Identity Reputation Fusion Systems and Systemic Lock-In

1. Introduction

Identity reputation fusion systems are digital systems that combine a person's identity information with data about their behaviour, transactions, reliability, preferences, social connections, creditworthiness, professional history, platform activity, or other reputation indicators. The resulting profile can then be used across multiple services—for example, payments, employment, lending, marketplaces, social networks, insurance, advertising, or access-control systems.

The competition concern arises when one undertaking or platform becomes the central identity-and-reputation intermediary and competitors cannot effectively operate without access to that identity layer. This can create systemic lock-in: users remain with the dominant ecosystem because leaving means losing accumulated reputation, verification status, transaction history, trust scores, social graph, or eligibility.

The legal issue is therefore broader than ordinary data collection. It concerns the combination of:

Identity → behavioural data → reputation → access → dependency → switching costs → durable market power.

Competition law may address such conduct through abuse of dominance, refusal to supply, tying, self-preferencing, discriminatory access, interoperability restrictions, exclusionary data practices, and exploitative conditions.

2. Meaning of Identity Reputation Fusion

An identity-reputation fusion system generally performs four functions:

A. Identity establishment

The platform establishes or verifies who the user is.

Examples include:

• government-linked digital identity;
• account identity;
• biometric verification;
• professional identity;
• merchant identity;
• device identity.

B. Reputation accumulation

The system records information concerning the user's history, such as:

• ratings;
• reviews;
• payment history;
• transaction completion;
• fraud history;
• professional performance;
• customer complaints;
• reliability scores;
• credit-related information;
• network participation.

C. Reputation inference

Algorithms may convert multiple data points into a single or several scores.

For example:

Identity + transactions + behavioural data + social relationships → reputation score.

D. Cross-service deployment

The crucial competition issue emerges when the reputation profile is used across multiple services.

For example:

Marketplace reputation → payment eligibility → lending decision → insurance pricing → employment ranking.

This transforms reputation from a feature of one service into infrastructure for an entire digital ecosystem.

3. What Is Systemic Lock-In?

Systemic lock-in occurs when switching away from a dominant ecosystem becomes sufficiently costly that users, businesses, or developers remain dependent even where alternative providers exist.

Traditional switching costs might involve:

• learning a new interface;
• migrating files;
• changing software.

Identity-reputation systems introduce much deeper costs.

A user may lose:

• verified identity;
• accumulated ratings;
• transaction history;
• trust score;
• professional reputation;
• customer reviews;
• social connections;
• fraud-prevention status;
• eligibility for financial services.

Thus, the relevant switching cost becomes:

Loss of accumulated digital reputation rather than merely loss of software functionality.

4. The Identity-Reputation Lock-In Cycle

The phenomenon can be represented as follows:

Large user base

↓

More identity and behavioural data

↓

More accurate reputation assessment

↓

Greater trust in the platform

↓

More transactions occur on the platform

↓

More reputation data accumulate

↓

Higher switching costs

↓

Users remain dependent

↓

Competitors receive fewer users and less data

↓

Dominant platform becomes even more attractive

This produces a self-reinforcing feedback loop.

5. Why Identity and Reputation Become Powerful Together

Identity information by itself may not create substantial market power.

Reputation information by itself may also be contestable.

But their combination can create a powerful economic asset.

For example:

When these layers become integrated, the dominant platform can effectively control access to accumulated trust.

A new entrant may therefore face an unusual problem:

It can reproduce the technology but cannot reproduce the user's historical reputation.

6. Competition-Law Theory

A. Relevant Market

Several markets may need to be examined simultaneously.

Possible markets include:

1. digital identity services;
2. reputation-management services;
3. online marketplace services;
4. authentication services;
5. advertising services;
6. payment services;
7. financial-data services;
8. platform intermediation;
9. data portability/interoperability services.

The identity system may constitute a bottleneck input into downstream markets.

7. Data as a Competitive Advantage

Identity-reputation fusion creates a particularly powerful data advantage because the data are:

• longitudinal;
• individual-specific;
• verified;
• behaviourally rich;
• difficult to recreate.

A competitor entering the market today may have access to the same technology but lack ten years of:

• ratings;
• purchases;
• interactions;
• reliability observations;
• transaction records.

Consequently, historical depth itself can become a competitive barrier.

8. Reputation Portability

One important remedy is reputation portability.

A user should potentially be able to transfer:

• verified identity;
• ratings;
• reviews;
• transaction history;
• professional credentials;
• trust indicators.

However, portability raises difficult questions.

Who owns reputation?

The user?

The platform?

The reviewer?

Or is reputation jointly generated?

