🇪🇺 EU Consumer Rights
Key regulations, your protections, and how to use them when an AI system denies your claim.
Key Laws
- EU Regulation 261/2004 — flight delays over 3 hours, cancellations, and denied boarding entitle you to compensation of €250–€600 depending on flight distance. "Extraordinary circumstances" must be proven by the airline, not assumed. Technical faults are not automatically extraordinary. EU261
- GDPR — Right to Erasure (Article 17) — you can request deletion of your personal data. Controllers must comply unless they have a legal basis to retain it. "Legitimate interests" and "legal obligation" must be specific and documented — vague claims are not sufficient. GDPR Art.17
- Consumer Rights Directive 2011/83/EU — 14-day cooling-off period for online purchases. Sellers must provide a clear withdrawal mechanism. The clock starts when you receive the goods, not when you order them. CRD
- Digital Services Act (DSA) — large platforms must explain algorithmic decisions, provide an internal appeals mechanism, and allow users to challenge content moderation decisions. DSA
- GDPR — Right to Explanation (Article 22) — you have the right not to be subject to purely automated decisions with significant effects. You can request human review of algorithmic decisions. GDPR Art.22
- EU AI Act (Regulation 2024/1689) — the world's first horizontal AI law. Article 5 bans certain AI uses outright (social scoring, workplace emotion recognition, individual predictive policing). Annex III classifies high-risk AI in hiring, credit, healthcare, and education. From August 2026, Article 86 gives you the right to a clear explanation when high-risk AI affects you. AI Act
- Unfair Contract Terms Directive — contract terms that create a significant imbalance against the consumer are void. "All fees are non-refundable" clauses may not hold up if the service was not delivered. UCTD
When to Escalate
- Data Protection Authority — file GDPR complaints with your national DPA (e.g. CNIL in France, BfDI in Germany, ICO for UK post-Brexit). Most offer online complaint portals.
- National Enforcement Body (NEB) — for EU261 flight compensation disputes. In Germany: Luftfahrt-Bundesamt. In France: DGAC.
- European Consumer Centre (ECC) — free cross-border dispute resolution. ecc-net.eu.
- Alternative Dispute Resolution (ADR) — most EU member states have certified ADR schemes for consumer disputes. Mandatory for traders to participate in some sectors.
EU AI Act — When AI Decides About You
Banned practices under Article 5 are enforceable now. High-risk AI obligations and the Article 86 right to explanation phase in from August 2026. Until then, combine AI Act arguments with GDPR Article 22 for fully automated decisions.
EU AI Act: Your Rights in 2026Phase-in calendar, prohibited practices, Annex III high-risk systems, and Article 86 explained.
11 EU AI Act Practice Scenarios →Hidden AI, credit black boxes, emotion recognition, robot boss, social scoring, and more.
Mortgage Denied — AI Won't ExplainCredit scoring is high-risk. What to cite when the bank hides behind proprietary models.
AI Downranked Your CV — Age BiasHiring AI is high-risk. Employment Equality Directive plus AI Act Article 10.
EU Cases in the Game
DENIED EuroAir — Flight Delay Compensation
4-hour delay. Airline claims "extraordinary circumstances." EU261/2004 puts the burden of proof on them, not you.
DENIED DataVault — GDPR Erasure Request
Requested deletion of your account data. Company claims "legitimate interests." Challenge whether that interest is specific enough to override your GDPR rights.
DENIED StreamVault — Subscription Cancellation
Annual subscription renewed automatically. No clear cancellation mechanism was provided. Consumer Rights Directive protects you.
DENIED EuroCredit Bureau — Credit Score Dispute
Incorrect default on your credit file. Bureau refuses to correct it. GDPR Article 16 gives you the right to rectification of inaccurate personal data.
DENIED NestIndex — Algorithmic Rent Increase
Rent increased 41% by an automated pricing model at renewal. Your lease capped increases at CPI — the algorithm has no authority to override a written contractual term.
DENIED RentSmart — Deposit Withheld
€1,200 withheld for "property damage" that was documented as pre-existing at move-in. Normal wear and tear is not damage.
DENIED NationalVisa — Automated Visa Rejection
Visa denied by algorithm without reviewing your employment contract and property deed. GDPR Article 22 requires human review.
DENIED CryptoVault — Account Frozen
€8,400 locked for 3 weeks with no explanation. MiCA requires crypto exchanges to safeguard client assets transparently.
DENIED FitStream Pro — Subscription Dark Pattern
No cancel button in the app — only registered post to Luxembourg. Omnibus Directive requires cancellation as easy as sign-up.
Practice Cases
AirFlyte — Flight Cancelled, Refund DeniedPractice EU261 when the airline cites non-refundable fare.
DataCore — GDPR Erasure RefusedPractice Articles 17 and 21 against a data broker bot.
RentSmart — Deposit WithheldPractice normal wear and tear arguments for a full deposit return.
FitStream — No Cancel ButtonPractice Omnibus Directive against post-only cancellation.
All Cases →Full index of practice scenarios.
Related Guides
EU Flight Refund Denied? Your EU261 Rights ExplainedWhen extraordinary circumstances is valid — and when airlines are bluffing.
GDPR Right to Erasure Refused: What You Can DoHow to challenge vague "legitimate interests" refusals and escalate to your DPA.
EU AI Act: Your Rights as a Consumer in 2026Prohibited practices, high-risk AI, and Article 86 — what applies when.
EU Subscription Dark Patterns: Your Right to CancelOmnibus Directive and hidden cancel buttons.
How to Dispute a Denied RefundEU Consumer Rights Directive, 14-day cooling off, and escalation paths.
Practice these disputes in Fix AI — a free browser game where you argue EU consumer rights against AI bots. The bot cites policy. You cite regulation. See who wins.
Play Free — EU Cases →