Journal of Research and Development in Comparative Law

Journal of Research and Development in Comparative Law

A Comparative Study on the Capability of Reliance on Consumer Protection Law for the Safeguarding of Personal Data in the Legal Systems of the United States, the European Union, and Iran

Articles in Press

Document Type : scientific research paper

Authors
Abbas Mirshekari 1
Amirmohammad Ghorban nia 2
1 Associate Professor, Faculty of Law and Political Science, University of Tehran, Tehran, Iran
2 Master of Private Law, Faculty of Law and Political, Science, University of Tehran, Tehran, Iran.
10.22034/law.2026.2083230.1753
Abstract
With the rapid expansion of the digital environment and the significant growth in the collection, storage, and processing of personal data within commercial and economic activities, the legal protection of individuals’ data has emerged as one of the fundamental challenges and concerns of contemporary legal systems. In response to these developments, a considerable number of legal systems, at both national and supranational levels, have adopted and enacted specific rules and autonomous legal regimes dedicated to the protection of personal data. Nevertheless, an exclusive focus on these specialized regimes should not lead to the neglect of the capacities and functions of other branches of law, particularly consumer protection law, which has traditionally aimed at correcting imbalances of power between contracting parties and safeguarding the weaker party to the legal relationship. Given that a substantial portion of personal data processing takes place within the framework of relationships between consumers and providers of digital goods and services, a fundamental question arises as to what is the role of consumer protection law can, alongside specialized data protection regimes, operate as a complementary mechanism for the more effective protection of the rights of data subjects? This study adopts an analytical–descriptive methodology and draws upon library-based and digital sources. Through a comparative analysis of three legal systems—Iran, the United States of America, and the European Union— this research examines the feasibility of leveraging the capacities of consumer protection law to enhance the protection of personal data. The findings of the research indicate that, although consumer protection law cannot serve as a substitute for specialized data protection regimes, it may nonetheless play a meaningful and complementary role in preventing unfair commercial practices rooted in the abuse of dominant power, ensuring compliance with transparency and information disclosure requirements, and constraining unfair contractual terms related to the processing of personal data.
Keywords
Consumer Protection law
Personal Data
Privacy
Unfair Terms
Subjects
1.       Abdolahi, M. & Ahmadi Sajadi, S. A. (2014). A Comparative Study of Consumer Protection in Electronic Funds Transactions. Encyclopedia of Economic Law Journal, 21(5), -. doi: 10.22067/le. v21i5.48146, (In Persian).
2.       Adel, M. & Ghafari Farsani, B. (2010). Consumer Protection Legislations: Their Application and Effective Factors (One). Comparative Law Review, 1(1), 159-181. doi: 10.22059/jcl.2010.80789, (In Persian).
3.       Adel, M. & Ghafari Farsani, B. (2010). Consumer Protection Legislations: Their Application and Effective Factors (Two). Comparative Law Review, 1(2), 51-79. doi: 10.22059/jcl.2010.80794, (In Persian).
4.       Ansari, B. & Kateb Damghani, M. M. (2022). The Legal Regime of Cloud Computing Contracts, Legal Research Quarterly, 25(98), 219-244, doi: 10.29252/jlr.2022.225289.2074, (In Persian).
5.       Azizi, S., & Parsa, M. (2023). From Consent to Accountability: Legal Approaches to Data Subject Rights in the Context of Global Privacy Regulations, Legal Studies in Digital Age, 2(1), pp 27-38.
6.       Bania, K, (2023), Fitting the Digital Markets Act in the existing legal framework: The myth of the “without Prejudice” clause, European Competition Journal, 19(1), pp 116–149, doi:10.1080/17441056.2022.2156730.
7.       Baradaran, k. (2021). Fundamental Consumer Rights in Electronic Commerce, First International Conference on Research Findings in Law and Judicial Sciences. Tehran, (In Persian).
8.       Barnett, M., & Duvall, R, (2005), Power in International Politics, International Organization, 59(1), pp 39–75.
9.       BEUC, (2021), What’s up with WhatsApp? An Assessment of WhatsApp’s Practices in the Light of EU Consumer Protection Rules, Available at: (https://www.beuc.eu/reports/whats-whatsapp-report) Visited 2025/03/20.
