Competition Law and Verification Service Monopolies

Introduction

Verification services are services that establish, authenticate, certify, or validate the identity, status, quality, safety, ownership, eligibility, or reliability of a person, product, business, transaction, or digital credential. Examples include:

• digital identity and KYC verification;
• credit and financial-information verification;
• professional and educational credential verification;
• product authentication and certification;
• payment and transaction verification;
• age and eligibility verification;
• cybersecurity and trust verification;
• domain, certificate, and digital-signature verification;
• marketplace seller verification; and
• regulatory or standards-based certification.

A verification service monopoly arises when one undertaking controls a verification infrastructure or dataset that competitors, customers, regulators, or downstream businesses substantially need in order to participate in a market.

Competition law becomes particularly important where the verification provider can use its position to deny access, discriminate between users, impose excessive or discriminatory prices, tie verification to another service, restrict interoperability, exploit data advantages, or extend its monopoly into adjacent markets.

The legal analysis generally concerns market definition, dominance, refusal to deal, discriminatory access, essential-facility considerations, tying, excessive pricing, self-preferencing, interoperability, data advantages, and exclusionary conduct.

1. Relevant Market

The first question is whether the verification service constitutes a separate relevant market.

Possible relevant markets

Depending upon the circumstances, competition authorities may define markets for:

1. identity-verification services;
2. business verification services;
3. credit-information verification;
4. professional-credential verification;
5. product-authentication services;
6. digital-signature and certificate services;
7. payment-verification services;
8. cybersecurity verification;
9. platform-specific verification services; or
10. verification services for a particular regulated industry.

The market may be narrower than the broader information-services market if customers cannot reasonably substitute the particular verification service.

For example, if a regulator requires certification from a particular accredited provider, alternative verification systems may provide little competitive constraint.

2. How Monopoly Power Can Arise

Verification markets have several structural characteristics capable of producing substantial market power.

A. Network effects

A verification service becomes more valuable when more businesses accept its verification.

More acceptance → more users → more data → greater reliability → more acceptance.

This can create a self-reinforcing market position.

B. Data accumulation

A dominant verification provider may possess:

• identity records;
• transaction histories;
• fraud databases;
• authentication histories;
• device information;
• credit information; and
• behavioural information.

Competitors may therefore face a significant data disadvantage.

C. Regulatory accreditation

Some verification activities require government or industry accreditation.

If only one provider is authorized or practically capable of satisfying the applicable regulatory requirements, its position can become particularly strong.

D. Switching costs

Businesses may have invested heavily in integrating a verification API.

Changing provider may require:

• software redevelopment;
• customer re-verification;
• regulatory approval;
• migration of historical records; and
• contractual renegotiation.

Consequently, even a technically replaceable verification service may be difficult to switch away from.

3. Refusal to Provide Verification Access

A dominant verification provider may refuse to verify competitors' customers or refuse access to a verification database.

The competition-law question is whether the refusal is an ordinary commercial decision or an exclusionary abuse.

Relevant considerations include:

• whether the verification service is indispensable;
• whether alternatives exist;
• whether duplication is technically or legally possible;
• whether access is necessary for effective downstream competition;
• whether refusal eliminates or substantially weakens competition;
• whether objective justification exists; and
• whether the provider itself operates in a downstream market.

A particularly serious concern arises where a verification provider operates a downstream platform and refuses verification access to competing platforms.

4. Essential-Facility Considerations

Verification infrastructure can sometimes raise an essential-facility-type problem.

The classical questions include:

1. Is access to the facility genuinely indispensable?
2. Is duplication realistically possible?
3. Would refusal eliminate or substantially restrict competition?
4. Can access be provided without undermining legitimate commercial or security interests?
5. Is there an objective justification for refusal?

The doctrine is applied cautiously because competition law normally does not require firms to assist competitors.

5. Discriminatory Verification

A dominant provider may give preferential treatment to certain businesses.

Examples include:

• lower verification fees for affiliated companies;
• faster verification for the provider's own platform;
• higher rejection rates for competitors;
• different API limits;
• discriminatory fraud-screening standards;
• delayed verification of rival platforms; or
• preferential access to verification data.

