{"id":360237,"date":"2025-09-16T09:00:17","date_gmt":"2025-09-16T03:30:17","guid":{"rendered":"https:\/\/www.scconline.com\/blog\/?p=360237"},"modified":"2025-09-15T20:09:16","modified_gmt":"2025-09-15T14:39:16","slug":"the-legal-perils-of-dark-patterns-in-india-intersection-between-data-privacy-and-consumer-protection","status":"publish","type":"post","link":"https:\/\/www.scconline.com\/blog\/post\/2025\/09\/16\/the-legal-perils-of-dark-patterns-in-india-intersection-between-data-privacy-and-consumer-protection\/","title":{"rendered":"The Legal Perils of Dark Patterns in India: Intersection between Data Privacy and Consumer Protection"},"content":{"rendered":"
\n

Introduction<\/h2>\n

In 2023, two significant regulatory developments reshaped India’s digital legal framework. First was the Digital Personal Data Protection Act, 2023 (DPDPA)1<\/sup><\/a> India’s novel data privacy law enacted on 13-8-2023. The second was the Guidelines for Prevention and Regulation of Dark Patterns, issued on 30-11-20232<\/sup><\/a> under the<\/span> Consumer Protection Act, 2019 (CP Act)3<\/sup><\/a> by the Central Consumer Protection Authority (CCPA).<\/span><\/p>\n

Both these laws deal with digital harms but from different perspectives. The DPDPA focuses on providing data protection rights to individuals, while the Dark Pattern Guidelines focus on protecting consumers from being manipulated into unfair commercial choices through deceptive user interface (UI)\/user experience (UX) design practices.<\/p>\n

At first glance, these laws appear to function in parallel. However, this article explores an important intersection: certain dark patterns may not just be unfair trade practices under consumer law; they may also be privacy violations under the DPDPA. This dual exposure creates serious legal consequences for businesses engaging in such practices.<\/p>\n

What are dark patterns?<\/h2>\n

Dark patterns4<\/sup><\/a> are any deceptive design pattern using UI or UX that misleads or tricks users by subverting their autonomy and manipulating them into taking actions which otherwise they would not have taken. Coined by UX designer Harry Brignull, who registered a website called darkpatterns.org, which he intended to be designed like a library wherein all types of such UX\/UI designs are showcased in public interest, hence the name “dark pattern” came into being.<\/p>\n

Applicability<\/h2>\n

The Guidelines on Dark Patterns vide Clause 35<\/sup><\/a> makes it applicable to the following:<\/p>\n

(a<\/span>) platforms systematically offering goods or services in India;<\/p>\n

(b<\/span>) advertisers (any person who designs, produces and publishes advertisements to promote sale of their goods, platforms or services) and;<\/p>\n

(c<\/span>) sellers\/service providers who in the course of business, imports, sells, distributes, or markets a product for commercial purposes.<\/p>\n

The Guidelines lists thirteen types of dark patterns along with their illustrations, for instance:<\/p>\n

(a<\/span>) “False urgency” is one such dark pattern deployed by mostly e-commerce platforms wherein the user is tricked into making immediate purchase or taking immediate action by showing false popularity of a product or showing limited quantities of the product e.g.: usage of phrases like “limited time deal”, “only 2 rooms left!”<\/span> and<\/span> “50 others are looking at this right now, don’t miss the deal”.<\/p>\n

(b<\/span>) Another dark pattern called confirmshaming used by entities like travel booking platforms, use phrases, videos, audio to make the user feel guilt, shame or ridicule in order to make the user purchase additional goods or services. Example, a travel platform nudging a user to buy mentioning the reject option as “I will stay unsecured” or “No, I don’t want to stay alive”.<\/p>\n

These dark patterns are used frequently by food delivery apps, news sites, digital lending portals, e-commerce services, etc. Dark patterns are deemed as an unfair trade practice.<\/p>\n

