The Transformation of European Risk Regulation: Managing Uncertainty and Powers in the Digital Age

Abstract Risk regulation has increasingly expanded in European digital policy, yet it is diverging from its roots, especially the precautionary principle. Rather than traditionally focusing on scientific evidence and knowledge, the European approach to risk regulation has been increasingly based on constitutional values such as the protection of fundamental rights and democracy. This article seeks to unravel the logic that has led the Union to move from an approach to risk more based on science to a model which considers constitutional values as parameters to assess and mitigate risks. By focusing on European digital regulation, primarily the GDPR, the DSA and the AI Act, this work underlines how the constitutional rationale of this transformation comes as a response to the intangibility of risks resulting from digital technologies and to imbalances of information and knowledge coming from the concentration of private power in the digital ecosystem. The primary argument is that risk regulation in European digital policy does not seek to rationalise uncertainty through science but to govern epistemological uncertainty through the instruments of constitutionalism, with the goal of addressing the impact of digital technologies on fundamental rights and imbalances of power.