10.    Communication and Information Technology Research Center, Ministry of Communications and Information Technology. (2023). Dimensions, challenges and solutions for consumer protection in the digital economy, Available at: http://itrc.ac.ir/fa/node/46609, (In Persian).
11.    De Elizalde, F., (2025), Fragmenting Consumer Law Through Data Protection and Digital Market Regulations: The DMA, the DSA, the GDPR, and EU Consumer Law, J Consum Policy, pp 1-35, doi:10.1007/s10603-025-09584-3.
12.    Dunkelberg, W. (2017), The insidious cost of regulation, Available at: (https://www.forbes.com/sites/williamdunkelber/2017/04/04/the-insidious-cost-of-regulation/?sh=3d51a8d05c7b) Visited 2025/01/12
13.    Durovic, M. & Poon, J., (2023), Consumer Vulnerability, Digital Fairness, and the European Rules on Unfair Contract Terms: What Can Be Learnt from the Case Law Against TikTok and Meta? J Consum Policy, 46: 419–443, doi:10.1007/s10603-023-09546-7.
14.    EDPS, (2014), Privacy and competitiveness in the age of big data: The interplay between data protection, competition law and consumer protection in the Digital Economy, Available at:(secure.edps.europa.eu/EDPSWEB/webdav/shared/Documents/Consultation/Opinions/2014/14-03-26competitition_law_big_data_EN.pdf) Visited 2025/02/28.
15.    European Commission, (2012), Proposal for a Regulation of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation) COM (2012) 11 (FINAL). European Commission, Available at: (http://ec.europa.eu/justice/data-protection/document/review2012/com_2012_11_en.pdf) Visited 2025/02/10.
16.    Federal Trade Commission, (2017a), Uber settles FTC allegations that it made deceptive privacy and data security claims, Available at: (https://www.ftc.gov/news-events/news/press-releases/2017/08/uber-settles-ftc-allegations-it-made-deceptive-privacy-data-security-claims) Visited 2025/03/25.
17.    Federal Trade Commission, (2017b), Complaint, In the Matter of Turn Inc., a corporation (Docket No. C-4612), Available at: (https://www.ftc.gov/system/files/documents /cases/152_3099_c4612_turn_complaint.pdf) Visited 2025/03/27.
18.    Ghanati, A. & Habibzadeh, T. & Rezaei Jowzani, M. (2025). The Concept and Foundations of Civil Liability of Online Platforms as Intermediaries for the Offering of Counterfeit Goods and Services: A Comparative Study of Iranian Law with Reference to Court Decisions in the United States Europe Canada and India. (e729258). Journal of Research and Development in Comparative Law, (), e729258 doi: 10.22034/law.2025.2059369.1643, (In Persian).
19.    Ghorbania, A. M. (2024). Legal Status of Personal Data in the Case of Acquisition and Merger of Companies, Master's Thesis, Supervised by: Dr. Nasrin Tabatabaei Hesari, University of Tehran, Tehran, (In Persian).
20.    Gianclaudio, Malgieri & JÄdrzej, Niklas, (2020), Vulnerable data subjects, Computer Law & Security Review, 37, pp 1-16, doi: 10.1016/j.clsr.2020.105415.
21.    Graef, I & Clifford, D & Valcke, P, (2018), Fairness and enforcement: bridging competition, data protection, and consumer law, International Data Privacy Law, 8(3), pp 200–223, doi:10.1093/idpl/ipy013.
22.    Graef, I & Van berlo, S, (2021), Towards Smarter Regulation in the Areas of Competition, Data Protection and Consumer Law: Why Greater Power Should Come with Greater Responsibility, European Journal of Risk Regulation, 12(3), pp 674-698 doi:10.1017/err.2020.92.
23.    Han R. & Jiang N., (2024), The integration of personal data protection into consumer law in EU digital markets, Journal of Legal, Ethical and Regulatory Issues, 27(S3), pp 1-6.
24.    Hiob, Triinu, (2018), The burden of proof of a professional salesperson might be substantially greater, Available at: (https://www.njordlaw.com/burden-proof-professional-salesperson-might-be-substantially-greater), Visited 2025/12/25.
25.    Hosseini Moghaddam, S. H. & Ayoubi, S. & Taleghan Ghaffari, M. (2023). Civil Liability of Online Stores in Iranian Law and a Comparative Case Study in the European Union. Private Law Research, 12(44), 255-284. doi: 10.22054/jplr.2023.68651.2690, (In Persian).
26.    Iclg, (2025), Consumer Protection Laws and Regulations USA, Available at: (https://www.google.com/amp/s/iclg.com/practice-areas/consumer-protection-laws-and-regulations/usa/amp) Visited 2025/04/09.
27.    Khalidi, P. & Ghasemi, H. & Beheshti, A. (2010). Consumer rights in the pre-contractual stage with a comparative study in English law. Journal of Law and Politics. 16(44). 11-36, (In Persian).
28.    Koo, J. & Kang, G. & Kim, Y.-G. (2020), Security and Privacy in Big Data Life Cycle: A Survey and Open Challenges, Sustainability, 12(24), Available at: (https://doi.org/10.3390/su122410571).
29.    Kotsios, Andreas, (2024), Paying with Data – A Study on EU Consumer Law and the Protection of Personal Data, PHD Dissertation presented at Uppsala University, 445 pp. Uppsala.
