freedom of expression.
Here, this question is focused on content
safeguards to ensure the uploaded by users other than brands where
lawfulness of filtering those users are not in a commercial relationship
mechanisms, such as with brands, for example in the context of
an online contest or other viral campaigns.
appropriate targeting of the It can for example be argued that filtering
measures, as well as effective mechanisms developed by online platforms
complaint and redress to avoid unlawful content limit the freedom
of expression. However, online platforms can
mechanisms adopt safeguards to ensure the lawfulness
of such mechanisms, such as appropriate
targeting of their measures, as well as effective
other hand (235). Following this analysis, complaint and redress mechanisms (237).
the CJEU in Philip Morris concluded that
the interference of the EU Tobacco Products The proportionality of restrictions to
Directive with the freedom of expression was the freedom of expression imposed by
proportionate. enforcement measures
The proportionality assessment can be pivotal Enforcement measures imposed upon online
to this analysis. For example, a complete ban on platforms to moderate content, amend or
the advertising of tobacco products was found remove unlawful advertising can also be
to be disproportionate by the Supreme Court challenged for restricting the platform’s
of Canada, as it was not established that pure freedom of expression. Several factors may
information or brand-preference advertising be relevant to whether restrictions are
was connected to an increase in consumption. proportionate, including the time available
Following this finding, the Canadian Parliament for platforms to moderate the content. For
adopted a new instrument permitting example, some laws on content moderation
information and brand-preference advertising require online platforms to remove unlawful
in certain media and certain locations and content within a few hours from the moment
prohibiting other forms of advertising. This new they are notified of the violation, increasing
law was considered constitutional (236). the risk that freedom of expression will be
inadvertently impeded. The proportionality
As this discussion suggests, where marketing of such measures will often depend on the
restrictions of some type are already in place it balance between the interest being protected
is possible that courts have already considered and the freedom being restricted. In this
issues regarding freedom of expression. In the regard, while measures that restrict political
digital context, there are two additional issues speech will often be closely scrutinized by
that might arise. The first concerns to what
courts, measures restricting commercial (243), such as trademarks, which are frequently
speech may be more likely to be upheld. displayed in marketing.
31 This expression is used in Spanish (“libertad de empresa”) and French (“liberté d’entreprise”).
32 For example, in the European region, the freedom to conduct a business is guaranteed in the EU but not in
the Council of Europe. See Charter of Fundamental Rights of the European Union, OJEU C 202, 7 June 2016,
p. 389 (http://data.europa.eu/eli/treaty/char_2016/oj, accessed 17 March 2023), Art. 16; in the Council of
Europe, this freedom is essentially protected through the right to property; Usai A. The freedom to conduct
a business in the EU, its limitations and its role in the European legal order: A new engine for deeper and
stronger economic, social and political integration. German Law Journal. 2013; 14(9):1867-1888, p. 1868.
on the regulated products and trademark • Consider whether the essence of the right
rights could still be asserted to prevent remains intact and/or whether the right should
unauthorized use by third parties). be weighed against the right to health (249).
• Evaluate whether that impact violates the The case law reveals that the right to property
right to property, for example whether the is limited. Courts tend not to find a violation
rights holder is deprived of their property, of this right when States regulate the use of
as compared to that right being regulated or property in the public interest to prevent harm
limited in some way (248). to third parties.
• non-discrimination (for example, that imported goods are not treated less favourably than
like domestic goods, either on the face of a measure or through its effect);
• necessity (for example, that regulations should not be more trade restrictive than necessary
to achieve a legitimate objective such as protection of human health).
WTO law also obliges Members to ensure In general, marketing restrictions have not been
minimum standards of protection for the subject of WTO disputes. The exception
intellectual property rights, including to this concerned tobacco plain packaging in
trademarks, and trade secrets. These and other Australia, which prohibited marks on tobacco
obligations are enforced through a system of packaging and products other than word
dispute settlement, permitting one Member marks in a standardized font, style and size. In
(government) to bring a claim against another, Australia – Tobacco Plain Packaging several
seeking an order that any measure violating Members challenged those restrictions,
WTO law be brought into compliance. including on grounds that they unjustifiably
encumbered use of trademarks in the course
of trade under Article 20 of the Agreement on
33 Such provisions can be found in the Unfair Commercial Practices Directive, the General Data Protection
Regulation, the e-Commerce Directive or the Digital Services Act, for example.