Can reputation be transferred?

A five-star rating on Platform A may not have exactly the same meaning on Platform B.

Can the receiving platform verify authenticity?

Without cryptographic or institutional verification, reputation portability can create fraud.

Therefore, competition law may need to distinguish between:

raw data portability

and

verified reputation portability.

9. Major Competition Concerns

A. Refusal to Port Reputation

A dominant platform may allow users to export ordinary account information while refusing to export their accumulated reputation.

This can preserve lock-in.

B. Tying Identity to Other Services

A platform may require users to use its identity service before obtaining:

• payment services;
• marketplace access;
• advertising;
• lending;
• cloud services.

This may constitute tying or ecosystem foreclosure where the legal conditions are satisfied.

C. Self-Preferencing

The platform may give users carrying its own reputation credentials better treatment than users authenticated through competitors.

For example:

Platform-owned identity = instant approval
Rival identity = additional verification

Such differential treatment can disadvantage competing identity providers.

D. Exclusive Reputation Systems

A platform may prevent merchants or users from displaying their reputation elsewhere.

This effectively converts reputation into an exclusive ecosystem asset.

E. Algorithmic Discrimination

A dominant platform may use its proprietary reputation data to favour its own downstream services.

For example:

Marketplace reputation → proprietary lending advantage.

Competitors may therefore be unable to compete because they lack equivalent information.

10. Case Laws

The following cases are particularly useful for analysing identity-reputation fusion, data-driven ecosystems, interoperability, portability, and systemic lock-in. Some do not involve an identity-reputation system literally; their principles are highly relevant by analogy.

1. United Brands v Commission

Case 27/76, Court of Justice of the European Union

The case established important principles concerning dominance and the ability of a dominant undertaking to behave independently of competitors, customers, and consumers.

Relevance

An identity-reputation platform possessing a critical user network may acquire substantial independence where users cannot realistically move their accumulated reputation elsewhere.

The important conceptual connection is:

economic dependence → reduced competitive constraint → enhanced market power.

United Brands therefore helps explain why systemic dependency can matter even where the dominant undertaking does not technically prohibit switching.

2. Bronner v Mediaprint

Case C-7/97, CJEU

Bronner is a foundational refusal-to-deal case concerning access to an infrastructure that was difficult for competitors to duplicate.

Relevance

Identity-reputation infrastructure may sometimes resemble an essential input where:

• the system is indispensable;
• duplication is economically or technically difficult;
• exclusion eliminates effective competition.

The case provides a demanding framework for determining when a refusal to provide access can constitute abusive conduct.

A dominant identity platform therefore cannot automatically be required to open its database to competitors. Indispensability and competitive effects remain crucial.

3. Microsoft Corp. v Commission

Case T-201/04, General Court of the European Union

Microsoft concerned interoperability information and exclusionary effects arising from Microsoft's control over an important technological ecosystem.

Relevance

It is particularly important for identity-reputation systems because interoperability can be the difference between:

open ecosystem competition

and

closed ecosystem dependency.

If a dominant platform prevents competing services from interoperating with its identity or reputation infrastructure, Microsoft provides an important analytical foundation for assessing whether such restrictions can foreclose competitors.

4. Google Search (Shopping)

Case AT.39740, European Commission; General Court proceedings

The Google Shopping litigation concerns Google's treatment of competing comparison-shopping services and the use of its dominant search position to favour its own downstream service.

Relevance

The principle is relevant to identity-reputation self-preferencing.

Imagine a platform controlling identity verification and then operating its own:

• lending service;
• insurance service;
• marketplace;
• employment platform.

If the platform gives its downstream services preferential access to identity-reputation information or rankings, competitors may suffer a comparable foreclosure problem.

The central issue becomes:

Does control over an upstream information layer allow the platform to distort downstream competition?

5. Google Android

Case AT.40099, European Commission

The Android case involved contractual restrictions concerning Google's ecosystem and the relationship between different digital services.

Relevance

It demonstrates how apparently separate digital products can operate as part of an integrated ecosystem.

For identity-reputation fusion, this is important because the dominant undertaking may connect:

identity → operating system → app ecosystem → payments → advertising → authentication.

A user may therefore be locked into several services simultaneously.

The competitive harm is not necessarily produced by one contract alone; it may arise from the cumulative architecture of the ecosystem.

6. Meta Platforms / Facebook

Case C-252/21, Meta Platforms Inc. v Bundeskartellamt

This is one of the most important modern cases for analysing the relationship between personal data, platform power, and competition law.

The dispute concerned Facebook's combination of personal data collected from different sources and the German competition authority's intervention under abuse-of-dominance principles.