The CCPA can order for recall goods, withdraw services or even stop such services in instance it finds that an entity is engaging in dark pattern as per Section<\/span> 206<\/sup><\/a> of the<\/span> CP Act, in instance of breach of guidelines. As early as December 20247<\/sup><\/a> CCPA has issued orders to IndiGo and BookMyShow as they were found to be engaging in dark pattern. For instance, BookMyShow was engaging in a dark pattern called “basket sneaking” whereby it was automatically adding Rs 1 as automatic contribution towards “BookASmile”, in the form of a pre-tick without obtaining prior consent of the user.<\/span><\/p>\n

Also, engaging in dark patterns amounts to an unfair trade practice, and if such deceptive design leads to false or misleading advertisements that harm consumer interest, Section<\/span> 898<\/sup><\/a> of the<\/span> CP Act may apply attracting penalties of up to 2 years’ imprisonment and Rs 10 lakhs (approx. USD 12,000) fine, which increase to 5 years and Rs 50 lakhs (approx. USD 60,000) for repeat offences.<\/span><\/p>\n

The point of intersection with the DPDPA<\/h2>\n

The DPDPA primarily governs how personal data9<\/sup><\/a> of individuals is collected and processed. It applies to any entity whether a company, association, or government body that determines the purpose and means of processing such data. These entities are known as data fiduciaries. The individuals whose data is processed are called data principals, while third parties that process data on behalf of a data fiduciary such as payment service providers or online marketplaces — are termed data processors. Data processors have no primary liability under the DPDPA; instead, the data fiduciary remains responsible for their actions.<\/p>\n

Since the DPDPA applies wherever personal data is processed, it is plausible that a business will be subject to both data fiduciary obligations under the DPDPA and consumer protection obligations under the Dark Pattern Guidelines. For example, an e-commerce platform that processes customers’ personal data such as name, email, phone number and payment related information, is simultaneously acting as a service provider under consumer law and a data fiduciary under the DPDPA. In this setup, the user plays a dual role too, as both a consumer and a data principal.<\/p>\n

As explained above, an entity can act as a data fiduciary and, in doing so, be subject to obligations under both laws. The DPDPA imposes two key duties that are particularly at risk of being breached when dark patterns are used meaning the entity could trigger liability under both legal frameworks simultaneously. These two are as follows:<\/p>\n

(a<\/span>) Section<\/span> 4(1)(a<\/span>)10<\/sup><\/a> of the<\/span> DPDPA requires the data fiduciary to obtain consent prior to any processing of personal data. The consent has to be specific, free, informed, unconditional and by providing a notice, accompanying or preceding, in English and other major Indian language.<\/span><\/p>\n

(b<\/span>) Section<\/span> 8(4)11<\/sup><\/a> of the<\/span> DPDPA mandates the data fiduciary to implement technical and organisational measures in order to ensure effective observance of the Act. This will mean that implementing digital solutions to combat dark patterns can be interpreted to include implementing technical standards to prevent dark pattern. Or undertaking a website assessment to clear out dark patterns.<\/span><\/p>\n

How are dark patterns a privacy concern?<\/h2>\n

These obligations under Sections<\/span> 4 and<\/span> 8 of the<\/span> DPDPA become particularly significant when we consider how certain dark patterns operate. By their very design, some patterns harm the user in two ways: first, by manipulating them into choices they would not have otherwise made; and second, by compelling the collection or processing of personal data in ways that breach data protection requirements. In such cases, the entity is not only exploiting the individual but is also failing to meet its legal duties under the DPDPA thereby creating exposure under both the CP Act and the DPDPA. The following specified dark patterns under the CCPA’s guidelines are —<\/span><\/p>\n

(a<\/span>) Forced action<\/span>: This dark pattern forces the user to share personal data in order to buy or subscribe to the product or service originally intended by the user. It can work in ways like forcing a user to share his contacts or social networks in order to access products or services purchased or intended to be purchased by the user. Or forcing a user to share personal information linked with Aadhaar or credit card, even when such details are not necessary for making the intended purchase. Another facet of this dark pattern is that it also makes it difficult for the consumer to understand and alter their privacy settings, thereby encouraging them to give more personal information than they mean to while making the intended purchase.<\/p>\n

