Recommendation Resilience
Policy Brief · Democratic Resilience SeriesAn interactive policy-brief website

From Recommendation to Resilience:Democracy, AI, and Algorithmic Governance.

Digital technologies are dual-use. The same systems that erode democratic resilience through misinformation and manipulation can strengthen it — through crisis response, accessibility, participation, and transparency. The question is not whether to embrace them, but how to govern them by democratic values.

5.5B
Global internet users — the largest political public in history
ITU, Facts & Figures 2024
71%
Countries where democracy declined over the last decade of digitalisation
V-Dem Institute, Democracy Report 2024
~60%
People worried AI will be used to spread false information in elections
Reuters Institute, Digital News Report 2024
§1

Executive Summary

Democratic resilience in the digital age depends not only on whether information is true or false, but on how contemporary platforms sort, rank, and amplify information before citizens ever see it.

The strongest evidence does not support a simple claim that recommendation algorithms alone cause polarization everywhere. Instead, systems shape exposure via engagement proxies, and downstream effects vary by platform, country, period, and method.

Generative AI changes the risk landscape by lowering the cost of persuasive falsehoods and enabling the liar's dividend — real evidence dismissed as fake, simply because convincing fakes exist.

Platform design has become part of democratic infrastructure — not a purely commercial question.
Converging policy menu
  • · Transparency & recommender-system disclosure
  • · Risk management (NIST AI RMF, EU AI Act)
  • · Election-specific synthetic media rules
  • · Intermediary codes of practice
  • · Targeted enforcement on deceptive AI
§2

Scope & Definitions

Democratic resilience — the institutional and societal capacity of a democracy to absorb shocks, adapt under pressure, and preserve competitive elections, pluralistic debate, accountability, and citizen trust. Comparative work distinguishes onset resilience (avoiding autocratization) from breakdown resilience (reversing erosion once it has begun).

In technology policy, the relevant "shock" is not a single tool but a shifting information architecture: recommenders decide what is visible; generative AI expands the supply of synthetic content; platform governance rules set what is removed or monetized; election technology shapes both convenience and confidence.

Move your cursor — definitions drift around it
Hover to gather them
Recommenders
Rank posts, videos, and accounts using engagement proxies — determining what is repeatedly seen.
Generative AI
Foundation models producing synthetic text, image, audio and video — lowering the cost of persuasive falsehoods at scale.
Platform governance
What is removed, labeled, demoted, monetized — and who decides. Includes recommender-system rules, terms of service and appeal mechanisms.
Election technology
From voter-registration databases and ballot-marking devices to online political ads, i-voting and deepfake defenses.
Liar's dividend
The reputational benefit bad actors extract from the mere existence of convincing deepfakes: dismissing genuine evidence as fake.
Digital public infrastructure (DPI)
State-provided digital rails — identity, payments, data exchange — that citizens and services rely on (e.g. Estonia's e-ID and X-Road).
Systemic risk (DSA)
Under the EU Digital Services Act, harms very large platforms must assess and mitigate: illegal content, fundamental-rights impact, civic discourse, elections, public security, and public health.
Coordinated inauthentic behavior
Networks of accounts operating together to manipulate public debate while misrepresenting who is behind them.
Provenance & watermarking
Cryptographic or perceptual signals attached to media that let downstream viewers verify origin and detect edits (e.g. C2PA).
Foreign information manipulation & interference (FIMI)
Coordinated, largely non-illegal but manipulative behavior by foreign actors that threatens democratic values, processes and institutions.
§3

Introduction: Platforms Are Not Neutral Channels

Because recommenders run continuously and at scale, even small ranking preferences reshape the visibility of political speech, the speed of rumor propagation, and the perceived boundaries of mainstream opinion.

The evidence since 2016 points to a more precise claim than "algorithms radicalize." Recommendation systems are best understood as risk multipliers: they magnify existing cleavages, partisan ecosystems, and coordinated disinformation — but their effects depend on user demand, network composition, and local media systems.

The dual character of digital technology
As democratic stressor
  • Engagement optimization rewards outrage and identity-congruent content.
  • Synthetic media makes evidence contestable → the liar's dividend.
  • Opaque moderation weakens trust in the fairness of public debate.
  • Coordinated influence operations cheaply manufacture apparent consensus.
§4

A Short Timeline, 2019 – 2026

The regulatory and empirical landscape has moved quickly. Click a marker to expand.

2025

Enforcement & evidence sharpen

Structural regimes shift from adoption to enforcement; new research pins causal effects of generative AI.

