Author: Nita Farahany Source: https://nitafarahany.substack.com/p/the-biggest-lie-on-the-internet-inside Published: March 16, 2026
A teaching essay by Nita Farahany published March 16, 2026 that opens Week 8 (Consent) of her Advanced Topics in AI Law and Policy course (Class 8.1 of roughly 30). It argues that "I have read and agree to the terms of service" is the biggest lie on the internet, and that the click-to-agree framework underlying digital privacy law does not produce meaningful agreement — a deficiency it contends even GDPR Article 7, described as the most demanding consent law in the world, does not solve.
Summary of argument
The essay is anchored on an in-class exercise in which law students read their own platforms' terms of service. Time spent ranged from 20 minutes to two hours per student, and every student found terms they did not know about. Multiple students used the word "inevitable" to describe how participating in digital life felt. Students who spent only ten minutes retained almost nothing; those who spent two hours retained more but still could not materially refuse the terms.
From this exercise the essay argues that the deficiency is not primarily one of disclosure but a structural feature of the consent environment, setting up the architectural critique developed in Class 8.2 and the legislative responses examined in Class 8.3.
Key claims
On GDPR Article 7, the essay sets out four requirements for valid consent — that it be freely given, specific, informed, and unambiguous — and argues that by any reasonable reading almost no major platform's terms-of-service consent satisfies all four, yet regulators in EU member states have not declared them invalid. It works through each requirement:
- The "freely given" requirement is meant to require that a user be able to refuse without losing access; most platforms offer no meaningful alternative, so refusal amounts to exit from digital life.
- The "specific" requirement is meant to require a separate consent for each purpose; bundled consent (one click for everything) is technically prohibited but widely tolerated.
- The "informed" requirement runs into the unreadability of terms.
- The "unambiguous" requirement is satisfied formally by the click, even where the user had no idea what they were clicking.
The essay foreshadows three theories of consent failure that it states are formally introduced in Class 8.3:
- Information failure — users do not know enough; the fix is better disclosure.
- Capacity failure — some users (children, vulnerable adults) cannot process consent; the fix is categorical protection.
- Design failure — the consent environment is engineered to produce particular outcomes regardless of user knowledge or capacity; the fix is regulating the environment itself.
A student framing becomes the through-line: "I don't remember everything I read, and it's not like I have a choice to decline the terms if I really want to use the product." The essay characterizes this as a structural rather than a disclosure failure, which sets up the architectural critique in Class 8.2.
Relationships
- part-of: Nita Farahany Advanced Topics course (Class 8.1 of ~30)
- related: Three Privacy Problems AI Creates
- previous: Inside My Advanced Topics Class 7.3: Aristotle's Algorithm (Farahany, March 2026) next: Inside My Advanced Topics Class 8.2: The Environment Is the Argument (Farahany, March 2026)