(b<\/span>) Subscription trap<\/span>: This dark pattern among other things can force a user to provide payment details or authorisation for auto debits for availing a free subscription. It is quite common in case of over-the-top (OTT) platforms wherein to access the free user subscription, the users necessarily need to provide payment details and sometimes other unnecessary details such as phone number in order for the user to avail the free subscription.<\/p>\n

(c<\/span>) Nagging<\/span>: This dark pattern is a practice due to which a user is disrupted and annoyed by repeated and persistent interactions in the form of requests, information, options or interruptions. One way how this dark pattern impacts privacy is that certain platforms may ask the users to give their phone numbers and other personal details for supposedly security purposes.<\/p>\n

Now, when we analyse the nature of these dark patterns we can see that not only are they characterised as dark pattern in the guidelines, the way how they can play out can also be deemed to be breach of obligations of the DPDPA. This is because essentially these dark patterns may be violating principles of data minimisation and purposeful processing by the way how they operate.<\/p>\n

Conclusion<\/h2>\n

Dark patterns have long been deployed as a strategy to make profits by nudging, coercing, or misleading users into taking actions they might not otherwise take. Whether it is forcing users to share unnecessary personal data, tricking them into subscriptions, or creating a false sense of urgency, these design practices are meant to serve the commercial interests of the business. However, with the advent of the DPDPA, the cost of using such tactics may now far outweigh any marginal profits they generate.<\/p>\n

Under the DPDPA, the stakes are now significantly higher. The Data Protection Board of India has the authority to impose financial penalties of up to Rs 50 crores12<\/sup><\/a> (approx. USD 5 million) for not obtaining purposeful consent or for disregarding technical and organisational measures. This transforms dark patterns from being a questionable UX strategy into a high-risk legal liability. One manipulative design choice can now cost a business far more than it could ever gain in money.<\/p>\n<\/div>\n\n

*Senior Manager, Legal and Regulatory Affairs, K&S Digiprotect Services Pvt Ltd. Author can be reached at: aman@knsdigiprotect.com<\/a>.<\/span><\/strong><\/p>\n

1.<\/a> Digital Personal Data Protection Act, 2023<\/a>.<\/p>\n

2.<\/a> Guidelines for Prevention and Regulation of Dark Patterns, 2023.<\/a><\/p>\n

3.<\/a> Consumer Protection Act, 2019<\/a>.<\/p>\n

4.<\/a> Dark patterns are defined under Guidelines for Prevention and Regulation of Dark Patterns, 2023, Cl. 2(1)(<\/span><\/a>e<\/span>)<\/span><\/span><\/span><\/a> as:<\/span><\/p>\n

2. Definitions<\/span>.— (1)(e<\/span>) “dark patterns” shall mean any practices or deceptive design pattern using user interface or user experience interactions on any platform that is designed to mislead or trick users to do something they originally did not intend or want to do, by subverting or impairing the consumer autonomy, decision-making or choice, amounting to misleading advertisement or unfair trade practice or violation of consumer rights.<\/p>\n

5.<\/a> Guidelines for Prevention and Regulation of Dark Patterns, 2023, Cl. 3<\/span><\/span><\/a> contain the application of the guidelines.<\/p>\n

6.<\/a> Consumer Protection Act, 2019, S. 20.<\/span><\/a><\/p>\n

7.<\/a> The article which reported the fact that CCPA had fined BookMyShow and IndiGo in furtherance of its powers under the guidelines. The news article is available here, Press Release, Department of Consumer Affair’s to Launch “Jago Grahak Jago App”, “Jagriti App” and “Jagriti Dashboard” on 24-12-2024 on National Consumer Day 2024 to Protect Consumers from the Dark Patterns, Press Information Bureau (pib.gov.in, 22-12-2024).<\/p>\n

8.<\/a> Consumer Protection Act, 2019, S.<\/span><\/a> 89<\/span><\/a>, read as:<\/p>\n

89. Punishment for false or misleading advertisement<\/span>.— Any manufacturer or service provider who causes a false or misleading advertisement to be made which is prejudicial to the interest of consumers shall be punished with imprisonment for a term which may extend to two years and with fine which may extend to ten lakh rupees; and for every subsequent offence, be punished with imprisonment for a term which may extend to five years and with fine which may extend to fifty lakh rupees.<\/p>\n

