Dark Patterns and the EU Digital Services Act: Mapping Autonomy Violations and Design Factors

Paper Title

Dark Patterns and the EU Digital Services Act: Mapping Autonomy Violations and Design Factors

Publication Info

• Topic area: Intersection of human-computer interaction (HCI) and legal frameworks to address dark patterns in digital design.
• Keywords: Dark patterns, EU Digital Services Act, user autonomy, deception, manipulation, distortion, design factors, regulation, compliance, HCI.

Background and Problem

• Problem / challenge: Dark patterns undermine user autonomy by deceiving, manipulating, or impairing users' ability to make informed decisions. Despite regulatory efforts like the EU Digital Services Act (DSA), there is no systematic framework to map design practices to specific autonomy violations outlined in Article 25 of the DSA.
• Significance: Addressing dark patterns is critical for protecting user rights, ensuring fair digital practices, and enabling effective regulatory enforcement. The DSA imposes significant penalties for violations, necessitating clear reasoning for identifying dark patterns.
• Motivation and related work: Previous work has taxonomized dark patterns and explored their impact on autonomy but lacks a unified framework to connect these patterns to legal provisions like the DSA. This paper builds on Gray et al.'s ontology of dark patterns and Santos et al.'s interpretation of autonomy violations to bridge the gap between design and regulation.

Solution

• Proposed approach: A framework that maps 59 dark patterns from Gray et al.'s ontology to the three autonomy violation types defined in DSA Article 25 (deception, manipulation, distortion/impairment), supported by eight design factors.
• Novelty:
  1. Systematic mapping of dark patterns to autonomy violations as defined in the DSA.
  2. Identification of eight design factors categorized into Information Space and Choice Space to determine autonomy violations.
  3. Application of the framework to emerging design practices and ongoing legal cases.
  4. Contribution to interdisciplinary HCI-law efforts by operationalizing legal concepts for design analysis.
• Procedure and key techniques:
  • Qualitative coding of 59 dark patterns to map them to autonomy violations.
  • Identification of eight design factors contributing to these violations.
  • Application of the framework to new attention-capturing patterns and a legal case involving X (formerly Twitter).

Results

• Concrete findings:
  • 17 dark patterns mapped to a single autonomy violation, while 42 mapped to multiple violations.
  • Eight design factors identified: Information Availability, Information Correctness, Information Framing, Information Presentation, Choice Simplification, Choice Presentation, Choice Availability, Choice Effort.
  • Patterns with multiple violations pose higher risks and amplify systemic harms.
• Advantage over baselines:
  • Provides a structured, regulation-informed framework for analyzing dark patterns.
  • Bridges the gap between abstract legal provisions and concrete design practices.
  • Extends existing ontologies to new contexts, such as attention-capturing patterns.
• Experiments / evaluation:
  • Framework applied to 59 patterns from Gray et al.'s ontology.
  • Extended to 11 attention-capturing patterns and a legal case involving X’s paid blue checkmarks.
• Limitations and future work:
  • Framework is specific to the EU DSA and may not generalize to other jurisdictions.
  • Does not measure user perception or harm severity.
  • Future work could validate the framework with regulators, designers, and users, and expand its scope to other regulatory contexts.

Summary

This paper presents a framework that maps 59 dark patterns to the three autonomy violation types defined in the EU Digital Services Act (DSA) Article 25, supported by eight design factors categorized into Information Space and Choice Space. The framework enables systematic analysis of dark patterns, bridging the gap between design practices and legal provisions. It has been applied to emerging attention-capturing patterns and an ongoing legal case involving X’s paid blue checkmarks, demonstrating its practical utility. This work contributes to interdisciplinary efforts in HCI and law, providing tools for regulators, scholars, and industry practitioners to address dark patterns and ensure compliance with the DSA.