  • Feb 2025EU AI Act prohibitions and AI-literacy obligations begin to apply.
  • Mar 2025Salvi et al. (Nature Human Behaviour): GPT-4 with limited personal data is 81.7% more persuasive than humans.
  • 2025V-Dem Democracy Report: average level of democracy back to 1985 levels.
  • OngoingSingapore uses new election rules to restrict foreign online influence campaigns.
§5

From Recommendation to Persuasion

Six overlapping mechanisms move platforms from mere curation toward democratic consequence.

§6

Case Studies

Twelve cases across North America, Europe, Asia, Latin America, MENA and Africa — some illustrate democratic risks from algorithmic and synthetic-media systems, others show how the same technologies can strengthen democratic capacity.

Region
Outcome
16 cases
Resilience caseDigital public infrastructureCEE · Estonia

Digital government & internet voting

Secure digital identity underpins nearly every interaction between Estonians and their state — including voting. In the 2023 parliamentary election, more than half of all ballots were cast online.

  • e-ID and X-Road interoperability layer let citizens access healthcare, tax, and business services through a single credential.
  • i-Voting increased convenience and overseas access, but post-2023 debate showed legitimacy depends on verifiability, not only convenience.
  • Shows resilience as an ongoing investment in trust and cybersecurity — not a one-off launch.
Sources
§7

Comparative Evidence

An evidence map, not a scorecard. Different platforms, methods, and outcome measures reveal different parts of the same problem.

Method
Study
Method
Where
Detail
Sample
~2M daily active Twitter accounts
Main finding
Mainstream right amplified more than mainstream left in 6 of 7 countries; extremes not amplified more than centrists.
Why it matters
Cross-national asymmetry — but warns against equating amplification with automatic extremist favoritism.
§8

Policy Landscape

Governments are converging on a shared menu — transparency, risk management, election-specific rules, intermediary accountability, and targeted enforcement — even where their regulatory philosophies differ.

Region
North America
US — NIST AI RMF 1.0 + GenAI Profile

Voluntary risk-management framework for trustworthy AI, with a 2024 profile for generative AI.

Relevance

Useful for audits and organizational controls; not a binding platform-democracy regime.

North America
US — HAVA & VVSG 2.0

Accessible voting systems; privacy-independent participation; usability, auditability, integrity.

Relevance

Election tech can improve access while embedding verification.

North America
US — FCC robocall enforcement

AI-generated voices in robocalls treated as unlawful; $6M fine in the Biden voice-clone case.

Relevance

Targeted election-integrity response to synthetic media.

CEE
EU — Digital Services Act

Systemic-risk regime for VLOPs; recommender transparency; non-profiling option; Commission investigative powers.

Relevance

The most developed structural framework for platform accountability.

CEE
EU — AI Act

Risk-based AI regulation; transparency for AI-generated content under Art. 50 (key obligations from Aug 2026).

Relevance

Directly relevant to deepfakes, provenance, and disclosure.

CEE
EU — Strengthened Code of Practice on Disinformation

Voluntary commitments on demonetization, political-ad transparency, research access.

Relevance

Useful soft-law layer; effectiveness evidence mixed.

Asia-Pacific
Singapore — POFMA & codes of practice

Correction directions, disabling powers, and codes for political-ad transparency and credible sources.

Relevance

Strong administrative toolkit; criticized for broad executive discretion.

Asia-Pacific
Singapore — Election rules (foreign influence & candidate deepfakes)

Restrictions on foreign online election ads; ban on manipulated content misrepresenting candidates during elections.

Relevance

Election-specific hardening against foreign influence & synthetic media.

Asia-Pacific
Taiwan — Anti-Infiltration Act

Criminalizes election-related acts funded/instructed by hostile foreign infiltration sources.

Relevance

Sovereignty-centered foreign-interference model.

Asia-Pacific
South Korea — Election Act amendment

Ban on AI-generated deepfakes in campaigns within 90 days of voting, with criminal penalties.

Relevance

Focused response to synthetic-media electoral manipulation.

Latin America & Caribbean
Brazil — PL 2630 / Fake News bill

Legislative proposal requiring platform transparency, AI-content labelling, and due-process rules for content removal; stalled by platform opposition and free-speech concerns.

Relevance

Would create the most comprehensive platform-regulation regime in the region if enacted.

Latin America & Caribbean
Mexico — INE synthetic-content criteria (2024)

Binding electoral guidance requiring parties and candidates to label AI-generated material and banning deepfakes impersonating opponents.

Relevance

Shows how an election-management body can move faster than statute on generative AI.

