Publications

Explore articles, jobs, talks, news, privacy,...

Learn about dark patterns, fair patterns and much more

Willing to dig further on dark patterns? Here are curated resources, including hundreds of publications we analyzed in our R&D Lab, conferences, webinars and job opportunities to fight dark patterns.
The Texas Deceptive Trade Practices Act (DTPA) prohibits false, misleading, or deceptive acts or practices in trade or commerce. It also prohibits advertising goods or services without the intent to sell them as advertised and failing to disclose information that would have influenced the consumer's decision to enter into a transaction.

The Digital Services Act (DSA) is a legislation in the EU that applies to all digital service providers. It prohibits the use of dark patterns to deceive or bias users and requires platforms used by minors to have high levels of privacy and security. The DSA also prohibits designing online interfaces to manipulate or impair users' decision-making.
Senate Bill S.289, introduced in Vermont on January 17, 2024, aims to create an age-appropriate design code. The bill applies to entities that collect personal data, operate within Vermont, and meet certain thresholds related to revenue or data collection. The bill mandates processing children's data in their best interest, conducting a Data Protection Impact Assessment for online services accessed by children, and using clear language suited to the age of children. Moreover, it prohibits profiling children by default, unnecessary processing of precise geolocation data, and the use of dark patterns to obtain excessive personal data. If enacted, the bill would take effect on July 1, 2024.
On April 7th, 2024, Representative Cathy McMorris Rodgers and Senator Maria Cantwell introduced the American Privacy Rights Act, marking the first bipartisan effort to establish a comprehensive data privacy law in the United States. This legislation surpasses existing protections for medical and children's data nationwide. It would grant Americans rights such as opting out of targeted advertising and algorithmic decision-making, minimizing personal data retained by companies, and requesting access to, corrections, or deletions of their data. Companies would need explicit consent to share sensitive personal data and would face prohibitions against using dark patterns. Enforcement would be overseen by the Federal Trade Commission, with the option for private lawsuits by affected individuals.
On the 20th of march 2024, the Ticket Buyer Bill of Rights Coalition endorsed a bipartisan legislation in Colorado aiming to improve consumer protection and transparency in ticketing by fighting dark patterns. The bill prohibits hidden fees, ticket price increases after selection, and the use of deceptive websites, while ensuring refunds for cancelled events. It also promotes competition and fair regulation in both primary and secondary ticket markets. The bill is set to be heard in the Assembly’s Business Affairs and Labor Committee on April 11, 2024.
New Hampshire's Senate Bill 255, a new comprehensive privacy law, was signed and will go into effect on January 1, 2025. The law defines expansive categories of sensitive data and introduces specific definitions of consent, prohibiting the use of dark patterns for obtaining consent. It also introduces key provisions such as individual rights for consumers, privacy by design principles, and obligations for processors. The law provides stronger protections for children's data and restrictions on targeted advertising.
Florida has passed a law banning anyone 14 and younger from using social media platforms. The law, which could result in fines of up to $50,000 per violation, also requires social media companies to terminate existing accounts of minors and requires proof of age for new account registrations, and imposes parental consent requirements and age-verification. The law has been signed by the Florida governor and is now enacted, with an effective date of January 1, 2025. It includes a list of exceptions, such as email, direct messaging, streaming services, and online shopping sites.
The District of Columbia Consumer Protection Procedures Act aims to protect consumers from unfair and deceptive business practices. It establishes the right to truthful information from merchants and prohibits false advertising (such as not showing the final price), misleading representations of fact.
The Illinois House of Representatives is considering a new privacy law prohibiting dark patterns. The law defines consent as a clear, freely given, specific, informed, and unambiguous act, and explicitly states that consent does not include agreements obtained through dark patterns or deceptive design patterns. Dark patterns are defined as UI designs that substantially subvert or impair user autonomy, decision-making, or choice.

Our clients