When you buy digital content — such as apps, software, games, downloads, or streaming services — you are entitled to expect that it is safe to use.

Under the Consumer Rights Act 2015, digital content must meet certain legal standards. One of those standards is that it must be of satisfactory quality — and that includes safety.

For a general overview of digital protections, see Digital Content – Your Rights.

What Does “Safe” Mean for Digital Content?

Digital safety means that the product should not:

  • Contain malware or viruses.
  • Corrupt your files or operating system.
  • Cause your device to malfunction.
  • Create avoidable security vulnerabilities.
  • Expose your data due to careless design.

If paid digital content creates unreasonable risk to your device or data, it may breach consumer law.

Satisfactory Quality Includes Security

Under the Act, digital content must meet the standard a reasonable person would expect, taking into account:

  • The description.
  • The price.
  • Any advertising claims.
  • The type of product.

A paid antivirus program that contains a serious vulnerability, or a software update that disables core security features, may not be of satisfactory quality.

Updates Must Not Make Things Worse

If a trader supplies updates as part of your purchase or subscription, those updates must not:

  • Remove core paid features without warning.
  • Introduce major instability.
  • Create new security risks.

If an update causes significant problems, the trader may be required to fix the issue or provide a refund.

See Faulty or Corrupted Digital Data.

If Digital Content Damages Your Device

The law provides specific protection if digital content causes damage.

If damage occurs because the trader failed to use reasonable care and skill, the trader must:

  • Repair the damage, or
  • Pay compensation for repair or replacement.

This applies even though the product is not physical.

Data Protection vs Consumer Rights

If your issue relates to personal data misuse, that may fall under data protection law (such as UK GDPR).

However, where digital content is unsafe because of poor coding, malware, or defective updates, your rights under the Consumer Rights Act 2015 still apply.

If a Platform Ignores Security Complaints

If a trader refuses to address a serious safety issue:

Unfair Disclaimers About Security

Some digital platforms include broad disclaimers such as “use at your own risk” or attempt to exclude liability for software defects.

A trader cannot remove core statutory protections. If the content is unsafe due to their failure, those disclaimers may not be legally binding.

See Unfair Terms – What the Law Says.

In Simple Terms

If you pay for digital content, you are entitled to expect that it:

  • Is free from harmful defects.
  • Does not damage your device.
  • Does not expose you to unreasonable security risks.
  • Is properly maintained where updates are promised.

If those expectations are not met, you may be entitled to repair, replacement, refund, or compensation.