34 See, for example, CJEU, C-262/02 Commission v France, C-429/02 Bacardi France, C-405/98 Gourmet,
or C-1/90 and C-176/90 Aragonesa de Publicidad Exterior, where the restrictions to the free movement
of goods were justified. Compare with CJEU, Case 152/78 Commission v France, where the restriction
constituted a mean of arbitrary discrimination.
References
1 WHO Framework Convention on Tobacco (Digital Economic Papers No. 272; https://
Control, 25 May 2003 (https://fctc.who. www.oecd-ilibrary.org/science-and-tech-
int/who-fctc/overview, accessed 20 nology/online-advertising_1f42c85d-en,
March 2023) (WHO FCTC), Art. 13(3). accessed 16 March 2023), p. 19.
2 WHO FCTC Guidelines for implementation 9 Scope and impact of digital marketing
of Article 13. Geneva: World Health Or- strategies for promoting breast-milk
ganization; 2013 (FCTC 16.6; https://fctc. substitutes. Geneva: World Health
who.int/publications/m/item/tobacco-ad- Organization; 2022 (https://www.who.
vertising-promotion-and-sponsorship, int/publications/i/item/9789240046085,
accessed 20 March 2023), p. 14. accessed 16 March 2023), p. 2.
39 Viet Nam Decree No. 100/2014/ND-CP 43 Online Safety and Media Regulation Bill
on the trading in and use of nutritious 2022, Bill 6 of 2022 (https://data.oireach-
products for infants, feeding bottles and tas.ie/ie/oireachtas/bill/2022/6/eng/
teats, 6 November 2014 (https://faolex. ver_d/b06d22s.pdf, accessed 16 March
fao.org/docs/pdf/vie167953.pdf, accessed 2023), Section 46N (5).
20 March 2023), Art. 6(1).
44 Ibid., Section 139K(5).
45 Singapore Spam Control Act 2007, 15 53 Centre releases guidelines for celebrities,
June 2007 (https://sso.agc.gov.sg/Act/ influencers, and virtual influencers on
SCA2007, accessed 16 March 2023). social media platform [press release].
Delhi: Ministry of Consumer Affairs,
46 Ibid. Food & Public Distribution; 2023 (Press
Information Bureau (pib.gov.in), accessed
47 Australia Spam Act 2003, No 129, 2003 16 March 2023).
(https://www.legislation.gov.au/Details/
C2016C00614, accessed 16 March 2023); 54 Guides Concerning the Use of Endorse-
Australia Spam Regulations 2021, 18 ments and Testimonials in Advertising, 16
March 2021 (https://www.legislation.gov. CFR 255 (https://www.ftc.gov/sites/de-
au/Details/F2021L00285, accessed 16 fault/files/attachments/press-releases/
March 2023). ftc-publishes-final-guides-governing-en-
dorsements-testimonials/091005revise-
48 Japan Act on Regulation of Transmission dendorsementguides.pdf, accessed 16
of Specified Electronic Mail, Act No. 26 of March 2023).
17 April 2002 (https://www.cas.go.jp/jp/
seisaku/hourei/data/ACPT.pdf, accessed 55 Digital Marketing Communications Best
16 March 2023). Practice Recommendation. Brussels:
European Advertising Standards Alliance;
49 Canada Anti-Spam Law [An Act to pro- 2015 (https://www.easa-alliance.org/is-
mote the efficiency and adaptability of the sues/digital-marketing-communications/,
Canadian economy by regulating certain accessed 16 March 2023).
activities that discourage reliance on elec-
tronic means of carrying out commercial 56 Guidelines for Interactive Marketing
activities, and to amend the Canadian Communication and Social Media. Sin-
Radio-television and Telecommunications gapore: Advertising Standards Authority
Commission Act, the Competition Act, of Singapore; 2016 (https://asas.org.sg/
the Personal Information Protection About/Social-Media, accessed 16 March
and Electronic Documents Act and the 2023).
Telecommunications Act], S.C. 2010, c.
23 (https://laws-lois.justice.gc.ca/eng/ 57 Australian Influencer Marketing Code of
acts/e-1.6/fulltext.html, accessed 16 Practice. Sidney: Australian Influencer
March 2023) (CASL). Marketing Council; 2021 (https://
static1.squarespace.com/static/5f-
50 CASL, Sections 6(2) and 10(1). 741c44029c373fe632e647/t/6154157
0a9213843c53d7adb/1632900464874/
51 Singapore Spam Control Act 2007, Second AIMCO_Code_Practice_August+2021.pdf,
Schedule, Section 3(1)(b). accessed 16 March 2023).