9.<\/a> Digital Personal Data Protection Act, 2023, S.<\/span><\/span><\/a> 2(<\/span>t<\/span>)<\/span><\/span><\/a> defines “personal data” as:<\/p>\n

2. Definitions<\/span>.— (t<\/span>) “personal data” means any data about an individual who is identifiable by or in relation to such data.<\/p>\n

10.<\/a> <\/span>Digital Personal Data Protection Act, 2023, S. 4(1)(<\/span><\/a><\/span><\/span>a<\/span>).<\/span><\/span><\/span><\/a><\/span><\/p>\n

11.<\/a> Digital Personal Data Protection Act, 2023, S. 8(4)<\/span><\/a>.<\/p>\n

12.<\/a> Digital Personal Data Protection Act, 2023, S.<\/span><\/span><\/a> 33(1), Sch. 1, Pt. 7.<\/span> This provision is applicable to breach of any provision under this Act or the Rules thereunder.<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

by Aman Varma*<\/p>\n","protected":false},"author":67011,"featured_media":360254,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[42503,1191],"tags":[89159,74673,89156,89157,89162,89158,89163,89160,89161,89164],"class_list":["post-360237","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-legal-analysis","category-op-ed","tag-ccpaguidelines","tag-consumerprotection","tag-darkpatternsindia","tag-dataprivacyindia","tag-digitalconsumerrights","tag-dpdpa2023","tag-ethicaldesign","tag-knowyourrights","tag-stopdarkpatterns","tag-uxforgood"],"yoast_head":"\nThe Legal Perils of Dark Patterns in India: Intersection between Data Privacy and Consumer Protection | SCC Times<\/title>\n<meta name=\"description\" content=\"In 2023, two significant regulatory developments reshaped India's digital legal framework. First was the Digital Personal Data Protection\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.scconline.com\/blog\/post\/2025\/09\/16\/the-legal-perils-of-dark-patterns-in-india-intersection-between-data-privacy-and-consumer-protection\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"The Legal Perils of Dark Patterns in India: Intersection between Data Privacy and Consumer Protection\" \/>\n<meta property=\"og:description\" content=\"In 2023, two significant regulatory developments reshaped India's digital legal framework. First was the Digital Personal Data Protection\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.scconline.com\/blog\/post\/2025\/09\/16\/the-legal-perils-of-dark-patterns-in-india-intersection-between-data-privacy-and-consumer-protection\/\" \/>\n<meta property=\"og:site_name\" content=\"SCC Times\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/scc.online\/\" \/>\n<meta property=\"article:published_time\" content=\"2025-09-16T03:30:17+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.scconline.com\/blog\/wp-content\/uploads\/2025\/09\/Dark-Patterns.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"886\" \/>\n\t<meta property=\"og:image:height\" content=\"590\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Editor\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"The Legal Perils of Dark Patterns in India: Intersection between Data Privacy and Consumer Protection\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Editor\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"9 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.scconline.com\/blog\/post\/2025\/09\/16\/the-legal-perils-of-dark-patterns-in-india-intersection-between-data-privacy-and-consumer-protection\/\",\"url\":\"https:\/\/www.scconline.com\/blog\/post\/2025\/09\/16\/the-legal-perils-of-dark-patterns-in-india-intersection-between-data-privacy-and-consumer-protection\/\",\"name\":\"The Legal Perils of Dark Patterns in India: Intersection between Data Privacy and Consumer Protection | SCC Times\",\"isPartOf\":{\"@id\":\"https:\/\/www.scconline.