Such conduct can become particularly problematic when the provider is both a verification infrastructure operator and a downstream competitor.

6. Excessive Pricing

A monopoly verification provider may charge very high fees where customers have no realistic alternative.

Competition authorities may examine:

• the relationship between price and cost;
• prices charged in comparable markets;
• historical prices;
• international benchmarks;
• profitability;
• quality of service; and
• whether the provider's market power permits prices substantially above competitive levels.

However, high prices alone do not automatically establish an infringement.

7. Tying and Bundling

A verification monopolist may require customers to purchase another product as a condition of receiving verification.

For example:

"Businesses can obtain verification only if they also purchase our payment-processing service."

Potential concerns arise where:

• verification is a distinct product;
• the provider has substantial power in verification;
• customers are effectively forced to purchase the tied product; and
• the practice forecloses competing suppliers.

The same reasoning can apply to:

• identity verification + payment processing;
• certification + insurance;
• verification + cloud hosting;
• authentication + advertising; or
• verification + marketplace access.

8. Self-Preferencing

Suppose a verification platform also operates an online marketplace.

It could potentially:

• verify its own sellers immediately;
• rank its own verified sellers more prominently;
• impose stricter verification on rival sellers;
• make competing verification badges less visible; or
• give its own downstream service superior access to verification data.

This creates a vertical foreclosure concern.

The central question is whether the conduct disadvantages rivals by exploiting control over an upstream verification bottleneck.

9. Data as a Competitive Advantage

Verification monopolies can produce enormous informational advantages.

A dominant provider may know:

• which customers are genuine;
• which transactions were rejected;
• fraud patterns;
• identity relationships;
• business relationships;
• transaction histories; and
• risk characteristics.

If competitors cannot obtain equivalent information, the provider may gain an enduring competitive advantage.

Competition concerns become stronger where the provider:

1. restricts portability;
2. prevents customers from exporting verification histories;
3. combines verification data with other datasets;
4. uses competitor-generated information for its own services; or
5. refuses technically feasible interoperability.

10. Interoperability

Interoperability can be critical in verification markets.

A business may need its verification credentials to work across multiple platforms.

If a dominant provider deliberately makes its credentials interoperable only with its own ecosystem, customers may become locked in.

Potential remedies include:

• API access;
• standardized verification protocols;
• data portability;
• interoperability requirements;
• transparent technical standards; and
• non-discriminatory access.

11. Six Important Case Laws

1. Commercial Solvents Corp. v. Commission

Cases 6/73 and 7/73, European Court of Justice (1974)

Commercial Solvents was dominant in the production of certain raw materials and also operated in a downstream market.

It stopped supplying a downstream customer that competed with its own downstream activity.

Principle

A dominant undertaking controlling an input cannot use that control to eliminate a downstream competitor where the conduct lacks adequate justification.

Relevance to verification monopolies

The case is highly relevant where:

Verification provider → controls indispensable verification input → also competes downstream.

For example, if a verification company provides identity authentication to competing marketplaces but refuses to authenticate them while operating its own marketplace, the vertical foreclosure analysis becomes important.

2. United Brands v. Commission

Case 27/76, European Court of Justice (1978)

The Court considered United Brands' conduct in relation to its dominant position in the banana market.

The case is particularly significant for:

• dominance;
• market definition;
• discriminatory conditions; and
• exploitative conduct.

Principle

A dominant undertaking has a special responsibility not to impair genuine competition in the market.

Verification relevance

A verification monopolist may violate competition law if it imposes discriminatory commercial conditions on customers without objective justification.

For example:

Rival platform: high verification fee
Affiliated platform: substantially lower verification fee

Such differences require careful examination.

3. Magill TV Guide / RTE and ITP

Joined Cases C-241/91 P and C-242/91 P, European Court of Justice (1995)

The case concerned copyright-protected television programme information controlled by broadcasters.

The broadcasters refused to license information necessary for a competing television guide.

Principle

Under exceptional circumstances, refusal to license an indispensable input may constitute an abuse of dominance.

