Published in the Internet Policy Review, this article stresses that though EU policy considers disinformation to be harmful content, rather than illegal content, EU member states have recently been making disinformation illegal. It also discusses the definitions that form the basis of EU disinformation policy, and analyses national legislation in EU member states applicable to the definitions of disinformation, in light of freedom of expression and the proposed Digital Services Act