Deceptive Patterns
‹ All reading

Dark Patterns and the EU Digital Services Act: Mapping Autonomy Violations and Design Factors

Author
Sanju Ahuja, Johanna Gunawan, N. Bielova, C. Santos
Date
13 Apr 2026
Publisher
International Conference on Human Factors in Computing Systems
Focus
Law & Policy
Category
Academic Scholar

This paper maps 59 known dark patterns onto the three autonomy violation types from the DSA and identifies eight new design factors which can help determine when a dark pattern violates autonomy.

Dark patterns are design practices that undermine users’ ability to make autonomous and informed choices in digital experiences. The EU Digital Services Act (DSA) seeks to protect users from such designs and their effects, with Article 25 prohibiting three autonomy violation types: deception, manipulation and distortion/impairment. Demonstrating such regulatory violations, however, requires design-oriented reasoning necessary to articulate why an observed design practice constitutes a specific autonomy violation type. This paper maps 59 known dark patterns onto the three autonomy violation types from the DSA and identifies eight new design factors which can help determine when a dark pattern violates autonomy.