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.scconline.com\/blog\/post\/2025\/09\/16\/the-legal-perils-of-dark-patterns-in-india-intersection-between-data-privacy-and-consumer-protection\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.scconline.com\/blog\/post\/2025\/09\/16\/the-legal-perils-of-dark-patterns-in-india-intersection-between-data-privacy-and-consumer-protection\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.scconline.com\/blog\/wp-content\/uploads\/2025\/09\/Dark-Patterns.webp\",\"datePublished\":\"2025-09-16T03:30:17+00:00\",\"author\":{\"@id\":\"https:\/\/www.scconline.com\/blog\/#\/schema\/person\/84e42bab48238baf12c7e33b3d9761fe\"},\"description\":\"In 2023, two significant regulatory developments reshaped India's digital legal framework. First was the Digital Personal Data Protection\",\"breadcrumb\":{\"@id\":\"https:\/\/www.scconline.com\/blog\/post\/2025\/09\/16\/the-legal-perils-of-dark-patterns-in-india-intersection-between-data-privacy-and-consumer-protection\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.scconline.com\/blog\/post\/2025\/09\/16\/the-legal-perils-of-dark-patterns-in-india-intersection-between-data-privacy-and-consumer-protection\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.scconline.com\/blog\/post\/2025\/09\/16\/the-legal-perils-of-dark-patterns-in-india-intersection-between-data-privacy-and-consumer-protection\/#primaryimage\",\"url\":\"https:\/\/www.scconline.com\/blog\/wp-content\/uploads\/2025\/09\/Dark-Patterns.webp\",\"contentUrl\":\"https:\/\/www.scconline.com\/blog\/wp-content\/uploads\/2025\/09\/Dark-Patterns.webp\",\"width\":886,\"height\":590,\"caption\":\"Dark Patterns\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.scconline.com\/blog\/post\/2025\/09\/16\/the-legal-perils-of-dark-patterns-in-india-intersection-between-data-privacy-and-consumer-protection\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.scconline.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"The Legal Perils of Dark Patterns in India: Intersection between Data Privacy and Consumer Protection\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.scconline.com\/blog\/#website\",\"url\":\"https:\/\/www.scconline.com\/blog\/\",\"name\":\"SCC Times\",\"description\":\"Bringing you the Best Analytical Legal News\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.scconline.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.scconline.com\/blog\/#\/schema\/person\/84e42bab48238baf12c7e33b3d9761fe\",\"name\":\"Editor\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.scconline.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/34e366be721c41333586de05faa13743195f5b142dcd7a015c6fabd2389521d0?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/34e366be721c41333586de05faa13743195f5b142dcd7a015c6fabd2389521d0?s=96&d=mm&r=g\",\"caption\":\"Editor\"},\"url\":\"https:\/\/www.scconline.com\/blog\/post\/author\/editor_4\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"The Legal Perils of Dark Patterns in India: Intersection between Data Privacy and Consumer Protection | SCC Times","description":"In 2023, two significant regulatory developments reshaped India's digital legal framework. First was the Digital Personal Data Protection","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.scconline.com\/blog\/post\/2025\/09\/16\/the-legal-perils-of-dark-patterns-in-india-intersection-between-data-privacy-and-consumer-protection\/","og_locale":"en_US","og_type":"article","og_title":"The Legal Perils of Dark Patterns in India: Intersection between Data Privacy and Consumer Protection","og_description":"In 2023, two significant regulatory developments reshaped India's digital legal framework. First was the Digital Personal Data Protection","og_url":"https:\/\/www.scconline.com\/blog\/post\/2025\/09\/16\/the-legal-perils-of-dark-patterns-in-india-intersection-between-data-privacy-and-consumer-protection\/","og_site_name":"SCC Times","article_publisher":"https:\/\/www.facebook.com\/scc.online\/","article_published_time":"2025-09-16T03:30:17+00:00","og_image":[{"width":886,"height":590,"url":"https:\/\/www.scconline.com\/blog\/wp-content\/uploads\/2025\/09\/Dark-Patterns.jpg","type":"image\/jpeg"}],"author":"Editor","twitter_card":"summary_large_image","twitter_title":"The