Digital Content Directive

On this page 7

The Digital Content Directive is Directive (EU) 2019/770, the EU law that sets common contract rules for the supply of digital content and digital services to consumers. It defines when software, apps, e-books, streaming, cloud storage or online platforms are in conformity with the contract, what updates the trader must provide and which remedies the consumer has when something goes wrong.

Within consumer & accessibility law, it fills a gap that earlier sales law left open, because traditional warranty rules were written for physical goods. Member States had to transpose it by July 2021, and the national rules apply to contracts concluded from 1 January 2022. It is a maximum harmonization instrument, so national law may not go above or below its level except where the text allows options.

What the Directive covers

The Directive applies to any business-to-consumer contract under which a trader supplies digital content or a digital service and the consumer pays a price or provides personal data. Paying with data is the key innovation: a free social network or a free app financed by data collection is treated as a contract for consideration and must meet the same standards.

CategoryTypical examplesSupply model
Digital contentSoftware, apps, e-books, music and video files, gamesOne-off or continuous
Digital servicesCloud storage, SaaS, streaming, social media, webmailUsually continuous
Tangible data carriersDVDs, CDs, memory cards carrying content onlyOne-off
Content paid with personal dataFree apps and platforms funded by dataOne-off or continuous
Main categories in scope

Several areas are excluded: number-based interpersonal communication services, healthcare, gambling, financial services, public sector information and free and open-source software where no price is paid and personal data is used only to improve security or compatibility. Goods with digital elements, such as a smart watch whose software is essential to its functions, fall under the sister Sale of Goods Directive instead.

Conformity requirements and the duty to update

Conformity is assessed against subjective requirements, meaning what the contract promises, and objective requirements, meaning what a consumer can reasonably expect from content of that type. A trader cannot escape objective standards through fine print unless the consumer was specifically informed of a deviation and expressly and separately accepted it.

RequirementWhat it meansTypical failure
Contractual descriptionFunctionality, compatibility and quantity promisedFeature advertised but missing
Fitness for normal purposeWorks as similar content usually doesFrequent crashes or data loss
UpdatesFunctional and security updates for the relevant periodKnown vulnerability left unpatched
Correct integrationInstallation by trader or per its instructions worksFaulty setup instructions
Free from third-party rightsNo legal restriction blocks useLicensing dispute disables access
Elements of conformity

The duty to update is one of the most practical consequences. For continuous supply, updates are owed throughout the contract. For a one-off purchase, they are owed for the period the consumer may reasonably expect, which depends on the type and purpose of the content. If the consumer fails to install an update after proper notice, the trader is not liable for the resulting defect.

Liability periods and burden of proof

The Directive distinguishes between one-off supply and continuous supply, and this choice determines both the liability period and who must prove the defect. The table summarizes the minimum rules.

RuleOne-off supplyContinuous supply
Liability periodDefects appearing within at least 2 yearsThroughout the whole contract period
Burden of proof on trader1 year from supplyThroughout the contract period
Update dutyReasonably expected periodWhole contract period
ExamplePurchased e-book or game downloadMonthly streaming subscription
Liability rules by supply model

The reversal of the burden of proof matters in practice. Within the relevant period, the consumer does not have to prove a technical cause; the trader must show that the content was in conformity or that the consumer’s own digital environment was incompatible after being informed of the requirements.

Remedies, termination and modifications

The remedies follow a hierarchy. If content is not supplied at all, the consumer first asks for supply and may terminate if the trader fails without undue delay. If content is defective, the consumer is first entitled to have it brought into conformity, then to a proportionate price reduction or termination.

  • Termination is excluded for a minor lack of conformity when a price was paid, but remains available when the consumer paid only with personal data.
  • After termination, the trader must refund within 14 days and must stop using content the consumer created, other than personal data, which remains governed by the GDPR.
  • The consumer may retrieve user-generated content free of charge, within a reasonable time and in a commonly used, machine-readable format.

Traders may modify digital content beyond what is needed for conformity only if the contract allows it, there is a valid reason, the consumer bears no extra cost and is informed clearly. If a modification negatively affects access or use more than minimally, the consumer may terminate within 30 days or keep the unmodified version where that is possible.

How it relates to neighboring consumer laws

The Digital Content Directive regulates contract performance, while other EU instruments govern information before the contract, unfair practices and product safety. The comparison below helps place it.

InstrumentMain question it answersLink to digital content
Digital Content DirectiveDoes the content conform, and what are the remediesCore contract rules
Sale of Goods DirectiveDo physical goods conformCovers goods with digital elements
Consumer Rights DirectiveWhat must be disclosed, and can the consumer withdrawRight of withdrawal for digital content
Unfair Commercial Practices DirectiveIs marketing misleading or aggressiveAdvertising of apps and services
Product Liability DirectiveWho compensates damage from defective productsRevised version includes software
The Directive and related EU consumer instruments

A frequent mistake is to treat the right of withdrawal and conformity remedies as the same thing. Withdrawal is a cooling-off right that consumers often waive for immediate downloads, while conformity remedies exist regardless of withdrawal and cannot be excluded by contract.

Understanding it simply

When you buy a pair of shoes and they fall apart, the law gives you a right to a repair or a refund. The Digital Content Directive gives the same kind of protection for things you cannot touch. That includes apps, games, music downloads, streaming and cloud storage.

It also covers services you get for free in exchange for your personal data. The key takeaway is that digital products must work as promised, receive necessary updates and be fixed, discounted or refunded when they do not.

Applied in practice

A consumer in Germany buys a photo editing program for 90 euros as a one-off download. Eight months later, an operating system update makes the program crash whenever a file is exported, and the developer has published no fix.

Because the defect appears within the first year, the developer must prove that the program was in conformity, which it cannot do, since compatibility updates were reasonably expected. The consumer first requests a fix. When none arrives within a reasonable time, the consumer asks for a price reduction of 40 euros, which the developer grants, and the developer later releases the patch for all users.