The Court identified factors concerning:

• indispensability;
• elimination of competition;
• prevention of a new product for which consumer demand exists; and
• absence of justification.

Verification relevance

This is particularly important for verification databases.

Suppose one provider controls the only practically indispensable verification database and refuses competitors access.

The Magill framework provides an important reference point for assessing whether the refusal goes beyond legitimate control of proprietary information.

4. Bronner v. Mediaprint

Case C-7/97, European Court of Justice (1998)

The case concerned access to a newspaper home-delivery network.

The Court adopted a strict approach to compulsory access.

Principle

A facility will not automatically be considered indispensable simply because competitors would find it difficult or expensive to reproduce.

The requirement of indispensability is therefore important.

Verification relevance

A verification provider cannot automatically be required to open its database merely because competitors would benefit from access.

The analysis would ask:

• Can another verification database be created?
• Can businesses obtain verification elsewhere?
• Are legal or technical barriers preventing duplication?
• Is the database genuinely indispensable?

This prevents the essential-facility doctrine from becoming a general obligation to share commercial assets.

5. IMS Health v. Commission

Cases C-418/01 P and C-280/01 P, European Court of Justice

IMS Health concerned a dominant provider's control over a market-information structure used by pharmaceutical companies.

Principle

The Court emphasized the exceptional circumstances required before refusal to license intellectual property can amount to abuse.

The case reinforced the importance of:

• indispensability;
• elimination of effective competition;
• absence of objective justification; and
• circumstances involving new products or services.

Verification relevance

A dominant verification-data provider could invoke intellectual-property, security, privacy, or investment interests.

Accordingly, competition authorities would need to distinguish between:

legitimate protection of proprietary verification infrastructure

and

strategic denial of access designed to exclude competitors.

6. Microsoft Corp. v. Commission

Case T-201/04, General Court of the European Union (2007)

Microsoft was found to have abused its dominant position through conduct involving interoperability information and tying.

The interoperability issue was especially important.

Principle

A dominant undertaking controlling important interoperability information may, under appropriate circumstances, be subject to obligations designed to prevent exclusion of competitors.

Verification relevance

This is highly relevant to modern verification ecosystems.

For example, a dominant verification provider might control:

• authentication protocols;
• APIs;
• verification tokens;
• identity credentials;
• security interfaces; or
• technical documentation.

If competitors cannot effectively interoperate with the dominant system, competition may be impaired.

7. Google Shopping

Case T-612/17, Google and Alphabet v. Commission

The European Commission found that Google had abused its dominant position by giving preferential treatment to its comparison-shopping service in general search results.

The General Court upheld the Commission's decision in substantial respects.

Principle

A platform possessing significant market power may face competition concerns where it uses control over an important platform infrastructure to favour its own downstream service.

Verification relevance

The analogy is significant for verification platforms.

A dominant verification platform could potentially:

control verification infrastructure → verify its own downstream service preferentially → disadvantage rival platforms.

The legal analysis would depend on the precise market structure and effects.

8. Slovak Telekom v. Commission

Joined Cases C-165/19 P and C-166/19 P, Court of Justice of the European Union (2021)

The case concerned access to telecommunications infrastructure controlled by a dominant operator.

Principle

Competition law can address discriminatory or exclusionary use of infrastructure where access conditions affect downstream competition.

Verification relevance

Verification networks can similarly function as upstream infrastructure.

Where competing downstream businesses depend upon the infrastructure, discriminatory access conditions can produce foreclosure effects.

9. Google Android

Case T-604/18, Google and Alphabet v. Commission

The case concerned Google's conduct involving Android, including tying arrangements involving different Google services.

Principle

Tying and contractual restrictions imposed by a dominant undertaking can be examined for their ability to reinforce dominance and restrict competing services.

Verification relevance

A dominant verification provider could potentially tie verification to:

• payment processing;
• cloud services;
• advertising;
• marketplace participation;
• identity-management software; or
• other complementary services.

The competitive analysis would depend on dominance, separate products, coercion, foreclosure, efficiencies, and effects.

