Digital Fairness Act (EU)

The Digital Fairness Act (DFA) is a forthcoming EU legislative proposal — expected Q4 2026 — designed to update horizontal EU consumer protection law for digital markets. It does not replace the Consumer Rights Directive, Unfair Commercial Practices Directive (UCPD), or Unfair Contract Terms Directive (UCTD), but amends and extends them to address digital practices that existing rules do not fully cover. As of July 2026 no formal proposal text (COM number) has been published; all obligations described below reflect consultation documents, Commission Work Programme commitments, and independent legal analysis.

Background and legislative origin

The DFA originates from the Digital Fairness Fitness Check (launched May 2022, concluded October 2024), which assessed the UCPD, CRD, and UCTD and found them "broadly relevant but insufficient for digital markets." The Commission's own Staff Working Document (SWD(2024) 230, published 3 October 2024) estimated at least €7.9 billion per year in financial harm to EU consumers from digital unfair practices, excluding non-financial harm such as mental distress (as-of 2024-10-03). (BEUC, citing Commission SWD, December 2025)

Commissioner Michael McGrath (Democracy, Justice, Rule of Law and Consumer Protection) is responsible for the DFA under the second von der Leyen Commission. His mission letter tasks him with tackling "dark patterns, marketing by social media influencers, addictive design of digital products and online profiling, in particular when consumers' vulnerabilities are exploited for commercial purposes." (Commission mission letter, cited by digitalfairnessact.com, 2025-12-09)

The Commission confirmed the DFA as a headline initiative in the 2030 Consumer Agenda (adopted 19 November 2025) and in the 2026 Work Programme (COM(2025) 870), formally scheduling the proposal for Q4 2026. (European Parliament Legislative Train, 2026-04-20)

Legislative timeline (as-of 2026-04-20)

Milestone	Indicative date
Public consultation open	17 Jul – 24 Oct 2025
Consultation Factual Summary published	19 Dec 2025
Impact assessment finalised	Q2 2026 (indicative)
Commission formal proposal	Q4 2026 ("super tight" per Commission, Jan 2026)
Parliament & Council negotiations	2026–2027
Possible adoption	Late 2027
Entry into force / staggered application	2028–2030 (indicative)

All dates from Q4 2026 onward are indicative and not binding. The Commission acknowledged at the EP IMCO exchange of views (January 2026) that Q4 2026 is already a "super tight" schedule. (EP IMCO Committee video, 2026-01-26, via digitalfairnessact.com newsletter)

Six areas the DFA is expected to regulate

Based on the Commission's consultation documentation and official pre-legislative communications, six substantive areas have been consistently flagged (as-of 2025-12-09, subject to formal proposal):

Dark Patterns and manipulative interface design — codifying prohibitions beyond DSA Article 25 (which applies only to platforms) to cover all online traders. Specific practices flagged include countdown timers creating false urgency, pre-ticked boxes, confirm-shaming, and hidden opt-outs. (Freshfields, 2025-11-26; Taylor Wessing, 2025-12-02)
Addictive Design — infinite scroll, autoplay, loot boxes, reward loops, and other design features that exploit behavioural vulnerabilities, particularly targeting minors. The Commission indicated it is assessing age verification obligations using the European digital identity framework. (EP IMCO Committee, 2026-01-26)
Unfair Personalisation and profiling — restrictions on using behavioural analytics that exploit consumer vulnerabilities; possible disclosure requirements when prices or offers are tailored to a user profile, building on the existing UCPD Article 6(1)(d) transparency obligation. (Freshfields, 2025-11-26; Osborne Clarke, 2025-09-15)
Misleading influencer marketing — EU-wide uniform transparency requirements for commercial relationships, with France's national influencer law cited as a model. The Commission indicated it will close loopholes "without over-regulating the sector." (EP IMCO Committee, 2026-01-26)
Unfair pricing tactics — the DFA consultation specifically sought views on an outright prohibition on Drip Pricing (total fees revealed only at checkout), restrictions on advertising "starting" prices under dynamic pricing, and extension of price reduction rules following the October 2024 CJEU ruling on the Omnibus Directive. The UK's Digital Markets Competition and Consumers Act already bans drip pricing for comparison. (Osborne Clarke, 2025-09-15)
Subscription cancellation traps — symmetry requirements so that cancellation is as simple as sign-up; targeting free trials silently converting to paid subscriptions; rationalised renewal information obligations. This directly addresses Subscription Traps practices documented across EU markets. (EP Legislative Train, 2026-04-20; digitalfairnessact.com, 2025-12-09)

Relationship to existing EU law

The DFA is explicitly designed to fill the gap between existing instruments rather than replace them (as-of 2025-11-26):

UCPD — already covers unfair commercial practices but lacks digital-specific provisions and a unified dark patterns definition (EPRS, January 2025). DFA may amend it.
CRD — already requires price transparency and withdrawal rights but does not address addictive design or personalisation. See Consumer Rights Directive.
DSA Article 25 — already prohibits dark patterns for online platforms; the DFA extends similar prohibitions horizontally to all online traders, including standalone e-commerce websites not caught by DSA.
GDPR in Ecommerce — governs data processing; retailers using personalisation may face dual obligations under GDPR and DFA.
AI Act — risk-based obligations for AI systems; how DFA's personalisation rules interact with AI Act obligations is not yet mapped in public documentation (gap as of mid-2026).

The EPRS briefing (January 2025) confirmed the EU dark-patterns regulatory framework is currently "fragmented and lacks a unified legal definition, creating legal uncertainty and inconsistent enforcement."

