Deceptive Patterns
‹ All reading

Do the DSA and DMA Have What It Takes to Take on Dark Patterns?

Author
Jennifer King
Date
23 Aug 2022
Focus
Law & Policy
Category
Academic Scholar

“…the DMA may root out some dark patterns, but only for “gatekeeper” companies, and only in contexts where those dark patterns relate directly to the law’s other provisions […] Ithe DSA might have had a decisive impact on the prevalence of dark patterns online. However, those hoping for a broad, aggressive approach to dark patterns may be underwhelmed…”

Global policymakers are increasingly fed up with manipulative and coercive user interface designs. In the last few years, legislation aimed to curb the use of “dark patterns” — those irritating and manipulative design tactics that digital interface designers use to get people to do what they want, like a consent choice that shouts “Accept” and whispers “Reject,” or a subscription that’s near impossible to cancel — has emerged from California to Brussels. There’s a growing consensus among lawmakers and the public that the designers of software interfaces have an inordinate amount of influence over the choices made by their customers, and that companies use that influence to exert decisional interference by coercing, manipulating, and even deceiving customers into making choices that benefit the company at their customers’ expense.

In the U.S., for example, there have been multiple efforts to rein in this influence. California’s new and incipient privacy laws aim to prevent decisional interference when exercising one’s right to opt-out of data collection, as well as when consenting to the collection of personal data; a bill in Washington state does the same. And recently, the Federal Trade Commission announced it was seeking public comment in its revision of its advertising disclosures guidelines, specifically to address the growing use of manipulative designs.

However, the latest regulatory attempts have come in the form of the E.U.’s landmark pair of internet legislation packages, the Digital Services Act (DSA) and Digital Markets Act (DMA). The DMA’s final text, published in May, includes at least two articles with implications for dark patterns. And the DSA, while not yet finalized, addresses dark patterns in its final drafts in more detail.

The impact of both packages, like the prior impact of the Europe’s comprehensive data privacy regulation, the General Data Protection Regulation (GDPR), also has the potential to spill far beyond the E.U.’