Spain: Published AEPD Report on addictive patterns in the processing of personal data

On 10 July 2024, the Spanish Data Protection Agency (AEPD) issued a Report on addictive patterns in the processing of personal data. The Report analyses platforms' uses of deceptive and addictive design patterns such as social engineering, and interface interference to increase user engagement and data collection. The Report establishes a three-tiered categorisation of deceptive patterns, providing examples of their respective uses. Finally, the Report emphasises the implications for data protection, such as transparency and data minimisation, and highlights the risks to user's rights, particularly the physical and mental integrity of children and adolescents.