According to blockchain technologists, web decentralization would fundamentally alter business, societies, and the balance of digital power by reorganizing the internet, using peer-to-peer infrastructure rather than centralized data hosting.1 It would transform web ownership, carrying potential implications for human rights and individual liberties.2 As U.S. policymakers attempt to manage digital decentralization, the dominance of U.S. technology companies, security of U.S. critical infrastructure and data, and future of the internet would be at stake.3
Advocates of web or digital decentralization, also referred to as Web3 or the third generation of the internet, envision a new online ecosystem based on blockchain computing architecture.4 Unlike the current ecosystem, in which corporate-controlled platforms own information and store it on a single server, proponents of Web3 foresee an ecosystem in which information is distributed and collectively managed across a network.5
In Web3, web users own data, which is visible to every node in the network. Additionally, Web3 is permissionless, affording all participants an equal stake. Web3 requires a majority consensus to alter or erase the network and validate new transactions or updates. The Web3 model mitigates the ability of technology giants like Meta, Amazon, and Google to orchestrate online exchanges, monopolize digital data, and control search engines.6
In theory, Web3 improves transparency, security, and resilience and could enable a range of new applications and services, including 3D immersive online spaces, non-fungible token use, and advanced gaming systems.7
In practice, however, it could empower malicious state and non-state actors. The decentralized nature of Web3 makes it more difficult to identify and track bad actors, enforce responsible internet behavior, and patch security vulnerabilities, which could contribute to the propagation of digital authoritarianism, as well as misinformation and disinformation.8
Unlike the current ecosystem, in which corporate-controlled platforms own information and store it on a single server, proponents of Web3 foresee an ecosystem in which information is distributed and collectively managed across a network.
Digital decentralization extends beyond just the internet and web platforms, affecting telecommunications and financial systems, infrastructure underpinning these mediums, and data their use generates. It also implicates the hardware supply chains required to build, maintain, and operate digital infrastructure.
The United States’ leadership position in the global technology landscape depends on an understanding of decentralization’s opportunities and risks. Technology Policy Lab participants considered the drivers of decentralization and the key players involved in its promotion, in addition to how U.S. policymakers can ensure digital decentralization is a positive force at the international, national, and individual level. The group also pondered how decentralization factors into the broader competition between democracy and autocracy. A few key questions guided the group’s discussion:
- What are the primary objectives of the key players promoting digital decentralization? Which questions are being debated now, and what should be receiving more attention?
- How will digital decentralization affect democracies, and how can democracies promote digital decentralization as a positive force?
- What are some short- and long-term steps to balance increased data access with protection against potential security, economic, and privacy concerns?
- What should an updated U.S. approach to data access look like, compared to that of the Chinese Communist Party (CCP) or some European governments?
Participants discussed the data privacy, access, and ownership challenges associated with digital decentralization. Most existing privacy regulations assume that data is collected, owned, and stored by a single entity. Web3’s distinguishing characteristics—decentralization and user ownership of data—mark an important shift in the concentration of digital power from a few big technology companies to a broader network of users. Web3 could thus transform data privacy norms and compel a shift in permission controls because data is more dispersed and widely accessible.9
U.S. policymakers must therefore build protections for internet users into the fabric of Web3. Web3 promises to benefit individual liberties by bolstering anonymity and freedom from surveillance and censorship, but it could also enable the exploitation of individual customers’ identities. U.S. policymakers must identify and support trustworthy data holders and pursue a federal data privacy law to capture the positive potential of Web3.
Participants further observed that digital decentralization and Web3 present complex governance challenges. For example, Web3 assigns control of data aggregation to a group of private citizens who may use it for malicious purposes. Absent government intervention, malign actors could leverage their control of data aggregation to prey on marginalized members of society, exacerbate political grievances, erode confidence in democracy, and advance authoritarian ideals.10
The proposed Web3 structure also enables bad actors to evade detection and lacks a centralized authority to provide accountability. Consequently, most of the tools that are available to monitor and regulate behavior on the current web ecosystem—such as content moderation and denial access—lose effectiveness with Web3. Federal governments, law enforcement agencies, and technology companies could use artificial intelligence to monitor aggressive and incendiary behavior in the short term but will need to develop new tools to mitigate cybercrime in a decentralized space.11
Despite the governance challenges associated with Web3, it also presents opportunities for democracies to enhance multilateral cooperation. Democracies have ingrained structural and systemic advantages that could streamline Web3 implementation, as well as existing alliance structures that could be used to foster collaboration and develop transparent Web3 standards. To harness these advantages, however, democracies must confront the trend toward data sovereignty and localization, which could limit information sharing, complicate the adoption of regulation regimes, and contribute to Web3 fragmentation.12
Web3’s distinguishing characteristics—decentralization and user ownership of data—mark an important shift in the concentration of digital power from a few big technology companies to a broader network of users.