52 Ley N° 19.496 que establece normas sobre 58 Influencer Marketing Code of Conduct.
protección de los derechos de los con- London: Incorporated Society of British
sumidores [Law No. 19.496 establishing Advertisers; 2021 (https://www.isba.
rules on consumer protection rights], DFL org.uk/system/files/media/docu-
Núm. 3, Santiago de Chile, 13 September ments/2021-09/ISBA%20Influencer%20
2019 (https://bcn.cl/2pv9x, accessed 16 Marketing%20Code%20of%20Conduct%20
March 2023), Art. 28B, second paragraph. 0921.pdf, accessed 16 March 2023).
59 Guidelines for Influencer Advertising 66 See, for example, Ley N° 19.496 que
in Digital Marketing. Mumbai: The establece normas sobre protección de los
Advertising Standards Council of India; derechos de los consumidores [Law No.
2021 (https://ascionline.in/images/ 19.496 establishing rules on consumer
pdf/guidelines-for-influencer-advertis- protection rights], DFL Núm. 3, Santiago
ing-in-digital-media-final.pdf, accessed 16 de Chile, 13 September 2019 (https://bcn.
March 2023). cl/2pv9x, accessed 16 March 2023), Art.
28; Australian Consumer Law, Schedule
60 See, for example, ICC Advertising and 2 of the Competition and Consumer Act
Marketing Communications Code, Chapter 2010 (Cth) (https://www.legislation.gov.
C: Direct Marketing and Digital Marketing au/Details/C2011C00003, accessed 16
Communications; ARB Code of Advertising March 2023), Section 29.
Practice, Appendix K – Social Media Code.
67 Directive 2005/29/EC of the European
61 .com Disclosures: How to make effective Parliament and of the Council of 11 May
disclosures in digital advertising. Wash- 2005 concerning unfair business-to-con-
ington DC: Federal Trade Commission; sumer commercial practices in the
2013 (https://www.ftc.gov/sites/default/ internal market and amending Council
files/attachments/press-releases/ Directive 84/450/EEC, Directives 97/7/
ftc-staff-revises-online-advertising-dis- EC and 2002/65/EC of the European
closure-guidelines/130312dotcomdisclo- Parliament and of the Council and
sures.pdf, accessed 16 March 2023). Regulation (EC) No 2006/2004 of the
European Parliament and of the Council
62 See for example, in the United States, (‘Unfair Commercial Practices Directive’),
Disclosures 101 for social media influ- OJEU L 149, 11 June 2005, p. 22 (https://
encers. Washington DC: Federal Trade eur-lex.europa.eu/legal-content/EN/TX-
Commission; 2019 (https://www.ftc. T/?uri=CELEX%3A02005L0029-20220528,
gov/system/files/documents/plain-lan- accessed 16 March 2023) (UCPD). For
guage/1001a-influencer-guide-508_1. a broader assessment of the UCPD,
pdf, accessed 16 March 2023); in the see Garde A. The Unfair Commercial
United Kingdom, Influencers’ guide to Practices Directive: A successful example
making clear that ads are ads. London: of legislative harmonization?. In: Syrpis P.
Advertising Standards Authority and The judiciary, the legislature and the EU
Competition and Markets Authority; 2020 internal market. Cambridge: Cambridge
(https://www.asa.org.uk/resource/in- University Press; 2012: 118-146. https://
fluencers-guide.html, accessed 16 March doi.org/10.1017/CBO9780511845680.009.
2023).
68 UCPD, Annex I, No 11; see also United
63 Guidelines for Influencer Advertising Kingdom Consumer Protection from
in Digital Marketing. Mumbai: The Unfair Trading Regulations 2008 (CPRs),
Advertising Standards Council of India; Schedule 1 (https://www.legislation.
2021 (https://ascionline.in/images/ gov.uk/uksi/2008/1277/contents/made,
pdf/guidelines-for-influencer-advertis- accessed 16 March 2023).
ing-in-digital-media-final.pdf, accessed 16
March 2023), para. 1. 69 UCPD, Annex I, No 11a.
ley-nacional-control-tabaco-26687.pdf, protection-personal-information-act,
accessed 16 March 2023). accessed 20 March 2023) (POPIA), Section
1(c).
