On July 17, 2025, the European Commission launched a “call for evidence” and public consultation on the Digital Fairness Act (“DFA”), an anticipated new consumer protection law. The Commission seeks feedback on existing EU consumer protection laws and on proposals for how the DFA could address the following two problems with the existing laws, as identified through a “Fitness Check” of EU consumer law published in October 2024:

  • Lack of digital fairness for consumers. This particularly affects vulnerable groups such as minors, offering them suboptimal choices that can lead to financial harm, loss of time, negative health impacts, and indirect effects like environmental costs.
  • Unclear rules for businesses and market fragmentation. This results in increased business costs, hampers cross-border trade, leads to missed opportunities, and causes unfair competition, particularly from non-EU traders.

The Commission has also emphasized its objective to enhance the EU’s competitiveness, aiming for simplification of consumer protection rules and the removal of barriers within the EU Market. This includes efforts to achieve greater legal certainty regarding unfair commercial practices. The goal is to address enforcement deficiencies, regulatory gaps, and market fragmentation, as some Member States have regulated or are considering new regulation in these areas.

Scope

The call for evidence seeks open-ended feedback on addressing “problematic practices” identified in the Fitness Check, while the public consultation involves a detailed questionnaire with nine sections. The public consultation:

  • explores EU action options such as non-regulatory measures, increased enforcement, or new rules for issues like dark patterns, addictive design, unfair influencer marketing, deceptive pricing, and digital contract complexities;
  • asks for feedback on simplification measures like adjusting withdrawal rights for digital media subscriptions, reducing information requirements for repetitive transactions, and harmonizing national rules on price reductions for perishables;
  • questions whether information to consumers should be solely digital and discusses reducing single market fragmentation from varied national laws; and
  • invites stakeholders to specify additional actions and consider how consumer protection laws interact with other EU legislation, including the Digital Services Act and AI Act.

The call for evidence and public consultation are open for feedback until October 9, 2025. The European Commission is expected to publish a draft of the DFA in the third quarter of 2026, after which it will require formal adoption by the European Parliament and the Council of the EU. This is the most opportune moment to shape the text of the DFA.

Bear in mind, there is also a broader call for evidence and public consultation happening in parallel on the EU’s strategy for consumer policy for the next five years (2025-2030), open until August 31.

Background

The basis for the DFA consultation is the comprehensive evaluation the European Commission undertook between 2022 and 2024 on three core pieces of EU consumer protection legislation: the Unfair Commercial Practices Directive 2005/29/EC (“UCPD”); the Consumer Rights Directive 2011/83/EU (“CRD”); and the Unfair Contract Terms Directive 93/13/EEC (“UCTD”). This evaluation (so-called “Fitness Check”) culminated in a 218-page document published on October 3, 2024–see our blog post about it. Among its findings, Annex VI highlighted several “problematic practices” that the DFA aims to address, including: (i) dark patterns and addictive design; (ii) influencer marketing; (iii) algorithmic promotions and pricing; (iv) digital subscriptions; (v) dropshipping; and (vi) AI chatbots.

The Fitness Check highlighted the need for simplification in areas such as information obligations for traders, particularly social media influencers, and the complexities in ensuring a 14-day withdrawal right for digital subscriptions. Concerns were raised regarding privacy and safety for influencers, while streaming services faced challenges with financial losses due to early contract cancellations. Issues were also noted in distinguishing contracts for in-app currencies and virtual items. Suggestions included simplifying contract terms presentation and clarifying rules around price reductions, with ongoing difficulties in implementation despite existing guidelines.

*             *             *

Covington & Burling regularly advises companies on all aspects of EU consumer protection law, as well as intersections with privacy, cybersecurity, and product safety laws. We are happy to assist you with participating in public consultations and more generally with any inquiries related to compliance with EU consumer protection law.

Print:
Email this postTweet this postLike this postShare this post on LinkedIn
Photo of Anna Sophia Oberschelp de Meneses Anna Sophia Oberschelp de Meneses

Anna Sophia Oberschelp de Meneses is special counsel in the Data Privacy and Cybersecurity Practice Group.

Anna is a qualified Portuguese lawyer, but is both a native Portuguese and German speaker.

