Dark patterns: the manipulative designs that are now illegal

Dark patterns are designs that steer you into choices you would not freely make. The bestiary: Roach motel (subscribe in one click, cancel through five menus and a phone call), confirmshaming (“No thanks, I hate saving money”), fake scarcity (“3 rooms left!” — always), nagging (the cookie banner that returns until you surrender), privacy zuckering (defaults set to maximum data sharing), drip pricing (fees appearing at the last step). Why they are illegal, per layer: consent extracted by design pressure is not “freely given” under the GDPR (invalid consent = unlawful processing); the DSA (Art. 25) bans online platforms from interfaces that deceive or manipulate users’ decisions; the Unfair Commercial Practices Directive catches fake countdowns and hidden fees; and the EDPB’s dark-pattern guidelines give regulators a shared vocabulary — which is why citing the pattern name in a complaint lands. Enforcement is real: cancellation-flow cases, cookie-banner sweeps, and the Commission’s preliminary finding that Meta’s and TikTok’s engagement designs breach the DSA (see What’s changing) all run on this logic, and the upcoming Digital Fairness Act is expected to harden the rules further. Your counter-moves: screenshot the flow (evidence beats memory), cancel in writing when the interface stalls you (an email cancellation is valid even when the button hides), and report patterns to your consumer authority or DPA depending on whether money or data is the lever.