EU Digital Fairness Act: what studios plan for now

There is a piece of European regulation that does not exist yet, will not be law for years, and should still change a roadmap decision you make this quarter. It is the Digital Fairness Act, and the reason it matters early is that it targets the one mechanic studios take the longest to unwind: loot boxes in games played by minors.

This is not the EU AI Act, which deals with transparency around automated systems and takes effect in August 2026. It is not the PEGI rating changes arriving in June 2026 either. The Digital Fairness Act is a separate consumer-protection regulation aimed squarely at what European lawmakers describe as gambling-like mechanics in games. Three different regimes, three different timelines, one overlapping target. Studios that track only one of them will be surprised by the other two.

What the act is expected to require

The Digital Fairness Act is still being drafted, so the precise wording is not settled. But the direction is clear from the European Parliament's process. In October 2025, the Parliament's internal market committee voted to call for the act to ban gambling-like mechanisms — loot boxes among them — in games accessible to minors. The European Commission plans to present a draft legislative act in the third quarter of 2026, with final adoption expected around late 2027 or early 2028.

The provisions that consistently appear in the discussion are worth listing plainly, because each one maps to a concrete part of a game:

• An outright ban on loot boxes in games accessible to players under 18
• Mandatory disclosure of exact odds — the real probability of obtaining each possible reward
• Spending caps for younger players
• Cooling-off periods that slow down repeated purchases

None of these is exotic. Several already exist in other jurisdictions in some form. What is different is the combination, the scale of the market it would cover, and the specific focus on minors.

Why the timeline is misleading

A regulation adopted in late 2027 sounds like a problem for 2027. For most studios it is not. The reason is that loot boxes are rarely a feature you can switch off. They are usually woven into the core progression and economy of a game — the way players acquire characters, the way the currency sink works, the way the reward pacing is tuned. Removing them after launch means re-balancing the entire economy, which is one of the hardest live changes a team can attempt.

So the real deadline is not when the act becomes law. It is the next time you decide the monetization design for a title that will still be live, and still serving European minors, in 2028. That decision is happening now, on roadmaps being locked this year. A game entering production today with a loot-box core, aimed even partly at a younger audience, is being designed into a constraint that does not exist yet but predictably will.

There is also a nearer-term signal that points the same way. From June 2026, the PEGI rating system treats loot boxes as warranting a minimum age rating of 16. That is a content-rating decision, not the Digital Fairness Act, but it pushes in exactly the same direction: a game built around loot boxes and a young target audience are increasingly hard to hold together. The act would eventually make that tension a legal one rather than a rating one.

The roadmap decisions worth making early

You do not need to predict the final wording to act sensibly. A few decisions hold up regardless of how the drafting settles.

First, know your audience composition by region. The act's provisions hinge on whether a game is accessible to minors. If you genuinely do not target or serve under-18 players in the EU, your exposure is different from a studio whose European player base skews young. You cannot make any of the downstream calls without an honest read on who actually plays in that market.

Second, treat exact-odds disclosure as a capability to build, not a clause to fear. Disclosure of real probabilities is already required in several markets and appears in every version of the Digital Fairness Act discussion. Building a clean pipeline from your drop tables to a player-visible display now means you are ready for whatever the final text says about granularity and placement, rather than retrofitting it under deadline pressure.

Third, separate the randomised mechanic from the value it delivers. The thing players actually want is the character, the upgrade, the progression. Loot boxes are one delivery mechanism for that value, not the only one. Direct purchase, guaranteed bundles, and pity systems that guarantee a reward after a set number of attempts all deliver the same player value with far less regulatory exposure. A title designed so the randomised path is one option rather than the only path is much cheaper to adjust later.

The compliance posture that scales

The pattern across all three European regimes — the AI Act, the PEGI changes, and the Digital Fairness Act — is that age and jurisdiction are becoming inputs to monetization design rather than afterthoughts. A single global build increasingly needs to behave differently depending on who the player is and where they are. The studios that handle this well are building that branching into the offer and economy layer deliberately, so that turning a mechanic off for under-18 players in one region does not require a separate build or an emergency patch.

That is a design choice you make once and benefit from across every future regulation, not just this one. We describe how age tier and jurisdiction can feed the offer layer as first-class inputs in how it works.

This is not legal advice, and the act is not final — your counsel should interpret the text as it firms up. But the engineering and design work that protects you is knowable today: understand your minor exposure, build odds disclosure, and keep the randomised mechanic decoupled from the value it delivers. Do that, and the act becoming law in 2027 is a configuration change rather than a re-build.