The legal fiction underlying nearly every digital service is that you read the terms before you clicked agree. You didn’t. Nobody does. Studies repeatedly find that the percentage of users who actually read terms of service is functionally zero, and the percentage who could meaningfully understand them if they did is barely higher. Yet courts continue to enforce these agreements as if a meeting of minds occurred when you tapped a button to use a calorie-tracking app.
Something is broken when a system depends on a counterfactual to function.
What the research actually shows
A 2008 study estimated it would take an average user 76 work days to read all the privacy policies they encountered in a year. Subsequent research has only widened the gap as terms have grown longer and services more numerous. A widely cited 2017 study by Jonathan Obar and Anne Oeldorf-Hirsch demonstrated that a substantial majority of participants agreed to terms that included absurd clauses — including, in one version, granting up firstborn children — without noticing.
The empirical record is clear: clickwrap “consent” is a legal ritual, not an actual cognitive event. Courts that enforce these contracts under traditional contract doctrine are pretending that ordinary contract assumptions — meeting of the minds, informed consent, opportunity to negotiate — apply when none of them do.
The doctrinal mismatch
Traditional contract law assumes parties of roughly comparable sophistication, real opportunity to read and negotiate, and consequences calibrated to the bargain. Clickwrap inverts every assumption. The drafter is a corporation with full-time legal staff. The “negotiator” is a consumer with seconds of attention and no realistic ability to refuse without losing access to services that are now baseline infrastructure for daily life.
Forced arbitration clauses, class action waivers, unilateral modification rights, and broad data licenses are routinely buried in these agreements. The Supreme Court has, in cases like AT&T Mobility v. Concepcion (2011), repeatedly upheld these provisions under the Federal Arbitration Act, effectively transferring entire categories of disputes out of public courts and into private arbitration that overwhelmingly favors corporate defendants.
What a more honest framework would look like
Other legal systems have grappled with this more directly. The European Union’s Unfair Contract Terms Directive treats certain clauses in standard-form consumer contracts as presumptively unenforceable. GDPR requires consent to be specific, informed, and freely given — language that clickwrap, taken seriously, would have a hard time satisfying.
A more honest U.S. framework could maintain enforceability of core terms — what the service does, what it costs — while presumptively voiding non-core clauses that consumers couldn’t reasonably be expected to read or evaluate. Mandatory arbitration in consumer contracts, in particular, sits at the intersection of “almost no one consents to this knowingly” and “it has enormous practical consequences.” Treating it as enforceable on the same terms as a negotiated agreement is a doctrinal stretch.
The takeaway
Clickwrap is convenient for companies and indefensible as a model of meaningful consent. The law has accommodated convenience at the cost of doctrinal coherence and consumer protection. Reform doesn’t require abandoning digital contracts — it requires admitting what they actually are, and adjusting enforcement accordingly.
Leave a Reply