Relevance

The case demonstrates why data practices can become competition-law relevant where they are connected with substantial market power.

For identity-reputation fusion, the concern is even stronger because combining:

• identity;
• behaviour;
• social connections;
• transaction information;
• reputation signals

can create a highly comprehensive profile.

The case therefore provides a major foundation for analysing data aggregation as an element of platform power.

7. IMS Health v NDC Health

Joined Cases C-418/01 P and related proceedings

IMS Health concerned access to a commercially significant information structure and the circumstances in which refusal of access can become abusive.

Relevance

The case is highly useful for analysing proprietary information structures.

An identity-reputation graph may constitute a unique informational infrastructure that competitors cannot realistically reproduce.

The case helps frame the question:

When does proprietary information become so important for competition that denying access can have exclusionary consequences?

Again, the strict requirements governing compulsory access must be respected.

8. Slovak Telekom v Commission

Joined Cases C-152/19 P and C-165/19 P

The case concerned exclusionary conduct involving access to telecommunications infrastructure.

Relevance

Its broader importance lies in understanding how a vertically integrated infrastructure provider can use control over an upstream input to disadvantage downstream competitors.

Identity-reputation platforms can create an analogous structure:

Identity infrastructure → reputation infrastructure → downstream services.

If the platform owns both upstream identity infrastructure and downstream commercial services, discriminatory access may create vertical foreclosure.

11. Comparative Case-Law Principle

12. Network Effects

Identity-reputation systems are particularly susceptible to network effects.

Suppose 10 million users participate in a reputation system.

More users produce:

• more transactions;
• more ratings;
• more fraud signals;
• more behavioural observations.

This makes the reputation system more valuable.

More value attracts additional users.

This produces:

Data → users → reputation → trust → transactions → data.

The resulting feedback loop may create a significant barrier to entry.

13. Switching Costs and the "Reputation Death" Problem

One of the strongest forms of lock-in occurs where users cannot carry their reputation to a competitor.

A user may think:

"I dislike this platform, but I cannot leave because I would lose ten years of ratings."

This is sometimes more powerful than a contractual restriction.

The platform therefore obtains implicit exclusivity without expressly imposing an exclusivity clause.

14. Reputation as a Quasi-Capital Asset

Accumulated reputation can increasingly resemble a form of digital capital.

For example:

Professional worker

→ 2,000 completed assignments
→ 4.98/5 rating
→ verified credentials
→ reliability history
→ customer reviews.

If the worker moves to a competing platform and starts at zero, the competitive process is distorted.

The dominant platform effectively controls the worker's commercial history.

15. Identity Graphs and Reputation Graphs

A particularly sophisticated form of fusion is the identity-reputation graph.

It can contain relationships among:

• individuals;
• merchants;
• devices;
• households;
• employers;
• customers;
• transactions;
• locations;
• social connections.

The platform can then infer:

Who you are + who you interact with + what you do + how trustworthy you appear.

Such graphs can become extraordinarily difficult for competitors to replicate.

16. Cross-Market Leveraging

Identity-reputation systems can facilitate expansion into adjacent markets.

For example:

Marketplace reputation

↓

creditworthiness prediction

↓

proprietary lending

↓

insurance pricing

↓

advertising targeting

The platform can therefore transform informational advantages in one market into competitive advantages in several other markets.

This creates a conglomerate ecosystem effect.

17. Algorithmic Reputation Scoring

Modern systems may not merely record reputation; they may calculate it algorithmically.

A platform might consider:

• transaction frequency;
• cancellations;
• response time;
• payment history;
• complaints;
• device consistency;
• network behaviour;
• location patterns;
• account age.

The algorithm then generates:

Trust Score = f(identity, behaviour, history, relationships).

The competitive concern arises if competitors cannot obtain the variables necessary to reproduce the score.

18. Lock-In Through Authentication

Authentication itself can become a competitive bottleneck.

Suppose a dominant platform controls the identity credential required to access multiple services.

Competitors may have to accept that credential or develop a costly alternative.

This produces:

Authentication dependency → service dependency → ecosystem dependency.

Thus, identity infrastructure can become a form of digital essential infrastructure, although the demanding legal tests for essential-facility treatment remain important.

19. Competition Between Identity Providers

Competition law should distinguish between:

Open identity competition

Multiple providers can authenticate users and transfer credentials.

Closed identity competition

One platform controls authentication and refuses interoperability.

Federated competition

Multiple providers mutually recognise credentials.

Dominant identity intermediary

One undertaking becomes the default identity gateway for a substantial ecosystem.

The latter two scenarios raise the greatest systemic concerns.