90 Ley 26.522 (Boletín Oficial N° 31.756,
10/10/09) Regúlanse los Servicios de 94 GDPR, Art. 9(1); Thailand Data Protection
Comunicación Audiovisual en todo el ám- Act 2019 (https://www.dataguidance.
bito territorial de la República Argentina com/notes/thailand-data-protection-over-
[Argentinian law on audiovisual media view, accessed 20 March 2023), Section
services] (https://www.enacom.gob.ar/ 26; Lei N° 13.709, de 14 de Agosto de
multimedia/normativas/2009/Ley%20 2018, Lei Geral de Proteção de Dados
26522.pdf, accessed 16 March 2023), Art. Pessoais [Brazil Law No. 13.709 of 14
103. August 2018, General Personal Data
Protection Law] (https://www.planalto.
91 Regulating digital marketing of alcohol: gov.br/ccivil_03/_ato2015-2018/2018/
challenges and opportunities [website]. lei/l13709.htm, accessed 20 March 2023)
Washington DC: Center for Digital Democ- (LGPD), Art. 11.
racy; 2022 (https://www.democraticme-
dia.org/article/regulating-digital-market- 95 CJEU, C-184/20 Vyriausioji tarnybinės
ing-alcohol-challenges-and-opportunities, etikos komisija [2022] EU:C:2022:601: the
accessed 16 March 2023). processing of personal data that are liable
to indirectly reveal sensitive information
92 Comments of Center for Digital Democ- concerning a natural person is not ex-
racy, Fairplay, #HalfTheStory and others cluded from the strengthened protection
before the Federal Trade Commission regime prescribed by Article 9(1) of the
in the matter of Trade Regulation Rule GDPR (para. 127).
on Commercial Surveillance and Data
Security. Washington DC: Federal 96 GDPR, Art. 22(4).
Trade Commission; 2022 (https://www.
democraticmedia.org/sites/default/files/ 97 See See, GDPR, Art. 4(11); Nigeria Data
field/public-files/2022/cdd_fairplay_an- Protection Regulation 2019, Art. 1(3)(iii);
prmcomments.pdf, accessed 16 March Australian Privacy Principles Guidelines,
2023). Privacy Act 1988 (https://www.oaic.gov.
au/__data/assets/pdf_file/0009/1125/
93 See, for example, EU Regulation (EU) app-guidelines-july-2019.pdf, accessed
2016/679 of the European Parliament 20 March 2023) (APP Guidelines), para.
and of the Council of 27 April 2016 on B.35. Each of the conditions are typically
the protection of natural persons with provided in the law.
regard to the processing of personal
data and on the free movement of such 98 Data Protection Commission announces
data, and repealing Directive 95/46/ conclusion of two inquiries to Meta
EC, OJEU L 199, 4 May 2016, p. 1 (http:// Ireland [website]. Dublin: Data Protection
data.europa.eu/eli/reg/2016/679/oj, Commission; 2023 (https://www.
accessed 20 March 2023) (GDPR), Art. dataprotection.ie/en/news-media/
4(1); Nigeria Data Protection Regulation data-protection-commission-announc-
2019 (https://ndpb.gov.ng/Files/Nigeri- es-conclusion-two-inquiries-meta-ireland,
aDataProtectionRegulation.pdf, accessed accessed 16 March 2023).
20 March 2023), Art. 1(3)(xix); South Africa
Protection of Personal Information Act 99 TikTok: Italian SA warns against ‘person-
2013 (https://www.gov.za/documents/ alised’ ads based on legitimate interest
117 Crawford J. Brownlie’s principles of 125 The Code for Self-Regulation of Adver-
public international law. 9th edition. tising Content in India. Mumbai: The
Oxford: Oxford University Press; Advertising Standards Council of India;
2019. https://doi.org/10.1093/ 2021 (https://ascionline.in/images/pdf/
he/9780198737445.001.0001. code_book.pdf, accessed 16 March 2023),
p. 4.
118 Tobacco Products Control Act of A.D.
2017, Government Gazette of 5 April 2017, 126 Singapore Spam Control Act 2007, 15
Vol. 134, Part 39 A, Art. 30 [unofficial June 2007 (https://sso.agc.gov.sg/Act/
translation] (Thailand - TC Act 2017.pdf SCA2007, accessed 16 March 2023),
(tobaccocontrollaws.org), accessed 16 Second Schedule, Section 7(2).
