On October 3, 2024, the European Commission published a report evaluating the effectiveness of existing EU consumer protection laws in protecting consumers in the digital space.  More specifically, the report assesses the effectiveness of the following three consumer protection laws: (i) the Unfair Commercial Practices Directive (“UCPD”); (ii) the Consumer Rights Directive (“CRD”); and (iii) the Unfair Contract Terms Directive (“UCTD”).  It also identifies and analyses the main provisions in the DSA, DMA, Data Act, and AI Act that are of particular relevance for protecting consumers in the digital environment.  The report is the result of the 2022 public consultation we mentioned in our previous blog post.

The report found that the existing EU consumer laws are  not sufficiently effective in tackling current and emerging consumer harms in the digital environment.  The report will support the European Commission’s intention to start working a new EU consumer law called the “Digital Fairness Act”.  The new Act is expected to:

  • tackle new consumer risks in the digital space, such as dark patterns, addictive design and gaming, influencer marketing, personalization (of ads, rankings, recommendations and pricing/offers), contract cancellation, automated contracts in the context of connected devices, digital subscriptions, and generative AI systems (e.g., AI chatbots) and emotion-recognition AI systems;
  • provide for a greater degree of harmonization, further reducing differences in consumer laws at Member State level; and
  • ensure better enforcement, for example through the use of automated enforcement tools (e.g., automated market sweep tools), by strengthening the powers of consumer authorities to undertake joint enforcement actions, and by ensuring an increase in national and CJEU case law on consumer law in the digital environment.

This new regulation is expected to be proposed by the Commission in mid-2026.

*                      *                      *

Covington & Burling regularly advises companies on all aspects of EU consumer law, as well as intersections with privacy, cybersecurity, and product safety laws.  We are happy to assist you with any inquiries related to compliance with EU consumer law.

Photo of Kristof Van Quathem Kristof Van Quathem

Kristof Van Quathem advises clients on information technology matters and policy, with a focus on data protection, cybercrime and various EU data-related initiatives, such as the Data Act, the AI Act and EHDS.

Kristof has been specializing in this area for over twenty…

Kristof Van Quathem advises clients on information technology matters and policy, with a focus on data protection, cybercrime and various EU data-related initiatives, such as the Data Act, the AI Act and EHDS.

Kristof has been specializing in this area for over twenty years and developed particular experience in the life science and information technology sectors. He counsels clients on government affairs strategies concerning EU lawmaking and their compliance with applicable regulatory frameworks, and has represented clients in non-contentious and contentious matters before data protection authorities, national courts and the Court of the Justice of the EU.

Kristof is admitted to practice in Belgium.

Photo of Anna Sophia Oberschelp de Meneses Anna Sophia Oberschelp de Meneses

I advise companies across the EU on technology laws, with a focus on data protection, cybersecurity, and current consumer protection laws. I help businesses navigate complex regulations like the GDPR, AI Act, Digital Services Act, Unfair Commercial Practices Directive, and the upcoming Digital…

I advise companies across the EU on technology laws, with a focus on data protection, cybersecurity, and current consumer protection laws. I help businesses navigate complex regulations like the GDPR, AI Act, Digital Services Act, Unfair Commercial Practices Directive, and the upcoming Digital Fairness Act, turning legal requirements into practical, business-friendly solutions.

In data protection, I support tailored GDPR compliance, international data transfers, and privacy-conscious marketing. On cybersecurity, I guide clients through risk assessments, incident response, and evolving laws such as NIS2 and the Cyber Resilience Act. Regarding consumer protection, I advise on existing laws to help businesses revise their terms and conditions for compliance and review online interfaces to ensure all mandatory consumer information is clearly provided, tackling issues like dark patterns and unfair contract clauses.

Fluent in multiple languages and experienced across borders, I’m passionate about helping clients embed compliance into their operations and thrive in the fast-changing digital landscape.