Digital services offer new opportunities from which consumers benefit daily. However, they also raise a number of novel questions for consumer protection. Benefiting from the analysis and findings of the most recent academic literature, this Policy Report makes recommendations to improve EU consumer protection rules for digital society. One group of recommendations aims at making the horizontal consumer protection smarter. First, the best guardians of consumers’ interests are the consumers themselves. However, for many customers, the underlying functioning of digital services is difficult to understand. Improving digital literacy is therefore a key requirement, if any protection regarding digital services is to be effective. Second, the scope of consumer protection rules should be extended to all digital services independently of whether or not the consumer either pays a price (in money or quasi-currency) and/or provides personal data when getting or using the service. Third, alternative means of regulation deserve attention. Self and co-regulation are already used in some cases and can strike, under some conditions, the right balance between predictability, flexibility, efficiency, and the need to develop future-proof solutions. Fourth, insights from behavioural studies showing that the rationality of consumers is bounded should be better taken into account. In particular, this implies that disclosure obligations, which form the basis of EU consumer protection rules, should be better tailored to observed behaviours when it comes to defining what information should be disclosed, to whom, how and when. Fifth, consumer protection agencies should explore the advantages and disadvantages of personalising disclosures, an evolution which the progress of big data and artificial intelligence allow. Sixth, the consequences of the application of the open-textured legal concept of unfairness (whether of commercial practices or contract terms) in an algorithmic decision-making environment should be clarified, possibly with some soft law instruments. The consequences of the fairness obligations for traders using algorithms, in terms of transparency and beyond, should be better explored with all the stakeholders and then clarified in specific guidance. Those consequences should be assessed taking into account the probable increasing use of algorithms by consumers when making their consumption decisions. The other group of recommendations aims at making enforcement of the rules more effective. First, public enforcement needs to be strengthened and national consumer protection agencies need to be well staffed, independent from any political pressure as well as from capture by corporate interests or consumer associations, and also given power to impose sanctions with sufficient deterrent effects. When facing new issues, those agencies may rely first on soft enforcement by trying to settle those issues with the digital firms, and soft law by adopting guidelines to clarify the application of principles-based rules to those new problems. National authorities should also seize the opportunity offered by digital technologies, in particular big data and artificial intelligence, to improve their operations. Moreover, consumer protection agencies should cooperate at national level with other specialised agencies in charge of regulating specific aspects of the digital value chain (such as authorities in charge of data protection, competition policy, electronic communication or media services) to achieve better and more consistent decision-making across the value chain. In addition, national consumer protection agencies should better cooperate among themselves, and with the Commission at the EU level, to better fight pan-EU infringements of EU consumer rules, establish more consistent interpretation of rules and develop best practices. Second, private enforcement needs to be strengthened. Consumers should be made more aware of their rights and should be provided with easier means of securing damages when the infringement of their rights has caused them harm. Third, the potential of technology enforcement where rules move from the legislative code to the computer code should be better explored with all the stakeholders. As privacy by design is developing, consumer protection by design should also be explored.