12 patterns in this category — each with its illustration, what it is, and the fields that matter when you build or review one. Part of the UX pattern catalogue; the raw, agent-readable version is ux-pattern-catalogue/legal-patterns.json.

Pages

§

Impressum Page legal-001

Legal notice page required in DACH region. Must include legal entity name, address, email, VAT ID, and trade register entry. Accessible within 2 clicks from every page.

Legal requirement

TMG §5 (DE), ECG §5 (AT)

Penalty

Abmahnung fines up to €50,000

GDPR Art. 13/14

Privacy Policy legal-002

Data processing disclosure. What data is collected, legal basis, third parties, retention periods, and user rights. Linked from every page footer.

Legal requirement

GDPR Art. 13/14

Penalty

Up to 4% annual revenue or €20M

Terms of Service legal-003

Usage terms for the service. Covers scope, payment, liability, and cancellation (14-day Widerrufsrecht for EU consumers). Referenced during signup.

Legal requirement

AGB-Recht (DACH B2C)

Penalty

Unfair terms are void, potential damages

Consent

<script> analytics </script> <script> pixel </script> consent first

Third-Party Script Gating legal-006

Block analytics and marketing scripts until consent. No Google Analytics, Meta Pixel, HubSpot, or Intercom before explicit consent. Load scripts dynamically after consent callback.

Legal requirement

GDPR + TTDSG

Penalty

Up to €300,000

Data

Art. 17 Erasure

Data Deletion Request legal-007

Mechanism for users to request data erasure. Account deletion flow, data anonymization where deletion is not feasible, confirmation within 30 days.

Legal requirement

GDPR Art. 17 (Right to Erasure)

Penalty

Up to 4% annual revenue

Accessibility

WCAG AA EAA / BFSG

Accessibility Statement legal-008

Declaration of accessibility conformance. Conformance level (WCAG 2.1 AA), known issues, remediation timeline, and feedback mechanism.

Legal requirement

EAA/BFSG (June 2025)

Penalty

Up to €100,000 or 4% revenue

Dark patterns

Cookie Preferences Essential (required) Analytics Marketing No pre-ticked boxes

Pre-checked Options legal-010

No pre-selected consent categories for non-essential cookies or marketing. All optional checkboxes must start unchecked. Pre-ticked boxes do not constitute valid consent under EU law (Planet49 ruling, 2019).

Legal requirement

GDPR Art. 7(2), Planet49 ruling (CJEU C-673/17)

Penalty

Up to 4% annual revenue or €20M

Start Free Trial 14 days free, then $9.99/mo Cancel anytime before trial ends Reminder email 3 days before charge

Hidden Subscription legal-011

Free trial to paid conversion must be clearly disclosed with amount, date, and cancellation path visible at the point of signup. Send a pre-charge reminder email before conversion.

Legal requirement

FTC Click-to-Cancel Rule (2024), EU Consumer Rights Directive Art. 6

Penalty

Amazon FTC settlement $30M (2023). FTC fines vary by case.

Sign Up 1 click = Cancel 2 clicks max Cancel Subscription Are you sure? [Confirm] Easy as signup

Cancellation Obstruction legal-012

Cancellation must be as easy as signup — maximum 2 steps (click Cancel, Confirm). No mandatory phone calls, multi-page retention flows, or hidden cancellation paths.

Legal requirement

FTC Click-to-Cancel Rule (2025), EU Consumer Rights Directive Art. 11, California AB-390

Penalty

FTC enforcement actions. State-level fines vary.