Legal Perils of Dark Patterns in India: Intersection between Data Privacy and Consumer Protection","twitter_misc":{"Written by":"Editor","Est. reading time":"9 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.scconline.com\/blog\/post\/2025\/09\/16\/the-legal-perils-of-dark-patterns-in-india-intersection-between-data-privacy-and-consumer-protection\/","url":"https:\/\/www.scconline.com\/blog\/post\/2025\/09\/16\/the-legal-perils-of-dark-patterns-in-india-intersection-between-data-privacy-and-consumer-protection\/","name":"The Legal Perils of Dark Patterns in India: Intersection between Data Privacy and Consumer Protection | SCC Times","isPartOf":{"@id":"https:\/\/www.scconline.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.scconline.com\/blog\/post\/2025\/09\/16\/the-legal-perils-of-dark-patterns-in-india-intersection-between-data-privacy-and-consumer-protection\/#primaryimage"},"image":{"@id":"https:\/\/www.scconline.com\/blog\/post\/2025\/09\/16\/the-legal-perils-of-dark-patterns-in-india-intersection-between-data-privacy-and-consumer-protection\/#primaryimage"},"thumbnailUrl":"https:\/\/www.scconline.com\/blog\/wp-content\/uploads\/2025\/09\/Dark-Patterns.webp","datePublished":"2025-09-16T03:30:17+00:00","author":{"@id":"https:\/\/www.scconline.com\/blog\/#\/schema\/person\/84e42bab48238baf12c7e33b3d9761fe"},"description":"In 2023, two significant regulatory developments reshaped India's digital legal framework. First was the Digital Personal Data Protection","breadcrumb":{"@id":"https:\/\/www.scconline.com\/blog\/post\/2025\/09\/16\/the-legal-perils-of-dark-patterns-in-india-intersection-between-data-privacy-and-consumer-protection\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.scconline.com\/blog\/post\/2025\/09\/16\/the-legal-perils-of-dark-patterns-in-india-intersection-between-data-privacy-and-consumer-protection\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.scconline.com\/blog\/post\/2025\/09\/16\/the-legal-perils-of-dark-patterns-in-india-intersection-between-data-privacy-and-consumer-protection\/#primaryimage","url":"https:\/\/www.scconline.com\/blog\/wp-content\/uploads\/2025\/09\/Dark-Patterns.webp","contentUrl":"https:\/\/www.scconline.com\/blog\/wp-content\/uploads\/2025\/09\/Dark-Patterns.webp","width":886,"height":590,"caption":"Dark Patterns"},{"@type":"BreadcrumbList","@id":"https:\/\/www.scconline.com\/blog\/post\/2025\/09\/16\/the-legal-perils-of-dark-patterns-in-india-intersection-between-data-privacy-and-consumer-protection\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.scconline.com\/blog\/"},{"@type":"ListItem","position":2,"name":"The Legal Perils of Dark Patterns in India: Intersection between Data Privacy and Consumer Protection"}]},{"@type":"WebSite","@id":"https:\/\/www.scconline.com\/blog\/#website","url":"https:\/\/www.scconline.com\/blog\/","name":"SCC Times","description":"Bringing you the Best Analytical Legal News","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.scconline.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.scconline.com\/blog\/#\/schema\/person\/84e42bab48238baf12c7e33b3d9761fe","name":"Editor","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.scconline.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/34e366be721c41333586de05faa13743195f5b142dcd7a015c6fabd2389521d0?