EU Proposes Digital Fairness Act to Ban Dark Patterns and Restrict Loot Boxes for Minors
The European Commission has proposed a Digital Fairness Act (DFA), a consumer protection package that would ban dark patterns in apps, meaning interface designs that steer users toward choices they did not intend, including subscriptions that are hard to cancel. The draft also targets the monetisation mechanics minors encounter most often in games, and it would give enforcers stronger tools than the current framework provides.
Under the draft, companies found in breach could face fines of up to six percent of annual global revenue, according to Engadget. The ceiling is calculated on global turnover rather than EU-only revenue, which matters for platforms whose European business is a small share of their total.
On the design side, the proposal would restrict unfair practices that encourage minors to overspend, and it names pay-to-win loot boxes, paid randomised items that give buyers a competitive edge, in games specifically. It would also let consumers switch off addictive design features that push excessive or compulsive spending. That is a notable choice of wording. Rather than banning a feature set outright for everyone, the draft gives the user a control, which puts the burden of configuration on the product team that must build and maintain it.
The proposal extends to pricing and advertising. It would require clear, transparent online pricing for cultural and sports events, where dynamic and fee-laden checkouts have been a recurring complaint. It would require influencers to disclose commercial content, address unfair personalised ads and prices targeting minors, and ban difficult-to-cancel subscription traps.
Enforcement is the structural change. The Commission proposed moving toward a more centralised system with direct powers to investigate large-scale consumer cases. Today, consumer enforcement in the EU is largely carried out by national authorities acting together. A centralised model would let the Commission open cases against large cross-border operators itself. The Commission's stated aim is to ensure that EU consumers enjoy the same high level of protection online as they do offline, as set out in its press materials.
The broader context here is that most of these practices are neither new nor hidden. Cancellation flows that require a phone call, consent screens with a high-contrast accept button and a buried decline option, and loot mechanics that reward purchases of randomised items are all instrumented, A/B tested and reviewed by growth teams. The DFA would turn those design choices into legal liabilities, which changes the calculation for product owners who had treated them as conversion levers with no cost attached.
In my view, the most technically interesting question is the user-facing switch for addictive features. Defining "addictive design" in a rule that must survive contact with real products is difficult. Infinite scroll, variable-ratio rewards (the unpredictable payout pattern used in slot machines), streaks and countdown timers can each be benign or manipulative depending on configuration and context. Engineers will need a precise specification of which features fall under the switch, and regulators will need a way to test compliance without reverse-engineering every client build. Whether the final text answers those questions will matter more to implementers than the headline penalty.
The proposal remains a Commission proposal. It must pass through the European Parliament and the Council before it becomes law, and its wording may change along the way. Nothing in the current text obliges a company to do anything yet.
The case for optimism is that a rule making cancellation as simple as sign-up is a constraint a well-designed product can meet without strain. Clear ticket pricing and clear labelling of sponsored content are, by most measures, easier to build than the workarounds they replace. If the DFA reaches the statute book in recognisable form, the engineering effort may be modest for teams already building honest interfaces, and the protection for younger users could be substantial.