12. Application to Digital Verification Platforms

Modern verification monopolies may be particularly difficult because they combine several sources of market power.

Example

Assume VerifyCo operates the largest business-identity verification network.

It controls:

• 80% of verified business records;
• a widely adopted API;
• historical fraud information;
• identity credentials; and
• regulatory accreditation.

It also launches its own marketplace.

VerifyCo then:

1. provides immediate verification to its own marketplace;
2. delays rival marketplace verification;
3. charges rivals higher fees;
4. refuses API interoperability;
5. prevents portability of verification histories; and
6. requires businesses to use VerifyCo payment services.

The conduct could raise several distinct competition concerns.

Importantly, market power alone does not establish an infringement. The actual conduct, justification, competitive effects, and applicable jurisdictional law must be examined.

13. Verification Monopolies and Consumer Harm

Competition problems may ultimately affect consumers through:

Higher prices

Businesses may pass verification costs to consumers.

Reduced innovation

Potential entrants may be unable to develop alternative verification systems.

Reduced privacy

A concentrated verification market may create incentives to accumulate increasingly comprehensive datasets.

Reduced security

If customers cannot change providers, the dominant provider may face weaker competitive pressure to improve security.

Reduced choice

Businesses may be forced to use one verification ecosystem.

Lower quality

Competition can be weakened where customers cannot credibly switch to alternative verification providers.

14. Legitimate Justifications

A verification provider may have legitimate reasons for refusing access or imposing conditions.

These can include:

• cybersecurity;
• fraud prevention;
• protection of personal information;
• regulatory compliance;
• intellectual-property protection;
• technical capacity constraints;
• reliability requirements;
• prevention of identity theft;
• protection of confidential information; and
• substantial investments required to maintain the verification infrastructure.

Competition law should therefore distinguish legitimate security and quality controls from restrictions whose principal effect is to exclude competitors.

15. Possible Remedies

Where an infringement is established, possible remedies can include:

Structural remedies

• divestiture;
• separation of verification and downstream businesses;
• restrictions on vertical integration.

Behavioural remedies

• non-discriminatory access;
• transparent pricing;
• interoperability;
• API access;
• data portability;
• prohibition of tying;
• equal verification standards;
• firewalls between business units; and
• non-exclusive contracting.

Regulatory remedies

In highly regulated verification markets, competition authorities may coordinate with:

• financial regulators;
• data-protection authorities;
• telecommunications regulators;
• cybersecurity regulators;
• accreditation authorities; and
• consumer-protection authorities.

16. Competition-Law Test for Verification Monopolies

A useful examination framework is:

Step 1 – Define the market
↓
Step 2 – Establish dominance or substantial market power
↓
Step 3 – Identify the verification bottleneck
↓
Step 4 – Examine the conduct
↓
Step 5 – Test indispensability
↓
Step 6 – Examine foreclosure effects
↓
Step 7 – Consider objective justification and efficiencies
↓
Step 8 – Assess consumer and innovation effects
↓
Step 9 – Consider interoperability/data-portability requirements
↓
Step 10 – Determine appropriate remedy

Conclusion

Verification service monopolies present a distinctive competition-law problem because verification can operate as a gateway to participation in an entire downstream market. Market power may arise from network effects, regulatory accreditation, proprietary databases, accumulated verification histories, interoperability advantages, switching costs, and control over trusted credentials.

The principal competition concerns are refusal to provide indispensable verification, discriminatory access, excessive pricing, tying and bundling, self-preferencing, exclusionary interoperability restrictions, data leveraging, and contractual exclusivity.

The cases of Commercial Solvents, United Brands, Magill, Bronner, IMS Health, Microsoft, Google Shopping, Slovak Telekom, and Google Android provide useful doctrinal reference points. Their principles do not mean that every verification provider must share its infrastructure; rather, they help analyse when control over a verification bottleneck may be used in a manner that restricts downstream competition.

For modern digital markets, the most important analytical distinction is between legitimate control of a secure and proprietary verification system and strategic exploitation of verification infrastructure to exclude competing providers or extend monopoly power into adjacent markets.