Scope and legal form

The DFA is expected to apply to any trader offering goods or services to EU consumers online, regardless of establishment — covering e-commerce, streaming, travel, ride-hailing, fintech, and gaming. SMEs are not automatically exempt, though the Commission has "emphasised the need for simplified, clear rules." (digitalfairnessact.com, 2025-12-09)

Most commentary treats the DFA as a future EU regulation (uniform, directly applicable like DSA/DMA/AI Act) rather than a directive, though the Commission told the EP IMCO Committee it prefers a regulation only "if entirely new provisions are needed." The legal form will be confirmed in the formal proposal. (EP IMCO Committee, 2026-01-26; MEP Dóra Dávid exchange, same session)

Stakeholder positions

Consumer organisations

BEUC's December 2025 position paper calls the DFA "the key tool to close gaps," advocates for burden-of-proof shifts, and reports that 70% of public consultation respondents supported binding EU intervention on dark patterns and addictive design. (BEUC, 2025-12-02)

Industry / retailers

Ecommerce Europe formally rejected the DFA in its October 2025 consultation response, arguing existing rules (UCPD, CRD, GDPR, DSA, DMA) are fit for purpose and the problem is inconsistent enforcement. It advocates for CPC Network guidance and voluntary industry cooperation. (Ecommerce Europe, 2025-11-05)

DIGITALEUROPE similarly argues existing rules are sufficient and that the priority should be better enforcement and guidance, not another legislative layer. (digitalfairnessact.com, 2025-12-09)

MEP positions (EP IMCO, January 2026)

MEP Christel Schaldemose (S&D) called for faster action and questioned whether current fines can deter large platforms. MEP Kim van Sparrentak (Greens/EFA) argued that "if something is harmful and unfair, it should be banned for everyone" and accused industry of lobbying to weaken protections. MEP Dóra Dávid (EPP) cautioned against over-regulation and asked for clarity on legal form. MEP Pablo Arias Echeverría (EPP) raised Chinese cross-border platforms as a "huge issue" the DFA should address alongside DSA/customs reforms. (EP IMCO Committee video, 2026-01-26)

Academic critique: interface-level vs systemic dark patterns

Dr. Mark Leiser (CPDP.ai 2025, cross-referenced ConsumerID.eu May 2026) argues the Commission is "looking at old-school dark patterns that are highly visible, even as the world has already moved on." His critique:

The "iceberg metaphor" applies: the user interface is the tip; the system architecture — AI-driven hyper-personalisation that exploits individual vulnerability profiles — is "far more problematic" than visible interface tricks. ^[1]
Rather than banning specific practices (urgency timers, pre-ticked boxes), Leiser proposes banning "deceptive optimisation strategies" — a blacklist of strategies rather than practices — to remain flexible enough for an AI-driven marketplace.
He proposes a legal obligation for businesses to maintain a mirrored audit server so regulators can reconstruct historically what data, interface, and pricing logic a specific consumer encountered — arguing consumer law cannot rely on transaction observation because "there will be no average consumer anymore."
The Dutch ACM's AI-scanning approach (thousands of websites, identify deployment, send letters) is cited as a model enforcement approach with a "100% success rate" for interface-level patterns — but Leiser notes it remains limited to surface-level patterns, not system architecture.

Commission framing vs. academic critique: The Commission's consultation and pre-legislative documents focus on visible interface-level dark patterns (click fatigue, confirm-shaming, nagging, urgency/scarcity claims). Dr. Leiser argues this approach is already outdated and that AI-driven personalisation operating at the system architecture level is the real regulatory frontier. The DFA's consultation instrument may not have been designed to address systemic manipulation. No Commission response to this critique has been published. (Commission consultation vs. CPDP 2025 / Leiser interview ConsumerID.eu May 2026)

What this means for ecommerce retailers

Taylor Wessing (December 2025) flags that the "rapid layering of new frameworks — DFA, Digital Omnibus, ongoing DSA/DMA enforcement, and the Consumer Agenda — risks heightening operational uncertainty for businesses, especially those with cross-border or innovative digital business models."

The Freshfields briefing (November 2025) notes that for e-commerce businesses the rules are "frequently new, updated, or under review," with the regulatory landscape already reshaped by the Modernisation Directive, General Product Safety Regulation, DSA, and targeted UCPD and CRD amendments — the DFA represents a further layer, not a clean replacement.

Enforcement is expected to follow the CPC network model (national consumer protection authorities as primary enforcers), mirroring current UCPD/CRD enforcement, potentially with an enhanced Commission role for cross-border or systemic cases.

Key terms

Term	Meaning
Fitness Check	2022–2024 Commission assessment of whether existing consumer law is fit for digital markets; concluded with SWD(2024) 230
UCPD	Unfair Commercial Practices Directive — the primary EU instrument the DFA is expected to amend
CRD	Consumer Rights Directive — covers withdrawal rights, price transparency, contract information
DSA Article 25	Existing prohibition on dark patterns — applies only to online platforms, not standalone e-commerce
Drip pricing	Incremental disclosure of fees; total price revealed only at checkout
CPC Network	Consumer Protection Cooperation — network of national enforcement authorities
Dark pattern	An interface or system design that manipulates consumer choices against their interests
Digital Omnibus	Parallel 2026 Commission initiative; DFA and Digital Omnibus together are expected to reshape EU digital consumer law

Sources

References

CPDP Conferences, 2025-06 — www.youtube.com/watch?v=S1rWysNntWs