30.    Lindquist, Bodil, (2003), No. C-101/01 (Court of Justice of the European Union, 6 November), Available at: (http://curia.europa.eu/juris/document/document.jsf?docid=48382&doclang=en) Visited 2025/03/15.
31.    Mirshekari, A. & Pishnama, S. A. & Rokni, A. A. (2024). Data Trust, a Mechanism to Manage the Interests of Data Beneficiaries: Guidelines for the Data System in Iranian Law. Jurisprudence and Islamic Law, 15(34), 279-320. doi: 10.22034/law.2024.56448.3268, (In Persian).
32.    Moeinifar, M. & Vahidzadeh, D. (2023). The concept, nature and examples of “consumer rights” in the field of the Internet of Things in Iranian law. Studies of Islamic Jurisprudence and Basis of Law. 17(47). 159-190. doi: 10.22034/fvh.2022.13674.1605, (In Persian).
33.    Mohammad Hosseini Hajivar, A. (2021). Investigating the effects of unfair contractual terms in contracts and agreements. Qanun Yar. 20. 1-33, (In Persian).
34.    Mohammadshahi, B. & Askari, M. (2018). A study of consumer rights in Iranian e-commerce laws. The first national management conference with emphasis on supporting Iranian goods and services. Abadeh, (In Persian).
35.    Narimanpour, M. & Narimanpour, M. (2025). A Comparative Study of Theoretical Challenges of Transferability of Personal Data from the Perspective of Contract Rights. (e719570). Journal of Research and Development in Comparative Law, 8(28), e719570 doi: 10.22034/law.2025.2048760.1583, (In Persian).
36.    North, D. C, (1990), Institutions, Institutional Change and Economic Performance, Cambridge University Press, Cambridge, New York.
37.    Rahimi, H. (2022). Protecting Consumer Rights in Online Business in the Light of Electronic Commerce Law. International Conference on Jurisprudence, Law and Religious Research, Tehran, (In Persian).
38.    Rhoen, Michiel, (2016), Beyond consent: improving data protection through consumer protection law, Internet Policy Review, Alexander von Humboldt Institute for Internet and Society, Berlin, 5(1), pp. 1-15, doi:10.14763/2016.1.404.
39.    Rott, P. (2017), Data protection law as consumer law – How consumer organisations can contribute to the enforcement of data protection law, Journal of European Consumer and Market Law, 3, pp 113-119.
40.    Rott, P. (2025), Digital Fairness and the Burden of Proof, J Consum Policy, 48, pp 297–314, doi:10.1007/s10603-025-09583-4.
41.    Shabani, V. & Shabani, V. & Miraghaei, M. (2014). Consumer Protection in Electronic Banking. National Conference on New Approaches in Business Management. Tabriz, (In Persian).
42.    Shamsollahi, M. (2021). Unfair terms in commercial contracts: A comparative study of French law. Journal of Comparative Law, 8(2), 209-236. doi: 10.22096/law.2021.122024.1639, (In Persian).
43.    Snuszka, (2022), Consumer rights, comparison portals and paying with personal data: Which new regulations apply from 28 May 2022? Available at: (https://unternehmeranwaelte.de/consumer-rights-comparison-portals-and-paying-with-personal-data-which-new-regulations-apply-from-28-may-2022/?lang=en) Visited 2025/03/24.
44.    Taghizadeh, E. (2013). Fundamental Rights of Consumers (A Comparative Study of Iranian Consumers Rights Protection Act, and the European Union's Regulations and the Guidelines of the United Nations). Encyclopedia of Economic Law Journal, 19(1), -. doi: 10.22067/le. v19i1.27364, (In Persian).
45.    UFC Que Choisir, (2019), Personal data: UFC Que-Choisir obtains a ruling against Facebook, Available at: (https://www.quechoisir.org/action-ufc-que-choisir-donnees-personnelles-l-ufc-que-choisir-obtient-la-condamnation-de-facebook-n65523/) Visited 2025/02/20.
46.    Vazife Rezaei, S. (2018). A Comparative Study of Consumer Rights in Legal Systems. Jurisprudence, Law and Criminal Sciences. 10. 22-30, (In Persian).
47.    Waller, Spencer & Brady, Jillian & Acosta, R.J., (2011), Consumer Protection in the United States: An Overview. Available at: (http://ssrn.com/abstract=1000226)
48.    Wang et al., (2013), The second wave of global privacy protection: From Facebook regrets to Facebook privacy nudges, Ohio State Law Journal, 74(6), pp 1307-1334
49.    Wolfgang, Kerber, (2016), Digital markets, data, and privacy: competition law, consumer law and data protection, Journal of Intellectual Property Law & Practice, 11(11), pp 856–866, doi:10.1093/jiplp/jpw150.
50.    Zuiderveen, F & Natali Helberger, B & Reyna, A, (2017), The perfect match? A closer look at the relationship between eu consumer law and data protection law, Common Market Law Review, 54(5), pp 1427-1465, doi:10.54648/cola2017118.
Journal of Research and Development in Comparative Law

Articles in Press, Accepted Manuscript
Available Online from 01 May 2026