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/34e366be721c41333586de05faa13743195f5b142dcd7a015c6fabd2389521d0?s=96&d=mm&r=g","caption":"Editor"},"url":"https:\/\/www.scconline.com\/blog\/post\/author\/editor_4\/"}]}},"jetpack_featured_media_url":"https:\/\/www.scconline.com\/blog\/wp-content\/uploads\/2025\/09\/Dark-Patterns.webp","jetpack_sharing_enabled":true,"jetpack-related-posts":[{"id":356380,"url":"https:\/\/www.scconline.com\/blog\/post\/2025\/08\/12\/the-tale-of-two-laws-does-the-dpdpa-dilute-rti-act\/","url_meta":{"origin":360237,"position":0},"title":"The Tale of Two Laws \u2014 Does the DPDPA Dilute RTI Act?","author":"Editor","date":"August 12, 2025","format":false,"excerpt":"by S. Chandrasekhar* and Aman Varma**","rel":"","context":"In "Op Eds"","block_context":{"text":"Op Eds","link":"https:\/\/www.scconline.com\/blog\/post\/category\/op-ed\/legal-analysis\/"},"img":{"alt_text":"Does the DPDPA Dilute RTI Act","src":"https:\/\/i0.wp.com\/www.scconline.com\/blog\/wp-content\/uploads\/2025\/08\/Does-the-DPDPA-Dilute-RTI-Act.webp?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.scconline.com\/blog\/wp-content\/uploads\/2025\/08\/Does-the-DPDPA-Dilute-RTI-Act.webp?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.scconline.com\/blog\/wp-content\/uploads\/2025\/08\/Does-the-DPDPA-Dilute-RTI-Act.webp?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/www.scconline.com\/blog\/wp-content\/uploads\/2025\/08\/Does-the-DPDPA-Dilute-RTI-Act.webp?resize=700%2C400&ssl=1 2x"},"classes":[]},{"id":340157,"url":"https:\/\/www.scconline.com\/blog\/post\/2025\/01\/31\/significant-actions-that-websites-must-take-to-be-compliant-with-indias-digital-personal-data-protection-act-2023\/","url_meta":{"origin":360237,"position":1},"title":"Significant Actions that Websites must Take to be Compliant with India’s Digital Personal Data Protection Act, 2023","author":"Bhumika Indulia","date":"January 31, 2025","format":false,"excerpt":"by Rishiraj Saha*","rel":"","context":"In "Op Eds"","block_context":{"text":"Op Eds","link":"https:\/\/www.scconline.com\/blog\/post\/category\/op-ed\/legal-analysis\/"},"img":{"alt_text":"India's Digital Personal Data Protection","src":"https:\/\/i0.wp.com\/www.scconline.com\/blog\/wp-content\/uploads\/2025\/01\/Indias-Digital-Personal-Data-Protection.webp?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.scconline.com\/blog\/wp-content\/uploads\/2025\/01\/Indias-Digital-Personal-Data-Protection.webp?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.scconline.com\/blog\/wp-content\/uploads\/2025\/01\/Indias-Digital-Personal-Data-Protection.webp?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/www.scconline.com\/blog\/wp-content\/uploads\/2025\/01\/Indias-Digital-Personal-Data-Protection.webp?resize=700%2C400&ssl=1 2x"},"classes":[]},{"id":342391,"url":"https:\/\/www.scconline.com\/blog\/post\/2025\/02\/27\/dark-patterns-outlawed-online-platforms-to-watch-out\/","url_meta":{"origin":360237,"position":2},"title":"Dark Patterns Outlawed: Online Platforms to Watch Out","author":"Bhumika Indulia","date":"February 27, 2025","format":false,"excerpt":"by Neha*","rel":"","context":"In "Op Eds"","block_context":{"text":"Op Eds","link":"https:\/\/www.scconline.com\/blog\/post\/category\/op-ed\/legal-analysis\/"},"img":{"alt_text":"Dark Patterns Outlawed","src":"https:\/\/i0.wp.com\/www.scconline.com\/blog\/wp-content\/uploads\/2025\/02\/Dark-Patterns-Outlawed.webp?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.scconline.com\/blog\/wp-content\/uploads\/2025\/02\/Dark-Patterns-Outlawed.webp?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.scconline.com\/blog\/wp-content\/uploads\/2025\/02\/Dark-Patterns-Outlawed.webp?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/www.scconline.com\/blog\/wp-content\/uploads\/2025\/02\/Dark-Patterns-Outlawed.webp?resize=700%2C400&ssl=1 2x"},"classes":[]},{"id":367217,"url":"https:\/\/www.scconline.com\/blog\/post\/2025\/11\/20\/are-you-manipulated\/","url_meta":{"origin":360237,"position":3},"title":"Are You Manipulated?","author":"Editor","date":"November 20, 2025","format":false,"excerpt":"by Udayan Jain* and Geetika Vyas**","rel":"","context":"In "Op Eds"","block_context":{"text":"Op Eds","link":"https:\/\/www.scconline.com\/blog\/post\/category\/op-ed\/legal-analysis\/"},"img":{"alt_text":"Dark Patterns","src":"https:\/\/i0.wp.com\/www.scconline.com\/blog\/wp-content\/uploads\/2025\/11\/Dark-Patterns.webp?