Latin America & Caribbean
Chile — Ley 21.096 & disinformation working group

Constitutional data-protection right (2018) plus a 2023 executive-branch working group coordinating platform, academic and press response to electoral disinformation.

Relevance

Combines rights-based data protection with a soft-law coordination model instead of speech criminalisation.

Latin America & Caribbean
Colombia — CRC digital-media guidelines & CNE electoral rules

Communications regulator (CRC) content-moderation transparency guidance; National Electoral Council rules on online political advertising and disclosure.

Relevance

Regulator-led transparency model rather than a single omnibus statute.

Sub-Saharan Africa
Kenya — Computer Misuse and Cybercrimes Act 2018 (amended 2021)

Criminalises false publication, cyber-harassment and fake news; amended to narrow scope after court challenges.

Relevance

Illustrates the tension between election-integrity goals and overbroad speech restrictions that chill dissent.

Sub-Saharan Africa
Nigeria — Electoral Act 2022 (social media provisions)

Regulates online political advertising and requires disclosure of sponsors; complemented by independent fact-checking coalitions (Dubawa, Africa Check).

Relevance

Hybrid model: statutory rules on ads plus civic verification infrastructure rather than top-down removal.

Sub-Saharan Africa
South Africa — POPIA & Films and Publications Amendment Act

POPIA (2020) enforces data-protection rights against platforms; the 2019 Films and Publications amendments create offences for non-consensual intimate imagery and 'harmful' online content.

Relevance

One of the region's most developed rights-based frameworks; enforcement capacity remains the constraint.

Sub-Saharan Africa
Ghana — Cybersecurity Act 2020 & NCA election guidelines

Establishes the Cyber Security Authority, mandates critical-information-infrastructure protection, and pairs with National Communications Authority guidance on election-period platform conduct.

Relevance

Institutional-capacity approach: build a regulator first, then layer election-specific rules on top.

MENA
Tunisia — Decree 54 on cybercrime (2022)

Criminalises the creation and spread of 'false news' with up to five years in prison; applied against journalists, activists and opposition figures.

Relevance

Demonstrates how counter-disinformation laws can be repurposed to suppress civic discourse.

MENA
UAE — National AI Strategy 2031 & Federal Decree-Law 34/2021

State-led AI industrial strategy paired with a cybercrimes law that criminalises 'rumours' and content 'harmful to public order', with penalties up to life imprisonment for some offences.

Relevance

Illustrates a state-capacity model that pairs heavy AI investment with tight speech control — the inverse of the EU's rights-based framing.

MENA
Jordan — Cybercrimes Law 2023

Broadly criminalises online 'false news', 'contempt of religion' and content 'undermining national unity', with prison terms and platform-blocking powers.

Relevance

A recent regional example of the counter-disinformation frame being used to narrow civic space; drew criticism from UN Special Rapporteurs.

MENA
Morocco — Law 09-08 on personal data & 2020 draft social-media bill

One of the region's earliest data-protection regimes (CNDP regulator) alongside a controversial (later shelved) 2020 draft criminalising 'fake news' on social media.

Relevance

Shows the tension between a functioning data-protection authority and periodic legislative attempts to restrict online speech.

CEE
Estonia — i-Voting legal framework & 2023 Riigikogu review

Statutory basis for internet voting in Riigikogu Election Act; independent audit and source-code publication after the 2023 election where >50% of ballots were cast online.

Relevance

Most mature legal-technical framework for binding online voting in a democracy.

CEE
Poland — Electoral Code amendments & KRRiT digital oversight

2023–24 amendments require online political-ad disclosure; the KRRiT broadcasting regulator has expanded remit over on-demand and platform content, alongside the National Cybersecurity Strategy 2019–24.

Relevance

Post-2023 government has pushed reforms to align with the EU DSA and rebuild public-media independence.

CEE
Ukraine — Diia framework & Centre for Countering Disinformation

Law on Public Electronic Services underpins the Diia app; a National Security and Defence Council body coordinates wartime rapid response to Russian influence operations.

Relevance

Live example of digital public infrastructure and information defence operating under wartime conditions.

CEE
Romania — AEP & CNA rules on online political ads (post-2024 annulment)

After the Constitutional Court annulled the 2024 presidential first round over undisclosed TikTok campaign spending, the Permanent Electoral Authority (AEP) and audiovisual regulator (CNA) tightened rules on online political advertising and platform reporting.

Relevance

First EU case where an election was annulled over social-media manipulation — a stress test for DSA enforcement.

