Publications

Explore articles, jobs, talks, news, privacy,...

Learn about dark patterns, fair patterns and much more

Willing to dig further on dark patterns? Here are curated resources, including hundreds of publications we analyzed in our R&D Lab, conferences, webinars and job opportunities to fight dark patterns.
Amazon.com Inc. is being sued by an investor for allegedly using dark patterns to trick users into signing up for Prime subscriptions. The investor is seeking internal documents to investigate claims that Amazon's corporate leaders continued to use a misleading Prime enrollment process, knowing it led consumers to sign up for unwanted recurring bills.
On October 18, 2022, the Consumer Financial Protection Bureau (CFPB) initiated legal action against ACTIVE Network for deceptive and abusive practices. ACTIVE Network allegedly enrolled consumers in discount club memberships without their explicit knowledge or consent during online event registration and payment processes. They also reportedly increased membership fees without providing consumers with written notice of the new amount and payment date. The CFPB seeks redress for consumers, disgorgement, injunctive relief, and the imposition of civil money penalties.
On May 15, 2024, Arizona Attorney General Kris Mayes filed two lawsuits against Amazon, accusing the company of violating consumer fraud and antitrust laws. The consumer fraud lawsuit focus on Amazon's use of dark patterns to discourage consumers from cancelling their Prime memberships.
A lawsuit was filed on behalf of Ethan Zuckerman, a professor at the University of Massachusetts Amherst, arguing that Section 230 of the Communications Decency Act protects the development of tools like his browser extension, Unfollow Everything 2.0. This tool allows Facebook users to control their online experiences by unfollowing friends, groups, and pages, and donating their data to academic research. The lawsuit seeks a declaration that Section 230 immunizes Zuckerman from civil liability or that the tool doesn't violate Meta's Terms of Service or relevant laws. The outcome is uncertain due to a novel interpretation of Section 230 and concerns about potential misuse of collected data.
On May 9, 2024, Ohio Attorney General Dave Yost announced three multistate settlements totaling $10.25 million with the largest wireless carriers in the United States, resolving investigations into deceptive advertising practices. The settlements require carriers to ensure truthful advertising, clearly disclose restrictions and terms for "unlimited" data plans and "free" services, justify cost-saving claims, appoint a dedicated consumer complaint handler, and train customer service to comply with the agreements' terms.
New Jersey has enacted Bill 332, becoming the 14th state to have a comprehensive state privacy law. The law, effective from January 2025, applies to controllers conducting business in New Jersey or targeting New Jersey residents. It includes obligations for controllers such as data minimization, privacy notice requirements (including a reasonably accessible, clear, and meaningful privacy notice), obtaining consumer consent for sensitive data, and implementing data security practices. The law also introduces a universal opt-out mechanism for targeted advertising or data "sale" and standard consumer rights.
The New York governor proposed a Buy Now Pay Later legislation, introducing a licensing requirement, limiting charges, and requiring an ability-to-repay analysis for BNPL products. The legislation also prohibits confessions of judgment, misleading advertisements, and excessive penalties or fees. It mandates clear disclosure of terms, costs, and the refund process for goods or services purchased with a BNPL loan.
Maryland's legislature is considering a bill, the Maryland Kids Code, that would prohibit companies from spying on minors and using their data for targeted ads or online manipulation. It mandates privacy by design and default for online products and services accessed by children and teens under 18. If passed, companies would be prohibited from profiling children for personalized ads and would be required to enable the highest privacy settings by default. The bill also defines and prohibits the use of dark patterns and other unfair, abusive, or deceptive trade practices.
The Illinois House of Representatives is considering a new privacy law prohibiting dark patterns. The law defines consent as a clear, freely given, specific, informed, and unambiguous act, and explicitly states that consent does not include agreements obtained through dark patterns or deceptive design patterns. Dark patterns are defined as UI designs that substantially subvert or impair user autonomy, decision-making, or choice.
Earlier this month, California introduced Assembly Bill 2863, proposing amendments to the state's Automatic Renewal Law (ARL). If passed, the amendments would impose stricter requirements on disclosures, consent, and cancellation processes. Businesses would be mandated to obtain a consumer's affirmative consent separately from other contract terms for any automatic renewal or continuous service offer, and keep records of this consent for at least three years, or one year after contract termination. The amendments would also prohibit businesses from employing dark patterns in contracts and misrepresenting material facts related to the transaction or the underlying goods or services.

Our clients