Obstruction · European Union

Account deletion obstruction

The label “Account deletion obstruction” describes this recurring design mechanism: deleting an account is unavailable, disguised as another outcome or burdened by unnecessary barriers. It is a design and research taxonomy, not a standalone legal conclusion. Depending on the complete journey and likely effect, current EU consumer or sector rules may require separate assessment. No published Digital Fairness Act proposal currently creates a pattern-specific prohibition or duty under this label.

Editorial analysis
Also known as
  • immortal account
  • undeletable account
Journey stages

Definition

What is this pattern?

Deleting an account is unavailable, disguised as another outcome or burdened by unnecessary barriers. The label describes a recurring design mechanism; whether a particular implementation is harmful or unlawful depends on the complete journey, audience, evidence and rules within scope.

How it works

Deleting an account is unavailable, disguised as another outcome or burdened by unnecessary barriers. The deletion route is hidden, delayed or conditioned on unnecessary information even after the user has authenticated and stated the irreversible account outcome.

Warning signs

  • The user seeks permanent account deletion.
  • The observed route is missing, materially harder than account creation or produces only deactivation without clear disclosure.
  • The account persists after apparent completion or the journey cannot complete.

Potential harms

  • A person may reasonably believe the account and associated data were deleted when only visibility changed.
  • People may be unable to exercise the represented account control because of irrelevant information and route barriers.

Learn by comparison

What does this look like?

These fictional examples make the design mechanism easier to recognise. They do not depict a real company and do not establish that an individual interface is unlawful.

Illustrative example 1 · Social account settings

A fictional platform labels a control “Delete account”, but the confirmation only hides the profile and leaves data and reactivation available indefinitely.

Potential consumer harm: A person may reasonably believe the account and associated data were deleted when only visibility changed.

Illustrative example 2 · Shopping account

A fictional retailer places account deletion behind six help pages and requires a support ticket containing an order number even for users who never ordered.

Potential consumer harm: People may be unable to exercise the represented account control because of irrelevant information and route barriers.

What is a fairer alternative?

Offer a clear self-service deletion route, distinguish deletion from deactivation, and confirm the resulting state.

Context matters

Context and boundary cases

  • The user seeks permanent account deletion.
  • The observed route is missing, materially harder than account creation or produces only deactivation without clear disclosure.
  • The account persists after apparent completion or the journey cannot complete.
  • Exclude or qualify the label where legally required record retention clearly distinguished from account access.
  • Exclude or qualify the label where reasonable authentication.
  • Exclude or qualify the label where temporary technical outage with a documented recovery path.

When a similar design can serve a legitimate purpose

  • A similar design should not be classified this way where legally required record retention clearly distinguished from account access.
  • A similar design should not be classified this way where reasonable authentication.
  • A similar design should not be classified this way where temporary technical outage with a documented recovery path.

Operational review

What teams should review

Teams
  • Product
  • UX
  • Legal
  • Engineering
  • Content design
  1. How many steps, waits and channel changes separate “Delete now” from the completed social account settings outcome?
  2. Test the control across refresh, device and account states; is “The user seeks permanent account deletion” still observable after persistence is considered?
  3. Measure the same task through the clearest available route: does the effort difference persist once “Legally required record retention clearly distinguished from account access” is accounted for?
  4. How many steps, waits and channel changes separate “Enter order number” from the completed shopping account outcome?
  5. Count steps, waits, offers and channel changes through final confirmation; where does the route meet “The observed route is missing, materially harder than account creation or produces only deactivation without clear disclosure”?
  6. Measure the same task through the clearest available route: does the effort difference persist once “reasonable authentication” is accounted for?
  7. Which complete journey evidence supports or contradicts the account deletion obstruction classification?

Evidence to retain

  • Versioned captures of the Account Management states before, during and after the relevant decision
  • Configuration, content and event records supporting the observed account deletion obstruction mechanism
  • Responsive, keyboard and assistive-technology review of every material option and consequence

Legal map and implementation tools

Evidence base

Sources

  1. Dark commercial patternsOrganisation for Economic Co-operation and Development · Secondary · checked 2026-09-14 · OECD Digital Economy Papers No. 336
  2. Unfair Commercial Practices DirectiveEuropean Parliament and Council of the European Union · Primary · checked 2026-08-09 · Directive 2005/29/EC; CELEX 02005L0029-20220528
  3. Digital Fairness Act: call for evidence for an impact assessmentEuropean Commission · Primary · checked 2026-08-09 · Initiative 14622; Ares(2025)6275573
  4. Commission work programme 2026: Europe's Independence MomentEuropean Commission · Primary · checked 2026-09-14 · COM(2025) 870 final; CELEX 52025DC0870; Annex I item 30