Anna advises companies on European data protection law and helps clients coordinate…

Anna Sophia Oberschelp de Meneses is special counsel in the Data Privacy and Cybersecurity Practice Group.

Anna is a qualified Portuguese lawyer, but is both a native Portuguese and German speaker.

Anna advises companies on European data protection law and helps clients coordinate international data protection law projects.

She has obtained a certificate for “corporate data protection officer” by the German Association for Data Protection and Data Security (“Gesellschaft für Datenschutz und Datensicherheit e.V.”). She is also Certified Information Privacy Professional Europe (CIPPE/EU) by the International Association of Privacy Professionals (IAPP).

Anna also advises companies in the field of EU consumer law and has been closely tracking the developments in this area.

Her extensive language skills allow her to monitor developments and help clients tackle EU Data Privacy, Cybersecurity and Consumer Law issues in various EU and ROW jurisdictions.

Photo of Jane Pinho Jane Pinho

Jane Pinho co-chairs Covington’s Entertainment and Media Industry Group and is a partner in the Technology and Communications practice and the International Business Reorganization practice. She has advised international streaming services on their content acquisition strategies, on new product launches and global expansions…

Jane Pinho co-chairs Covington’s Entertainment and Media Industry Group and is a partner in the Technology and Communications practice and the International Business Reorganization practice. She has advised international streaming services on their content acquisition strategies, on new product launches and global expansions, and on media regulation and licensing for the past decade.

Jane works with media industry leaders with global operations, including streaming services, video games and interactive entertainment companies, and social media platforms. She has particular experience advising in relation to the creation, acquisition, and distribution of digital content in the UK and Europe, in relation to the multi-territory launch, expansion, monetization and marketing of digital media products and services and in relation to compliance with the UK’s broadcasting, on-demand, video-sharing platform and online safety regimes, representing clients facing regulatory scrutiny. She also has experience advising media and technology companies on UK and EU consumer protection law, including on an investigation by the EU Commission and the Consumer Protection Co-operation Network.

Jane is also a key figure in Covington’s International Business Reorganization practice. She has managed global post-acquisition business reorganizations, pre-sale and pre-spin business separations and tax reorganizations for companies with substantial global footprints for more than a decade.

Photo of Kristof Van Quathem Kristof Van Quathem

Kristof Van Quathem advises clients on information technology matters and policy, with a focus on data protection, cybercrime and various EU data-related initiatives, such as the Data Act, the AI Act and EHDS.

Kristof has been specializing in this area for over twenty…

Kristof Van Quathem advises clients on information technology matters and policy, with a focus on data protection, cybercrime and various EU data-related initiatives, such as the Data Act, the AI Act and EHDS.

Kristof has been specializing in this area for over twenty years and developed particular experience in the life science and information technology sectors. He counsels clients on government affairs strategies concerning EU lawmaking and their compliance with applicable regulatory frameworks, and has represented clients in non-contentious and contentious matters before data protection authorities, national courts and the Court of the Justice of the EU.

Kristof is admitted to practice in Belgium.

Photo of Dan Cooper Dan Cooper

Daniel Cooper is co-chair of Covington’s Data Privacy and Cyber Security Practice, and advises clients on information technology regulatory and policy issues, particularly data protection, consumer protection, AI, and data security matters. He has over 20 years of experience in the field, representing…

Daniel Cooper is co-chair of Covington’s Data Privacy and Cyber Security Practice, and advises clients on information technology regulatory and policy issues, particularly data protection, consumer protection, AI, and data security matters. He has over 20 years of experience in the field, representing clients in regulatory proceedings before privacy authorities in Europe and counseling them on their global compliance and government affairs strategies. Dan regularly lectures on the topic, and was instrumental in drafting the privacy standards applied in professional sport.

According to Chambers UK, his “level of expertise is second to none, but it’s also equally paired with a keen understanding of our business and direction.” It was noted that “he is very good at calibrating and helping to gauge risk.”

Dan is qualified to practice law in the United States, the United Kingdom, Ireland and Belgium. He has also been appointed to the advisory and expert boards of privacy NGOs and agencies, such as the IAPP’s European Advisory Board, Privacy International and the European security agency, ENISA.