March 2023.
127 TJ Paris, 5 janvier 2023, Affaire Addiction
119 Competition and Consumer Act 2010 (Cth) France/Meta – Influenceurs et alcool sur
(https://www.legislation.gov.au/Details/ Instagram [press release]. Paris: Asso-
C2011C00003, accessed 16 March 2023), ciation Addictions France; 2023 (https://
Section 5. addictions-france.org/datafolder/
uploads/2023/02/TJ-PARIS-META-com-
120 Ley 13/2022, de 7 de julio, General mentaire-decision-Addictions-France.pdf,
de Comunicación Audiovisual, BOE accessed 16 March 2023).
núm. 163 [General Law on Audiovisual
Communication] (https://www.boe.es/
128 Marco Civil da Internet [Law of the 133 Children and advertising on social
Internet], Law No. 12.965, 23 April 2014 media websites – ASA compliance
(https://www.in.gov.br/materia/-/ survey. London: Advertising Standards
asset_publisher/Kujrw0TZC2Mb/content/ Authority; 2013, (https://www.asa.org.
id/30054611/do1-2014-04-24-lei-n-12- uk/static/uploaded/2747d8d6-ff84-40fc-
965-de-23-de-abril-de-2014-30054600, 9736bd16d95968d6.pdf, accessed 16
accessed 16 March 2023), Art. 11. March 2023).
129 Economic Commission for Latin America 134 Monitoring and restricting digital
and the Caribbean (ECLAC), Internet & marketing of unhealthy products to
Jurisdiction Policy Network (I&JPN). children and adolescents. Moscow: World
Internet & Jurisdiction Regional Status Health Organization Regional Office for
Report 2020 – Latin America & Caribbean. Europe; 2018 (https://www.euro.who.
Santiago: United Nations; 2020 (https:// int/__data/assets/pdf_file/0008/396764/
www.cepal.org/sites/default/files/ Online-version_Digital-Mktg_March2019.
publication/files/46421/S1901092_en.pdf, pdf, accessed 16 March 2023), p. 60.
accessed 16 March 2023), p. 100; OneTrust
DataGuidance, Blumenthal Richter & 135 Age appropriate design: a code of practice
Sumet. Comparing privacy laws: GDPR for online services. London: Information
v Thai Personal Data Protection Act. Commissioner’s Office; 2020 (https://
Atlanta/London: OneTrust DataGuidance ico.org.uk/media/for-organisations/
(https://www.dataguidance.com/sites/ guide-to-data-protection/ico-codes-of-
default/files/gdpr_v_thailand_updated. practice/age-appropriate-design-a-code-
pdf, accessed 16 March 2023), p. 9.The of-practice-for-online-services-2-1.pdf,
wording of the Thai Personal Data Protec- accessed 16 March 2023).
tion Act is identical to the EU GDPR.
136 Age, ID and financial verification.
130 Nigeria Data Protection Regulation 2019, London: Gambling Commission (https://
Art. 1(2)(b); Comparing privacy laws: www.gamblingcommission.gov.uk/
GDPR v Nigeria Data Protection Regula- public-and-players/guide/age-and-id-ver-
tion. Atlanta/London: OneTrust DataGu- ification, accessed 16 March 2023).
idance (https://www.dataguidance.com/
sites/default/files/gdpr_v._nigeria.pdf, 137 Pasquale L, Zippo P, Curley C, O’Neill
accessed 16 March 2023). B, Mongiello M. Digital age of consent
and age verification: Can they protect
131 Tribunal de grande instance de Paris, La children?. IT Professional. 2019 (https://
Ligue Contre le Racisme et l’Antisémi- lpasquale.github.io/papers/IEEESoftware.
tisme (LICRA) and l’Union des Etudiants pdf, accessed 16 March 2023).
Juifs de France (UEJF) v. Yahoo Inc! and
Yahoo France [2000]. 138 Ibid.
