CCPA Dark Pattern Guidelines, 2023
India's Central Consumer Protection Authority (CCPA) issued the Guidelines for Prevention and Regulation of Dark Patterns, 2023 under the Consumer Protection Act, 2019, recognizing 13 specific dark patterns - from false urgency and basket sneaking to subscription traps and fake reviews - as unfair trade practices. E-commerce, fintech and D2C platforms face real enforcement risk. We audit and remediate product flows against the guidelines.
Overview
India's Central Consumer Protection Authority (CCPA) issued the Guidelines for Prevention and Regulation of Dark Patterns, 2023 under the Consumer Protection Act, 2019, recognizing 13 specific dark patterns - from false urgency and basket sneaking to subscription traps and fake reviews - as unfair trade practices. E-commerce, fintech and D2C platforms face real enforcement risk. We audit and remediate product flows against the guidelines.
Who Needs to Comply?
E-commerce, fintech, D2C, EdTech and any consumer-facing platform selling to Indian users.
Key Requirements
13 recognized patterns
False urgency, basket sneaking, confirmshaming, forced action, subscription traps, drip pricing and more, defined by the CCPA.
Enforceable under the CPA, 2019
Violations can trigger CCPA action and penalties, alongside reputational and platform-policy risk.
Global overlap
Findings cross-map to FTC guidance and the EU's DSA/UCPD for products selling internationally.
How we help you comply
Cyber Governance & Audit
Dark Pattern Audit & Remediation
Deceptive-UX audit against India's CCPA dark pattern guidelines, FTC guidance and the EU DSA/UCPD, with remediation.
Cyber Governance & Audit
Compliance Advisory
Gap analysis and audit-readiness for RBI, SEBI, ISO 27001, SOC 2, CERT-In and DPDP.
Innovation & Engineering
Inclusive UI/UX
Modern, brand-aligned UI/UX and design systems that meet WCAG 2.2 by construction.
Need help with Dark Patterns (CCPA)?
Prove both before launch.
Bring us your app, audit deadline, or security concern. We'll map the fastest path to WCAG conformance, VAPT coverage, and regulator-ready evidence.