Participants further noted that digital decentralization intensifies competition over critical digital infrastructure, a key enabler of Web3 and a target for authoritarian states attempting to mold the accessibility of information. Control of critical infrastructure and the hardware required to build and operate it give autocratic states leverage to limit internet accessibility, which could threaten emerging digital nations’ capacity to adopt Web3.13
Based on these observations, the group developed several policy recommendations:
The U.S. interagency should provide regulatory clarity about Web3 behavior. The United States lacks a single authority that specifies legal requirements for Web3 builders. In some cases, relevant agencies even offer contradictory guidance. The U.S. Department of Justice has referred to digital tokens as commodities in its enforcement actions, while the Securities and Exchange Commission (SEC) has enforced them as securities.14 Harmonized legal guidance could foster innovation and improve consumer protection by encouraging more companies to build within U.S. regulations.
The White House should develop a privacy rating system and general framework for categorizing Web3 risk. U.S. policymakers should classify the relative importance of various types of digital data—including personally identifiable information, as well as financial, medical, lifestyle, and social network–related data—and build processes to protect information deemed most sensitive.
Key U.S. stakeholders—including policymakers, industry partners, and individual web users—can work together to outline a Web3 risk classification system. The system should model existing structures, such as Stanford’s classification system, which organizes information assets into three risk-based categories to determine who is allowed to access certain information and what security precautions are required to prevent unauthorized access.15
The risk classification system should encompass processes related to data collection, data sharing, data access rights, data deletion policies, user control, tracking, and encryption. Such a system would enable U.S. policymakers to hold platforms accountable for data privacy violations and advance democratic ideals and systems of governance.
The White House should lead the charge on harmonizing international standards. The Biden administration should direct U.S. regulatory agencies to cooperate with counterparts in allied countries to define shared Web3 principles and standards. Specifically, the SEC and European Securities and Markets Authority (ESMA) should build mechanisms to jointly combat fraud and protect investors in both regions. Like-minded democratic states can build upon and identify best practices from prior efforts to regulate virtual currency, such as Switzerland’s regulatory framework enabling the issuance and trading of digital assets.16
Digital decentralization challenges traditional understandings of internet governance, value creation, and stakeholder participation. Harnessing its potential and mitigating its risks require agile policies centered on reinforcing U.S. economic and social competitiveness. The onus is on U.S. policymakers to drive data and internet governance frameworks, standards, and processes conducive to a democratic digital future.
This CNAS Technology Policy Lab was made possible with the generous support of Schmidt Futures. CNAS also thanks all experts who participated in this Lab.
As a research and policy institution committed to the highest standards of organizational, intellectual, and personal integrity, CNAS maintains strict intellectual independence and sole editorial discretion and control over its ideas, projects, publications, events, and other research activities. CNAS does not take institutional positions on policy issues and the content of CNAS publications reflects the views of their authors alone. In keeping with its mission and values, CNAS does not engage in lobbying activities and complies fully with all applicable federal, state, and local laws. CNAS will not engage in any representational activities or advocacy on behalf of any entities or interests and, to the extent that the Center accepts funding from non-U.S. sources, its activities will be limited to bona fide scholastic, academic, and research-related activities, consistent with applicable federal law. The Center publicly acknowledges on its website annually all donors who contribute.
About the Technology Policy Lab
This policy brief is a product of the CNAS Technology Policy Lab, a working group structure designed to incubate solutions to crucial yet underdeveloped technology policy problems. Each lab is composed of subject matter experts from academia, industry, and the policy community collaborating to develop concrete recommendations to bolster U.S. national security interests and promote American competitiveness. We thank all experts who participated in this Lab.
