Guidelines on Dark Pattern by CCPA
An average consumer would have come across that red-blinking line saying, “hurry up! only few left” or downloaded at an app thinking it was free only to know later that the free version is expiring in seven days. In other words, in today’s world every consumer would have fallen into the trap of dark patterns at least once. Hence, the dire need to protect user autonomy and consumer privacy paved way for the current guidelines.
On 30th November, 2023, the Central Consumer Protection Authority (“CCPA”) notified guidelines for the prevention and regulation of dark patterns (“Guidelines”) fortifying consumers’ interest. The growing reliance on e-commerce platforms surpassing traditional marketplaces urged the country’s top consumer watchdog to establish guidelines protecting consumer interests online.
What are dark patterns and how is it unfair?
Dark pattern is the blanket term defining manipulative techniques used to deceive consumers to take choices they would not have taken otherwise. According to the Guidelines, dark patterns are practices or designs that subvert or impair the consumer autonomy. The seemingly innocent nature of dark patterns often abuses consumer interests without even them knowing it, leaving them essentially remediless.
The Consumer Protection Act, 2019 (“CPA”) defines unfair trade practices, including manipulating consumers and exploiting consumers’ interest. The Act upholds consumers’ rights by prescribing a redressal mechanism against such unfair trade practices. In addition, the CCPA can inquire into violations of consumer rights or unfair trade practices, either suo moto or upon receiving a complaint. Section 18 (2) of the CPA empowers CCPA to issue necessary guidelines to prevent unfair trade practices. Hence, the regulation of dark patterns, which is a quintessential modern-day problem, is set in the background of unfair trade practices and the CCPA’s effort to curb it.
The guidelines set out a list of 13 dark patterns covering a multitude of avenues where consumer autonomy is compromised. It includes the
“False Urgency” -where consumers’ choice is forced due to the limited opportunity portrayed by the platform.
“Basket Sneaking” -where additional items are added to the final check out bill without the consumer’s consent. Manipulating consumers by inducing a sense of guilt or fear that compel them to make buying decisions is defined as “Confirm shaming”.
“Subscription trap” is a common dark pattern that includes complicated cancellation process complicated or mandating auto debit authorisations. “
“Drip Pricing” is another sweet trap where a product or service is advertised to be free initially while the continued usage would require in app-purchasing. “Nagging” is a dark pattern where the consumer is prompted again and again leaving the consumer with less choice.
Other dark patterns are “Forced action”, “Interface interference”, “Bait and switch” and “Disguised advertisements”. Notably, the Guidelines included three more dark patterns, “Trick questions”, “SaaS billing” and “Rouge malware”.
The Guidelines are applicable to all sellers, advertisers and platforms ‘systematically’ offering goods and services in India. It prohibits every person, including any platform, from engaging in dark patterns. It shall be noted that even foreign businesses that target Indian consumers for the sale of goods or services can be brought under the ambit of the guidelines. Consumers can report usage of dark patterns in the National Consumer Helpline or reach them on Whatsapp.
The Guidelines add to an existing legislative framework that protects different facets of consumer rights. The Consumer Protection Act, 2019 has a set of arching provisions that prohibits unfair trade practices through deception. The same is extended to e-commerce platforms, particularly by the Consumer Protection (E-Commerce) Rules, 2020.
Further, the CCPA introduced a more targeted approach to prevent misleading consumers with the Guidelines for Prevention of Misleading Advertisements and Endorsements for Misleading Advertisements, 2022. The guideline particularly addressed the concern of “bait advertisements”. In addition, the Advertising Standards Council of India also set voluntary industry standards in the Guidelines for Online Deceptive Design Patterns in Advertising, 2023. It prevented common online deceptive practices such as disguised ads, bait and switch, drip pricing and false urgency.
Dark patterns and the privacy regime
The use of dark patterns to mislead consumers implicitly violates an individual’s free consent. Dark patterns are often used to collect vast amount of user data by seeking information from an individual that is unnecessary for a particular transaction. The collected data and users’ profile are further shared to third parties.
India buckled up its data protection policies with the recent Digital Personal Data Protection Act, 2023. It established a clear stance that a user’s free and unambiguous consent is required before processing their personal data. The user’s consent shall be obtained only after providing a notice explaining the purpose for which the data is sought. Further, the user shall always be vested with the right to withdraw the consent as easily as it was given. The Data Fiduciary shall not in any way “hold hostage” the user’s consent and shall use the data only for the purpose it was sought.
Grey area
In addition, the definition of “platforms” in the regulation as according to Consumer Protection (E-Commerce) Rules 2020 also includes intermediaries. However, intermediaries are provided safe harbour protection under Section 70 of the IT Act which is not reflected in the current Guidelines. Such protection is provided for intermediaries as they are not expected to closely scrutinise the published content. The absence of such a carve out in the Guidelines would hamper the purpose of the existing protection.
By listing specific set of dark patterns, the guidelines not only made the stakeholders more accountable but also the consumers more vigilant
