Standfirst: A leaked draft indicates that the European Union is considering restrictions on ten online design practices regarded as manipulative or harmful. The proposal would target interfaces that steer users towards decisions they may not otherwise make, but its final legal status and timetable have not been confirmed.
The European Union is preparing possible action against so-called “dark patterns” in digital services, according to a leaked draft reported in recent EU policy coverage. The proposed blacklist would identify ten online design practices that can influence, pressure or mislead users when they interact with websites and apps.
The development is part of a wider debate over consumer protection, platform accountability and the effect of digital interfaces on children and vulnerable users. However, the draft should not be treated as an adopted EU law. Further institutional decisions would be required before any new obligations could take effect.
What the draft EU rules would target
Dark patterns are design features that make it easier for users to accept, buy, subscribe or share information than to reject or cancel. They may rely on confusing layouts, repeated prompts, emotional language or unnecessary obstacles placed in the way of a user’s preferred choice.
The reported blacklist would create a clearer framework for identifying prohibited or restricted practices. Rather than focusing only on the content of a service, the approach would examine how digital products are designed and how those designs affect consumer decisions.
Potentially affected practices could include interfaces that:
- make one option visually dominant while obscuring alternatives;
- use pressure or urgency to encourage a quick decision;
- make subscriptions easy to start but difficult to cancel;
- present commercial choices in a confusing or misleading way;
- seek personal data through design choices that do not provide a genuinely balanced option.
The precise wording and scope of the ten practices cannot be confirmed from the leaked draft alone. The final text would determine which services are covered, what conduct is prohibited and how national authorities would enforce the rules.
How the proposal fits into EU digital regulation
The possible blacklist would add to an expanding body of EU regulations and consumer-protection rules governing online services. Existing legislation already addresses misleading commercial practices, data protection, platform responsibilities and the operation of very large online platforms.
The Digital Services Act is particularly relevant to the broader policy discussion because it places transparency and risk-management obligations on online platforms. It also gives the European Commission a role in supervising the largest services operating in the single market. A blacklist of design practices could provide more specific guidance on when an interface becomes manipulative.
This would be different from simply banning unpopular or inconvenient features. Regulators would need to establish whether a design materially distorts a user’s decision or undermines informed consent. That distinction is important for businesses developing legitimate personalisation, advertising and subscription tools.
Why businesses and consumers are watching
For consumers, clearer restrictions could make online transactions easier to understand. Users may face fewer barriers when declining optional services, withdrawing consent or cancelling recurring payments.
Businesses, meanwhile, could need to review websites, mobile applications and customer journeys across the EU. The compliance impact would depend on the final legal instrument and whether obligations applied directly or required national implementation.
Companies may have to assess:
- cookie and privacy-consent interfaces;
- online sales and subscription cancellation processes;
- advertising disclosures and sponsored recommendations;
- account creation and account deletion journeys;
- default settings affecting children or other vulnerable users.
Smaller businesses could be affected if the rules applied broadly across consumer-facing digital services. Clear guidance and proportionate enforcement would therefore be important to avoid uncertainty in the single market.
Connection with wider concerns about children and platforms
The reported initiative comes as EU institutions examine how recommendation systems and interface design influence children and vulnerable users. Recent scrutiny of TikTok’s recommendation feed, for example, has focused on the potential for users to be drawn into prolonged exposure to harmful material.
Design regulation and content regulation are not identical. A platform can comply with rules on illegal content while still using interface choices that encourage excessive engagement or make meaningful user control difficult. Policymakers are increasingly considering both parts of the digital experience.
Any final measures would need to work alongside the EU’s Artificial Intelligence Act, the Digital Services Act, the General Data Protection Regulation and existing consumer law. Overlapping rules could improve protection, but they could also create compliance questions if the same design is assessed under several legal frameworks.
Is this already a new EU law?
No. The information concerns a leaked draft, not a formally adopted measure. The draft’s publication does not itself create legal duties for companies or change the rights of consumers.
The eventual process would depend on the legal basis selected by the European Commission and the form of the proposed measure. If new legislation were proposed, the European Parliament and the Council of the European Union would normally have roles in examining and adopting it under the ordinary legislative procedure. If the Commission pursued guidance or secondary legislation, the process could be different.
Until an official text is published, important details remain open, including:
- the exact list of ten practices;
- which companies and services would be covered;
- the penalties or remedies available to authorities;
- the date of application;
- whether existing services would receive a transition period.
What it could mean for Ireland
If the proposals become EU-wide rules, Irish consumers and businesses operating in the EU single market could be affected. Irish companies providing online retail, software, media, financial or subscription services may need to review user-interface design and consent processes.
Enforcement would involve the relevant Irish authorities under the final legal framework. The effect on Ireland cannot be assessed fully until the Commission publishes an official proposal and confirms whether the measure would be a regulation, directive or another form of EU action.
What happens next
The next important step is confirmation through an official European Commission announcement or published legislative document. That text would establish whether the leaked plan becomes a formal proposal and explain how it would interact with existing EU consumer and digital rules.
After publication, the proposal could face consultation, technical examination and negotiations between EU institutions. The final rules may differ substantially from the leaked draft before adoption.
Conclusion
The reported blacklist signals that EU policymakers are placing greater emphasis on the design of digital services, not only the content they host. For now, the plan remains a draft rather than an enforceable rule. The key development to watch in future EU news will be whether the European Commission formally presents the proposal and what protections, definitions and implementation dates appear in the final text.