The Guidelines for Prevention and Regulation of Dark Patterns, 2023

Notified by the CCPA on 30 November 2023 under its Section 18 power, after a public-comment draft and consultation with platforms, consumer bodies and law firms, the Guidelines for Prevention and Regulation of Dark Patterns, 2023 are the first Indian instrument to regulate deceptive interface design by name. This note covers the framework: application, the definition, the prohibition, the annexed catalogue, the mapping onto the Act's wrongs, and enforcement.

1. Application: Who and What

Platforms: the Guidelines apply to all platforms systematically offering goods or services in India, websites, apps, marketplaces and interfaces, the systematic-offering formula borrowed from the E-Commerce Rules, so location of incorporation does not matter where Indian consumers are served.
Advertisers and sellers: expressly bound alongside the platforms, the manipulative design commissioned by an advertiser or deployed by a seller is caught at its source as well as at its screen.
All sectors of the interface economy: retail, travel, food delivery, gaming, subscriptions, SaaS, the Guidelines are written for the interface, not for a trade, and apply wherever the transaction runs through a designed flow.

2. The Definition and the Prohibition

Guidelines for Prevention and Regulation of Dark Patterns, 2023 (substance)

'dark patterns' shall mean any practices or deceptive design patterns using user interface or user experience interactions on any platform that is designed to mislead or trick users to do something they originally did not intend or want to do, by subverting or impairing the consumer autonomy, decision making or choice, amounting to misleading advertisement or unfair trade practice or violation of consumer rights.

No person, including any platform, shall engage in any dark pattern practice.

The elements: a design practice in UI or UX; designed to mislead or trick the user into unintended action; working by subverting or impairing autonomy, decision making or choice; and amounting to one of the Act's wrongs, the definition builds the legal consequence into the concept.
The prohibition is general: 'no person, including any platform', the command runs to designers, sellers and advertisers as much as to operators.
Design, not words: the definition deliberately reaches manipulation that makes no statement at all, the default, the layout, the friction; intent is read from the design's structure and effect.

3. The Annexure and the Mapping Clause

Annexure 1 specifies the recognised patterns, thirteen of them, each with a definition and illustrations: false urgency, basket sneaking, confirm shaming, forced action, subscription trap, interface interference, bait and switch, drip pricing, disguised advertisement, nagging, trick question, SaaS billing and rogue malwares (each examined in the types note). Two features of the list matter doctrinally. It is illustrative: the operative prohibition runs on the definition, so an unnamed manipulation that subverts autonomy is within the Guidelines though outside the annexure, and the catalogue can grow. And it is mapped: because every dark pattern 'amounts to' a misleading advertisement, an unfair trade practice or a violation of consumer rights, the Guidelines create no free-standing offence; they classify conduct into the Act's existing wrongs, which is what makes them immediately enforceable with the machinery the Act already provides. The disguised advertisement, for instance, is policed with the 2022 Advertising Guidelines' disclosure rules; basket sneaking breaches the E-Commerce Rules' affirmative-consent requirement; false urgency is the bait's interface form.

4. Enforcement and Compliance

The CCPA: investigation on complaint or suo motu, discontinuance and modification directions, penalties under Section 21 where the pattern is a misleading advertisement, and the class-protection powers where it is an unfair trade practice; the Authority has pressed compliance through advisories to major platforms directing self-audit and removal of identified patterns.
The Commissions: the consumer charged, subscribed or signed up through a dark pattern complains on the ordinary grounds, refund, compensation, discontinuance, with the screen-recording and the flow's screenshots as the evidence.
Self-audit, from advisory to obligation: the 2023 advisories urged platforms to audit their interfaces; the 2026 E-Commerce Amendment (in force 1 January 2027) converts this into a duty, yearly self-audits of dark-pattern compliance with the certificate prominently displayed.
Compliance in practice: map every flow against the thirteen patterns; make consent affirmative and defaults neutral; price complete at first display; make cancellation as easy as subscription; label every advertisement; and document the audit, the reversed checklist is the design brief.

⚠ Key point

The 2023 Guidelines (notified 30 November 2023): applicable to every platform systematically serving Indian consumers, plus advertisers and sellers; defining the dark pattern as UI/UX design that tricks users into unintended action by subverting autonomy; prohibiting it for all persons; specifying thirteen patterns in an illustrative annexure; and mapping every pattern onto the Act's wrongs, misleading advertisement, unfair trade practice, rights violation, so the CCPA and the Commissions enforce it with their existing powers, and the 2026 Amendment adds audited yearly self-certification.

The Guidelines' craft lies in their economy: one definition, one prohibition, one illustrative list, and a mapping clause that lets thirty-year-old machinery police the newest form of deception.

5. Related Topics and Provisions

Types of dark patterns (Topic 80): the annexure's thirteen species
Dark patterns and consumer protection (Topic 78): the concept behind the instrument
Dark patterns in e-commerce (Topic 81): the platform duties in operation
CCPA powers (Topics 26 and 28): the enforcement engine