157 Time to ban surveillance-based 164 Health and Care Act 2022 (https://www.
advertising – The case against com- legislation.gov.uk/ukpga/2022/31/
mercial surveillance online. Norwegian
165 Singer N. Utah law could curb use of Tik- 171 Online Safety and Media Regulation Bill
Tok and Instagram by children and teens. 2022, Bill 6 of 2022 (https://data.oireach-
The New York Times. 23 March 2023 tas.ie/ie/oireachtas/bill/2022/6/eng/
(https://www.nytimes.com/2023/03/23/ ver_d/b06d22s.pdf, accessed 16 March
technology/utah-social-media-law-tik- 2023), Section 139K (5).172 Carah N
tok-instagram.html); S.B. 152 Social and Brodmerkel S. Regulating platforms’
media regulation amendments, 2023 algorithmic brand culture: The instructive
General Session, State of Utah, Section case of alcohol marketers on social media.
13-63-105. In: Flew T and Martin FR, editors. Digital
platform regulation: Global perspectives
166 S.B. 152 Social media regulation amend- on Internet governance. Cham: Palgrave
ments, 2023 General Session, State of Macmillan. 2022; 111-131. https://doi.
Utah, Section 13-63-103. org/10.1007/978-3-030-95220-4_6, p. 112.
167 Age-restricted ads online – Advertising 173 Brooks R, Chritidis R, Carah N, Kelly B,
guide (non-broadcast). London: Commit- Martino F, Backholer K. Turning users into
tee of Advertising Practice; 2021 (https:// ‘unofficial brand ambassadors’: marketing
www.asa.org.uk/static/72a4e889-1657- of unhealthy food and non-alcoholic
43e9-bf6ac0157fa2f72c/Age-restricted- beverages on TikTok. BMJ Global Health.
ads-online-2021-guidance.pdf, accessed 2022; 7(6):1-9.
16 March 2023), pp. 8-9.
174 Advanced country practices in the
168 Scope and impact of digital marketing implementation of WHO FCTC Article
strategies for promoting breast-milk 13 and its guidelines: Combatting
substitutes. Geneva: World Health cross-border advertising and depiction of
Organization; 2022 (https://www.who. tobacco in entertainment media [website].
int/publications/i/item/9789240046085, Geneva: FCTC Secretariat; 2018 (https://
accessed 16 March 2023), p. 17. fctc.who.int/publications/m/item/
advanced-country-practices-in-the-imple-
169 BAT – Surreptitious advertising of Glo on mentation-of-who-fctc-article-13-and-its-
social media [website]. Tobacco Control guidelines-combatting-cross-border-ad-
Laws; 2021 (https://www.tobaccocontrol- vertising-and-depiction-of-tobacco-in-en-
laws.org/litigation/decisions/bat-surrep- tertainment-media, accessed 17 March
titious-advertising-of-glo-on-social-media, 2023), p. 7-9.
accessed 16 March 2023).
175 VIVID – Virtual Violations Detector (code.
170 Kauppila E, Lindeman M, Svensson J, corporateaccountabilitytool.org, accessed
Hellman M and Katainen A. Alcohol 17 March 2023).
marketing on social media sites in Finland
and Sweden: A comparative audit study of 176 Monitoring and restricting digital
brands’ presence and content, and the im- marketing of unhealthy products to
pact of a legislative change. Helsinki: Pub- children and adolescents. Moscow: World
lications of the Faculty of Social Sciences, Health Organization Regional Office for
University of Helsinki; 2019 (https:// Europe; 2018 (https://www.euro.who.
tuhat.helsinki.fi/ws/files/123530935/ int/__data/assets/pdf_file/0008/396764/
Alcohol_marketing_on_social_me-
191 Dent S. Instagram warns you if posts 197 ASCI investigates advertisements for
show harm to animals or nature. liquor brand extensions appearing during
Endgadget. 4 December 2017 (https:// IPL [press release]. Mumbai: Advertising
www.engadget.com/2017-12-04-insta- Standards Council of India; 2020 (https://
gram-warning-harm-to-animals-environ- ascionline.in/images/pdf/pr_surro-
ment.html, accessed 17 March 2023). gate_advertising_2nd_november_2020.
pdf, accessed 17 March 2023).
192 Directive (EU) 2019/790 of the European
Parliament and of the Council of 17 April 198 Anand S. ASCI bans surrogate advertising
2019 on copyright and related rights in of 12 liquor companies. The Economic
the Digital Single Market and amending Times. 18 January 2021 (https://
Directives 96/9/EC and 2001/29/EC, economictimes.indiatimes.com/industry/
OJEU L 130, 17 May 2019, p. 92 (http:// cons-products/liquor/asci-bans-surro-
data.europa.eu/eli/dir/2019/790/oj, gate-advertising-of-12-liquor-companies/
accessed 17 March 2023). articleshow/80328835.cms?from=mdr,
accessed 17 March 2023).
