"Platforms have become private legislators of cyberspace." Discuss the ethical issues in unilateral changes to terms of service affecting millions of businesses.

When Meta's updated Commercial Terms take effect on 30 October 2026, its crawlers may enter any website "associated with" a business account. Consent comes from a click on a contract, not from the site's robots.txt file [1]. One contract binding 200 million+ businesses works like a law made without a legislature, and that raises ethical concerns.

Why platforms act as private legislators

• Rule-making: Meta alone sets terms that bind ~3.6 billion daily users and 200 million+ businesses [1].
• Enforcement: continued use of Ads Manager counts as acceptance, with no opt-out [1].
• No due process: no regulator reviewed the text. Meta narrowed it only after Harvard's Nieman Lab reported on it [1].

Ethical issues involved

• Hollow consent: the click usually comes from a marketing employee, not the person who decides which bots may access the website. This falls short of the DPDP Act, 2023 standard of "free, specific, informed" consent [2].
• Power asymmetry: small firms that depend on Meta ads cannot leave, so their "choice" is really coercion. The CCI held a similar "take-it-or-leave-it" WhatsApp policy to be abuse of dominance and fined Meta ₹213.14 crore [3].
• Transparency deficit: Meta says it respects robots.txt, but the terms omit this. "Business products" is left undefined [1].
• Fairness to creators: publishers' content may feed ad products without a licence or payment [1].
• Accountability by accident: the safeguards depended on journalists noticing [1].
• Erosion of trust norms: robots.txt works on good faith. A contract that overrides it weakens the open web.

The counter-view

• Crawling an advertiser's own landing page to serve its ads is legitimate, and Meta dropped the word "train" quickly [1].
• Yet the clause covers any associated website, far beyond that need, so it fails the test of proportionality.

Platform terms now work as law for millions of businesses, but without real consent, transparency or accountability. Platforms can still set terms, but within limits: robots.txt written into the contract, separate consents ("run my ads" should not mean "crawl my site"), and ex-ante rules for gatekeeper platforms. That would keep cyberspace governed by the constitutional values of fairness and privacy upheld in Puttaswamy, not by private decree.