20. Potential Abuses

A dominant identity-reputation platform could theoretically engage in:

1. Refusal to provide interoperability

Competitors cannot verify transferred reputations.

2. Discriminatory access

Rival identity providers receive inferior technical access.

3. Self-preferencing

The platform's own services receive superior reputation signals.

4. Tying

Users must use the platform's identity service to obtain unrelated services.

5. Exclusivity

Users cannot transfer ratings or reputation.

6. Data leveraging

Identity information collected in one market is used to foreclose competitors in another.

7. Predatory ecosystem expansion

The platform uses its identity advantage to enter adjacent markets.

21. Consumer-Welfare Concerns

Systemic lock-in can harm consumers through:

• higher prices;
• reduced choice;
• weaker privacy;
• lower service quality;
• reduced innovation;
• discriminatory algorithmic outcomes;
• reduced bargaining power.

But competition authorities should not automatically treat data concentration as harmful.

The central question is:

Does control over identity and reputation materially reduce competitive constraints?

22. Privacy–Competition Interaction

Identity-reputation fusion demonstrates why privacy and competition law can overlap.

A dominant platform might offer users:

"One account, one identity, all services."

This may be convenient.

But convenience can coexist with:

• excessive data concentration;
• surveillance;
• inability to switch;
• cross-service profiling.

The competition concern therefore arises where the privacy architecture reinforces market power.

The Meta litigation is particularly important for this intersection.

23. Possible Remedies

Competition authorities could consider several remedies.

A. Reputation portability

Allow users to export verified reputation information.

B. Interoperability

Require technical interoperability between identity systems where legally justified.

C. API access

Provide standardized interfaces for legitimate competitors.

D. Non-discrimination

Prevent dominant platforms from giving their own services preferential identity access.

E. Data separation

Restrict inappropriate combination of identity and behavioural data across markets.

F. Transparency

Require disclosure of major factors affecting reputation scores.

G. Multi-homing

Permit users to maintain reputation across multiple platforms.

24. Risks of Over-Regulation

Mandatory portability is not automatically beneficial.

It can create:

• privacy risks;
• identity theft;
• fraudulent reputation transfer;
• gaming of ratings;
• cybersecurity vulnerabilities;
• inaccurate reputation propagation.

Therefore, regulation should distinguish between:

portable data

and

portable trust.

The latter requires stronger authentication and verification mechanisms.

25. A Competition-Law Test

A useful analytical framework is:

Step 1 — Identify the identity layer

Who controls authentication?

Step 2 — Identify the reputation layer

Who generates and controls reputation information?

Step 3 — Examine fusion

Are identity and reputation combined across markets?

Step 4 — Assess indispensability

Can competitors realistically reproduce the system?

Step 5 — Examine switching costs

Does leaving cause users to lose accumulated reputation?

Step 6 — Examine interoperability

Can users transfer their credentials and reputation?

Step 7 — Examine leveraging

Is the identity advantage used in downstream markets?

Step 8 — Examine foreclosure

Are competitors denied effective access?

Step 9 — Assess consumer effects

Does the conduct reduce choice, innovation, quality, privacy, or competition?

Step 10 — Consider proportional remedies

Would interoperability, portability, non-discrimination, or data separation restore competition without unnecessarily undermining security?

26. Systemic Lock-In vs Ordinary Switching Costs

The second category is potentially much more powerful because reputation is historical and cumulative.

27. Key Legal Principle

The most important conceptual proposition is:

A digital platform can obtain durable market power not merely by controlling users' data, but by controlling the accumulated identity and reputation that users need to participate in competing ecosystems.

This changes the competition-law analysis from ordinary data ownership to control over digital economic identity.

28. Conclusion

Identity-reputation fusion systems represent a particularly important form of digital-market power because they combine identity verification, behavioural information, accumulated trust, network effects and switching costs.

The principal competition concern is not simply that a platform possesses a large database. It is that the platform may become the institution through which a person's digital economic reputation is created, authenticated and recognised.

Once that happens, competitors may face a structural disadvantage:

They can offer a better service, but they cannot offer the user's accumulated history.

The cases of Bronner, Microsoft, IMS Health, Google Shopping, Google Android, Meta Platforms, Slovak Telekom and United Brands collectively provide a useful legal framework for analysing indispensability, interoperability, data aggregation, vertical leveraging, self-preferencing and ecosystem dependency.

The emerging policy objective should therefore be contestable identity infrastructure: users should be able, where appropriate and subject to privacy and security safeguards, to authenticate themselves, carry relevant reputation information, and participate in competing ecosystems without having to abandon years of accumulated digital economic capital.