193 FTC, FDA take action against companies
marketing e-liquids that resemble chil- 199 Goldman E. Content moderation remedies.
dren’s juice boxes, candies, and cookies Michigan Technology Law Review. 2021;
[press release]. Washington DC: Federal BMJ Global Health. 2022; 28(1):1-59, p. 34.
Trade Commission; 2018 (https://www.
ftc.gov/news-events/news/press-releas- 200 About Google Ads policy account
es/2018/05/ftc-fda-take-action-against- suspensions. Google (https://
companies-marketing-e-liquids-resemble- support.google.com/adspolicy/
childrens-juice-boxes-candies, accessed answer/2375414?hl=en#:~:text=Re-
17 March 2023). peated%20violations%20of%20any%20
Google,taken%2C%20in%20order%20
194 Non-compliant social media influencers to%20comply., accessed 12 April 2023).
and brands [website]. Mumbai: The
Advertising Standards Council of 201 Comparative study on blocking,
India (https://asci.social/noncompliant, filtering and take-down of illegal Internet
accessed 17 March 2023). content. Lausanne: Swiss Institute of
Comparative Law; 2017 (https://edoc.
195 Ad Standards Community Panel, Case coe.int/en/internet/7289-pdf-com-
No. 0086-22, Heart Attacks Diner, 27 parative-study-on-blocking-filter-
April 2022 (https://adstandards.com. ing-and-take-down-of-illegal-internet-con-
au/sites/default/files/reports/case_re- tent-.html, accessed 17 March 2023), p.
port_0086-22.pdf, accessed 17 March 12.
2023).
202 Federal Law No. 436 – FZ of 2010 on the
196 Tribunal judiciaire de Nanterre, ordon- Protection of Children from Information
nance de référé, Comité national contre Harmful to their Health and Development,
le tabagisme c. BAT France, Case No. 29 December 2010 (https://www.
20/00977, 12 February 2021 (https:// refworld.org/docid/5492c9964.html,
www.doctrine.fr/d/TJ/Nanterre/2021/ accessed 17 March 2023), Art. 5(2).
U9EE1781F5318B7484084, accessed 17
March 2023). 203 HSA prosecutes three persons for selling
electronic cigarettes [press release].
Singapore: Health Sciences Authority;
Tobacco Panama, S.A. v. The Ministry of 43; British American Tobacco (UK) v. The
Health, Case No. 192 -11, 28 May 2014. Secretary of State for Health (Court of
Appeal).
236 Supreme Court of Canada, Canada
(Attorney General) v JTI-Macdonald Corp. 246 British American Tobacco Colombia v.
[2007] 2 SCR 610. Ministerio de Salud, Consejo de Estado
(2015).
237 See, similarly, CJEU, C-401/19
Poland v Parliament and Council [2022] 247 High Court of Australia, JT International
EU:C:2022:297. v Commonwealth of Australia [2012] HCA
43; British American Tobacco (UK) v. The
238 International Covenant on Economic, Secretary of State for Health (Court of
Social and Cultural Rights, Art. 6(1). Appeal).
239 CJEU, C-544/10 Deutsches Weintor [2012] 248 British American Tobacco (UK) v. The
EU:C:2012:526. Secretary of State for Health (Court of
Appeal); CJEU, C-491/01 BAT [2002]
240 CJEU, C-477/14 Pillbox 38 [2016] EU:C:2002:741; CJEU, C-220/17 Planta Ta-
EU:C:2016:324, paras. 161-162; Consti- bak [2019] EU:C:2019:76; Supreme Court
tutional Court of Colombia, C-830/10, 20 of Justice of Panama, Rodriguez Robles
October 2010. & Espinosa on behalf of British American
Tobacco Panama, S.A. v. The Ministry of
241 CJEU, C-544/10 Deutsches Weintor [2012] Health, Case No. 192 -11, 28 May 2014.
EU:C:2012:526, para. 48; Supreme Court
of Spain – Civil Division, STS 891/2010, 249 CJEU, C-477/14 Pillbox 38 [2016]
3 January 2011; Constitutional Court EU:C:2016:324 ; Supreme Court of Justice
of Peru, judgment 32-2010-PI/TC, 5000 of Panama, Rodriguez Robles & Espinosa
ciudadanos contra el artículo 3° de la Ley on behalf of British American Tobacco
N.° 28705, 19 July 2011. Panama, S.A. v. The Ministry of Health,
Case No. 192 -11, 28 May 2014; British
242 Universal Declaration of Human Rights, American Tobacco Colombia v. Ministerio
Art. 17; African Charter on Human and de Salud, Consejo de Estado (2015).