Interactive

Real or AI? A Quick Gut Check

Five short scenarios drawn from the brief. Guess whether each describes a genuine event or an AI-manipulated one — then read what actually happened.

Question 1 / 5Score 0 / 0

A robocall using President Biden's voice tells New Hampshire voters to 'save your vote' and skip the primary.

§9

Key Findings

Seven synthesis points across the case studies, comparative evidence and policy landscape — what a democratic-resilience roundtable should treat as the working consensus.

01

Amplification is real but uneven

Cross-national experiments (Huszár 2021) confirm that recommender systems asymmetrically amplify political content — but effects vary by country, platform, and period, and rarely translate directly into attitude change (Guess 2023, Nyhan 2023, Liu 2025).

02

Exposure ≠ persuasion

Removing algorithmic ranking or reducing like-minded exposure changes what people see without reliably shifting what they believe in short study windows. Behavioural and attitudinal effects must be separated analytically.

03

Generative AI has crossed the persuasion threshold

Salvi et al. (2024) show GPT-4 with limited personal data out-persuades humans on political topics by 81.7%. Combined with cheap voice cloning (Biden robocall) this changes the electoral-manipulation cost curve.

04

The liar's dividend is now operational

It is no longer hypothetical: candidates and officials routinely dismiss authentic recordings as AI-generated. Provenance, watermarking (C2PA) and disclosure regimes matter for both directions.

05

Resilience is a portfolio, not a policy

Estonia (DPI + i-voting), Taiwan (participation + Anti-Infiltration Act), Japan (crisis AI), the EU (DSA + AI Act), Brazil (TSE fact-checking), Nigeria (civic verification coalitions) and firms like Clema (heat resilience) show capacity is built across identity, participation, adaptation and enforcement layers — never one lever alone.

06

The regulatory menu is converging

Transparency, systemic-risk management, election-specific synthetic-media rules, codes of practice, and targeted enforcement now appear across the US, EU, Asia, Latin America, MENA and Africa — with sharp differences in enforceability and executive discretion.

07

Baseline democracy is eroding

V-Dem 2025 puts the average citizen's level of democracy at 1985 levels; Freedom House flags 14 straight years of declining internet freedom and AI-manipulation in 16+ national elections. Platform reform sits inside a wider autocratization trend.

Working consensus

Digital technology is neither the disease nor the cure of democratic decline. It is a force multiplier — of the institutions, participation habits and adversaries a democracy already has.

§10

Through a Gen Z Lens

Hover — or, on a phone, drag your finger across a card — and a lens follows your cursor, revealing how the same civic behaviour looks for a generation that grew up in digital third spaces.

Traditional

Third spaces

Voters historically gathered in cafés, pubs, churches and union halls — 'third places' where face-to-face political conversation and organising happened. Many 19th- and 20th-century political movements were centred on them.

Traditional

News consumption

Evening broadcast, morning paper, trusted editorial gatekeepers deciding what is on the front page.

Traditional

Political speech

A rally, a leaflet, a letter to the editor. Sincerity is the default register; length signals seriousness.

Traditional

Deepfakes

'Seeing is believing.' Video was the gold standard of evidence in journalism and courts alike.

Traditional

Turnout & voting

You vote where you were raised, in person, on election day. Civic duty framed as ritual.

Traditional

Party loyalty

Inherited from family, reinforced by union, church or neighborhood; stable across a lifetime.

The lens is illustrative, not a survey instrument — pointers to well-documented generational shifts in political sociology and media use.

§9

Open Questions & Limitations

  1. 01

    Causal identification is hard.

    Strong studies use short windows or platform cooperation, and platforms change ranking systems mid-study.

  2. 02

    Regional coverage is uneven.

    The most rigorous experimental evidence still comes disproportionately from the US and English-language platforms. Latin America, MENA and Africa are under-represented despite being high-risk, high-growth digital markets.

  3. 03

    Platform opacity remains a governance problem.

    Outside the DSA, researchers depend on temporary access arrangements, disclosures, or audits.

  4. 04

    First-order effects only.

    This brief introduces synthetic media and election tech but does not yet fully analyze microtargeting, ad markets, and LLM persuasion research.

Practical takeaway

No single intervention is sufficient. The evidence supports a layered democratic-resilience approach — reduce technological risks through transparency, auditing, and accountability, while investing in technologies that strengthen democratic capacity.

Supported by
U.S. Department of State·Community of Democracies

Prepared with the support of the U.S. Department of State and the Community of Democracies as part of ongoing work on democratic resilience in the digital age. Views expressed are the authors' own and do not necessarily reflect those of the supporting institutions.