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.scconline.com\/blog\/wp-content\/uploads\/2025\/11\/Dark-Patterns.webp?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.scconline.com\/blog\/wp-content\/uploads\/2025\/11\/Dark-Patterns.webp?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/www.scconline.com\/blog\/wp-content\/uploads\/2025\/11\/Dark-Patterns.webp?resize=700%2C400&ssl=1 2x"},"classes":[]},{"id":312513,"url":"https:\/\/www.scconline.com\/blog\/post\/2024\/01\/31\/central-consumer-protection-authority-ccpa-regulates-and-restricts-the-viability-of-dark-patterns-and-upholds-the-concept-of-consumerism\/","url_meta":{"origin":360237,"position":4},"title":"Central Consumer Protection Authority (CCPA) Regulates and Restricts the Viability of Dark Patterns and Upholds the Concept of Consumerism","author":"Bhumika Indulia","date":"January 31, 2024","format":false,"excerpt":"by Ishita Singh","rel":"","context":"In "Op Eds"","block_context":{"text":"Op Eds","link":"https:\/\/www.scconline.com\/blog\/post\/category\/op-ed\/legal-analysis\/"},"img":{"alt_text":"Central Consumer Protection Authority","src":"https:\/\/i0.wp.com\/www.scconline.com\/blog\/wp-content\/uploads\/2024\/01\/Central-Consumer-Protection-Authority.webp?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.scconline.com\/blog\/wp-content\/uploads\/2024\/01\/Central-Consumer-Protection-Authority.webp?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.scconline.com\/blog\/wp-content\/uploads\/2024\/01\/Central-Consumer-Protection-Authority.webp?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/www.scconline.com\/blog\/wp-content\/uploads\/2024\/01\/Central-Consumer-Protection-Authority.webp?resize=700%2C400&ssl=1 2x"},"classes":[]},{"id":364458,"url":"https:\/\/www.scconline.com\/blog\/post\/2025\/10\/22\/covert-voice-recording-matrimonial-disputes-privacy-infringement-dpdpa\/","url_meta":{"origin":360237,"position":5},"title":"Covert Voice Recording in Matrimonial Disputes Does Not Infringe Privacy?","author":"Editor","date":"October 22, 2025","format":false,"excerpt":"by K.P. Hemanth Kumar* and K.P. Pramodh Kumar**","rel":"","context":"In "Experts Corner"","block_context":{"text":"Experts Corner","link":"https:\/\/www.scconline.com\/blog\/post\/category\/experts_corner\/"},"img":{"alt_text":"Covert voice Recording Matrimonial disputes","src":"https:\/\/i0.wp.com\/www.scconline.com\/blog\/wp-content\/uploads\/2025\/10\/EXPERT-152.webp?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.scconline.com\/blog\/wp-content\/uploads\/2025\/10\/EXPERT-152.webp?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.scconline.com\/blog\/wp-content\/uploads\/2025\/10\/EXPERT-152.webp?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/www.scconline.com\/blog\/wp-content\/uploads\/2025\/10\/EXPERT-152.webp?resize=700%2C400&ssl=1 2x"},"classes":[]}],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.scconline.com\/blog\/wp-json\/wp\/v2\/posts\/360237","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.scconline.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.scconline.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.scconline.com\/blog\/wp-json\/wp\/v2\/users\/67011"}],"replies":[{"embeddable":true,"href":"https:\/\/www.scconline.com\/blog\/wp-json\/wp\/v2\/comments?post=360237"}],"version-history":[{"count":0,"href":"https:\/\/www.scconline.com\/blog\/wp-json\/wp\/v2\/posts\/360237\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.scconline.com\/blog\/wp-json\/wp\/v2\/media\/360254"}],"wp:attachment":[{"href":"https:\/\/www.scconline.com\/blog\/wp-json\/wp\/v2\/media?parent=360237"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.scconline.com\/blog\/wp-json\/wp\/v2\/categories?post=360237"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.scconline.com\/blog\/wp-json\/wp\/v2\/tags?post=360237"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}