People’s Rights, Art. 14; American Con-
vention on Human Rights, Art. 21; Arab 250 Panel Report, Australia—Certain Measures
Charter on Human Rights, Art. 31; Euro- concerning Trademarks, Geographical
pean Convention of Human Rights, First Indications and other Plain Packaging
Protocol, Art. 1; Charter of Fundamental Requirements applicable to Tobacco
Rights of the European Union, Art. 17. Products and Packaging, WTO Docs WT/
DS435/R, WT/DS441/R, WT/DS458/R,
243 See, for example, Charter of Fundamental WT/DS467/R, Add.1 and Suppl.1 (28 June
Rights of the European Union, Art. 17(2): 2018), para. [7.2430].
“Intellectual property shall be protected”.
251 Ibid, para. 7.2233.
244 CJEU, C-491/01 BAT [2002]
EU:C:2002:741; CJEU, C-220/17 Planta
Tabak [2019] EU:C:2019:76.
Legislative 1.1) Restrict digital marketing of specific product categories in a sector specific
coordination law specifying:
to restrict • prohibited and restricted practices
marketing • jurisdictional reach
and allocate • liability provisions
authority
• enforcement powers, procedures and measures (including those linked to
for effective
other provisions of sector specific laws, such as licensing measures)
monitoring and
enforcement 1.2) Include cross-references in sector specific laws to other relevant laws
governing marketing, coordinating the substantive restrictions, monitoring and
enforcement.
Or,
2.1) Strengthen existing laws applicable to marketing (including consumer
protection, data protection, media, digital markets / regulation of the Internet)
to create sector-specific restrictions where they do not otherwise exist and
enable their monitoring and enforcement.
2.2) Include cross-references in laws applicable to marketing to sector specific
laws establishing marketing restrictions to ensure coordination and bring
sector specific restrictions within the scope of laws applicable to marketing and
their enforcement regimes.
3) Adopt a broad and (non-exhaustive) definition of marketing covering digital
marketing and future innovation to the greatest extent possible.
4) Include enabling provisions in legislation granting regulatory powers to
government agencies that enable them to adapt to future innovations in
digital marketing, including by prohibiting and restricting practices and using
monitoring mechanisms.
5) Where industry codes are in place, link them to formal laws to make them
enforceable.
User-generated 1) Regulate influencers directly, such as where those influencers are a national
and influencer or present in the jurisdiction.
content 2) Prohibit or restrict advertisers from using influencers for prohibited forms of
marketing i.e., ensure marketing restrictions applicable to advertisers extend to
use of influencer marketing.
3) Regulate online platforms, placing obligations on them with respect to
influencer marketing, including an obligation to disclose marketing and prevent
or remove prohibited influencer marketing.
Legal 1) Assess which constitutional and international human rights are applicable in
considerations your country and can justify restrictions (right to health, rights of the child, right
to food).
2) Assess which constitutional rights and freedoms, international human
rights, and trade obligations may be relevant to your ability to restrict digital
marketing (freedom of expression, right to property, trade obligations).
3) Base policy objectives and digital marketing restrictions on a theory of
change
4) Collect and consider evidence of the risks associated with digital marketing
(exposure, power, consumer perceptions and behavior) and the impact of
restrictions.
5) Define proportionate rules and provide procedural safeguards to restrictions.
Annex 2 – Assessing a
country’s legal environment
The following table is designed to be used to support desk research and/or semi-structured key
informant interviews to map the existing legal environment relevant to digital marketing.
Sector-specific laws:
Advertising laws:
Audiovisual/Broadcasting laws:
Other laws:
Disclosure obligations:
Other:
Public authorities:
No Yes
If yes, please provide details:
How does your country Individual inspectors (if so, please provide details – how many
monitor digital marketing inspectors, to which authority are they attached…):
practices?
Artificial intelligence:
Disclosure obligations:
Other:
Does any of the FTAs your country has concluded have obligations of
relevance to digital marketing, such as commitments on broadcasting,
e-commerce or others?
No Yes