- Arjun Kharpal, “What is ‘Web3’? Here’s the vision for the future of the internet from the man who coined the phrase,” CNBC, April 19, 2022, https://www.cnbc.com/2022/04/20/what-is-web3-gavin-wood-who-invented-the-word-gives-his-vision.html. ↩
- Chelsea Barabas, Neha Narula, and Ethan Zuckerman, “Defending Internet Freedom Through Decentralization: Back to the Future?” The Center for Civic Media and the Digital Currency Initiative, MIT Media Lab, August 2017, https://static1.squarespace.com/static/59aae5e9a803bb10bedeb03e/t/59ae908a46c3c480db42326f/1504612494894/decentralized_web.pdf. ↩
- Greg Johnson, “Will Web 3.0 Secure a Democratic Future?” Tony Blair Institute for Global Change, March 24, 2022, https://www.institute.global/insights/tech-and-digitalisation/will-web-30-secure-democratic-future. ↩
- Paul Kim, “Understanding Web3: The new version of the web that works on blockchain,” Business Insider, April 28, 2022, https://www.businessinsider.com/personal-finance/what-is-web3. ↩
- Thomas Stackpole, “What Is Web3?” Harvard Business Review, May 10, 2022, https://hbr.org/2022/05/what-is-web3. ↩
- Emily Heaslip, “What Is Web3?” U.S. Chamber of Commerce, November 17, 2022, https://www.uschamber.com/co/run/technology/what-is-web3. ↩
- Anthony Vinci and Nadia Schadlow, “’Web3’ is on the way. Authoritarians should be worried,” The Washington Post, January 26, 2022, https://www.washingtonpost.com/opinions/2022/01/26/web3-is-way-authoritarians-should-be-worried/; and Akash Takyar, “Web3 Use Cases and Applications,” LeewayHertz, https://www.leewayhertz.com/web3-use-cases-and-applications/#What-are-the-existing-and-future-use-cases-of-Web3. ↩
- Charles Clancy et al., “Democratizing Technology: Web3 and the Future of the Internet,” Report No. 5 (The MITRE Corporation, October 12, 2022), https://www.mitre.org/sites/default/files/2022-10/22-3249-Democratizing-Technology-web3-and-the-future-of-the-internet.pdf. ↩
- Jamilia Grier, “Web3 Businesses Have Major Data Privacy Challenges Ahead,” Forbes, February 22, 2023, https://www.forbes.com/sites/forbestechcouncil/2023/02/22/web3-businesses-have-major-data-privacy-challenges-ahead/?sh=5b40651f1485. ↩
- Alyssa Domino, “Web3: A Tool to Enhance Democracy, Equity, or Neither?” Georgetown Law Technology Review, April 2022, https://georgetownlawtechreview.org/web3-a-tool-to-enhance-democracy-equity-or-neither/GLTR-04-2022/. ↩
- Rem Darbinyan, “The Growing Role Of AI In Content Moderation,” Forbes, June 14, 2022, https://www.forbes.com/sites/forbestechcouncil/2022/06/14/the-growing-role-of-ai-in-content-moderation/?sh=6a5ab16a4a17. ↩
- Nigel Cory and Luke Dascoli, “How Barriers to Cross-Border Data Flows Are Spreading Globally, What They Cost, and How to Address Them,” Information Technology & Innovation Foundation, July 19, 2021, https://itif.org/publications/2021/07/19/how-barriers-cross-border-data-flows-are-spreading-globally-what-they-cost/. ↩
- David Dorman, “China’s Plan for Digital Dominance,” War on the Rocks, March 28, 2022, https://warontherocks.com/2022/03/chinas-plan-for-digital-dominance/. ↩
- Jake Simmons, “Big News for Ripple? US Department of Justice Calls Cryptos Commodities,” Bitcoinist, January 2023, https://bitcoinist.com/big-news-ripple-us-doj-calls-cryptos-commodities/; and Scott Nover, “The head of the SEC says most cryptocurrencies are operating illegally,” Quartz, September 8, 2022, https://qz.com/the-head-of-the-sec-says-most-cryptocurrencies-are-oper-1849513471. ↩
- “Risk Classifications,” Stanford University IT, https://uit.stanford.edu/guide/riskclassifications. ↩
- Olivier Favre et al., “The Virtual Currency Regulation Review: Switzerland,” The Law Reviews, September 7, 2022, https://thelawreviews.co.uk/title/the-virtual-currency-regulation-review/switzerland. ↩
More from CNAS
Behind China’s Plans to Build AI for the World
To compete with China’s efforts, the United States needs a far more expansive vision of how to empower other nations with the education, tools and infrastructure needed to jum...
By Bill Drexel & Hannah Kelley
U.S.-China Competition and the Race to 6G
China views telecommunications as central to its geopolitical and strategic objectives....
By Sam Howell
Biden Took the First Step With AI Commitments — Now It’s Congress’ Turn
One of the keys to tackling these risks is developing advanced methods to train effective AI systems while maintaining Americans’ privacy....
By Josh Wallin
Time to Act: Building the Technical and Institutional Foundations for AI Assurance
Assurance for AI systems presents unique challenges....
By Josh Wallin & Andrew Reddie