The European Union’s Digital Services Act (DSA) explicitly prohibits dark patterns on online platforms, creating a meaningful compliance standard for interface decisions that can affect a user’s ability to unsubscribe, cancel or otherwise make an informed choice. The regulation does not create a standalone rule about needing a “map” to find an unsubscribe option. Instead, it sets a broader test: platforms must not design, organise or operate interfaces that deceive, manipulate or materially distort or impair users’ capacity to decide freely and with adequate information.
That distinction matters. A difficult cancellation flow is not automatically unlawful because it contains several steps. But a journey designed to hide the exit, steer people through confusing choices, or make leaving substantially harder than signing up can raise questions under the DSA’s prohibition on dark patterns. For product leaders, compliance teams and platform operators, unsubscribe UX is therefore part of a wider governance challenge rather than a narrow design issue.
The European Commission’s official DSA questions and answers states that dark patterns are prohibited and says online-platform providers must not use interface designs that undermine free and informed user decisions. Regulation (EU) 2022/2065 also makes clear that dark-pattern practices fall within its prohibitions where they are not already addressed by other EU law.
What the DSA requires from online platform interfaces
The DSA frames dark patterns around their effect on user autonomy. The key issue is not whether an interface looks polished, conversion-focused or complex in isolation. It is whether its design materially interferes with a person’s ability to understand the available options and choose freely.
In practical terms, an unsubscribe or cancellation experience deserves close review when it combines friction with misleading presentation. A platform should be able to explain why each step exists and show that the overall flow does not pressure or confuse a user into a result they did not intend.
Common areas that warrant governance attention include:
- Uneven choice presentation, such as making retention options highly prominent while obscuring cancellation.
- Confusing language or navigation that prevents users from understanding what action will end a subscription or service.
- Manipulative decision paths that use repeated prompts or misleading choices to impair an informed decision.
- Disconnects between acquisition and exit, where joining is straightforward but leaving is intentionally difficult to locate or complete.
The DSA does not mean every additional confirmation screen is prohibited. Some steps may support security, prevent accidental account actions or give users necessary information. The compliance question is whether the journey supports an informed decision or materially impairs it. That calls for evidence-led design review, not a superficial checklist based solely on the number of clicks.
The law’s application has also developed in stages. It began applying to designated Very Large Online Platforms (VLOPs) and Very Large Online Search Engines (VLOSEs) in 2023, before broader applicability began on February 17, 2024. Enforcement activity has continued through 2025 and 2026.
| DSA application stage | When it began applying | Relevant scope in the verified research |
|---|---|---|
| Initial application | 2023 | Designated VLOPs and VLOSEs |
| Broader application | February 17, 2024 | Wider DSA applicability |
| Enforcement activity | 2025 and 2026 | Ongoing enforcement framework and activity |
Why unsubscribe design is now a governance issue
The practical significance of the DSA is that interface patterns can no longer be treated exclusively as product-growth decisions. Teams responsible for subscriptions, account settings, advertising journeys and consent experiences may need clear accountability for how user choices are presented.
A useful internal review starts with the full journey rather than one screen. Businesses can examine where a user starts, the options shown, the terminology used, the effort required to complete an action and whether the result is clearly confirmed. This approach helps distinguish legitimate safeguards from friction that appears designed to retain users through confusion or pressure.
Platform governance should also connect product, legal and operational teams. Designers may understand the interaction flow, while legal teams interpret regulatory risk and operational leaders own the controls needed to document changes. Bringing those views together can make it easier to identify potentially harmful patterns before they become embedded in release processes.
Enforcement makes that preparation consequential. National Digital Services Coordinators and the European Commission cooperate in the DSA enforcement framework. Non-compliance can result in penalties of up to 6% of global turnover, alongside mechanisms for interim measures and, as a last resort, service suspension. The available enforcement tools reinforce that dark-pattern compliance is not merely advisory guidance.
For businesses that operate online platforms, subscription journeys are now a governance issue as well as a conversion decision. Scalevise can help teams translate interface risk into practical review criteria, accountable workflows and AI-supported compliance processes without treating every friction point alike. Our AI consultancy team connects product, legal and operational priorities so changes can be assessed before they become enforcement exposure. Request a consultation to discuss your platform compliance approach.
Frequently Asked Questions
Does the EU Digital Services Act prohibit dark patterns?
Yes. The DSA prohibits online-platform interfaces that deceive, manipulate or otherwise materially distort or impair users’ ability to make free and informed decisions.
Is there a specific DSA rule requiring an unsubscribe map?
No. The verified material identifies no single new “unsubscribe-map” rule. Unsubscribe journeys are instead assessed through the DSA’s broader prohibition on dark patterns.
Who enforces the DSA’s dark-pattern rules?
National Digital Services Coordinators and the European Commission cooperate in the DSA enforcement framework.
What penalties can apply for DSA non-compliance?
Penalties can reach up to 6% of global turnover. The framework also provides for interim measures and, as a last resort, suspension of services.
Conclusion
The DSA makes user autonomy a core consideration in online-platform design. Although it does not prescribe one unsubscribe interface, its dark-pattern prohibition gives regulators a clear basis to scrutinise flows that mislead, manipulate or materially impair informed decisions. Organisations should treat cancellation and account-exit journeys as part of ongoing product governance, with design choices assessed alongside their legal and operational consequences.
