Draft:Dark Patterns

WHAT IS DARK PATTERNS?

In simple terms dark patterns are design tricks that are built into website and apps that quietly steer users toward choices they would not otherwise make such as spending more money giving up more personal data or struggling ti cancel something they no longer want. rather than helping a user complete task the interface is delibratly shaped to benefit the platform at the user's expense often without realising that they have been nudged. the term was coined in 2010 by harry brignull who used to discribe interface designs that intentionally coerce control or decieve people into decisions they would likely avoid if they were fully informed and free to choose otherwise, his observation was that quietly building manipulation into everyday digital interactions and he argued that interface design should instead follow ethical standards that respect user choice.

OFFICIAL DEFINITIONS OF DARK PATTERNS

This section discusses "Dark Patterns" as defined in authoritative sources particularly Indian legislation and the highest official publications on the subject. Where no binding definition exists reference are made to conceptually related provisions.

'Dark Patterns' as defined in legislation(s)

Guidelines for prevention and control of dark patterns, 2023

These are issued by the central consumer protection authority (CCPA) under section 18 of the Consumer protection Act, 2019 which constitute the principle regulatory framework governing dark patterns in India. Section 2(e) defines dark patterns as practices or deceptive design patterns using user interface that are designed to mislead or trick consumers into doing something they did not originally intended thereby undermining their autonomy and choices and amounting to misleading advertisement and unfair trade practices. these guidelines identify 13 dark patterns which includes false urgency, basket sneaking, confirm shaming, forced action, subscription traps, interface interference, bait and switch, drip pricing and disguised advertisements.

RBI Directions, 2025

These Directions are extended towards the regulations of dark patterns to the digital lending sector. these prohibits the lending service providers from using dark patterns or deceptive measures in their user interface to nudge borrowers towards a particular loan offer. The RBI's approach is particularly significant because digital lending involves financially consequential decisions making transparent presentation of loan options essential to informed borrower choices. By addressing dark patterns, the RBI has translated the general consumer protection principle established by the CCPA into a sector specific obligation for regulated digital lending activities.

Consumer Protection (E-Commerce) Rules, 2020

These rules provide ann importent supporting framework for preventing manupilative digital practices in e-commerce. Rule 4(9) requires consumer consent to be obtained through an explicit and affirmative action and which prohibits e-commerce entities from recording consent automatically including through pre-ticked checkboxes. This directly addresses interface practices capable of undermining genuine consumer choices. The CCPA subsequently reinforced this framework by advising e-commerce platforms to conduct self auditss to idnetify and eliminate dark patterns which will be promoting a fair and consumer centric digital marketplace.

Legal provision(s) relating to 'Dark Patterns'

These provisions do not clearly define dark patterns but they are conceptually necessary to understand it fully essentially for clarifying what makes consent legally defective and when manipulative design escalates from individual deception into market level harm and what pre-existing disclosure standards a practice like drip pricing is actually being measured against.

• section 2(47), 2(41) and 94 of Consumer Protection Act, 2019 they extend the general catigories of unnfair trade practice and ristrictive trade practice to interface level conduct and by empowering the central government to act against unfair e-commerce practices generally show that dark patterns were treated as a species of unfair trade practice long before the term itself was adopted.
• Information Technolgy Act, 2000 and the intermediary guidelines and digital media code, 2021 they extend a platforms due diligence and grievance redressal obligations to its own interface design clerifying that an intermediarys safe harbour protectiion is not absolute where the itself facilitates deception.
• section 6 Digital Personal Data Protection Act, 2023 extends the requiment of free specific and informed consent to data processing generally and by requiring that withdrawal be as easy as giving consent shows that consent obtained through a dark pattern fails the Act's own threshold for valid consent.
• section 13 to 19 indian contract Act, 1872 extends the general law of free consent ( coersion, undue influence, fraud, misrepresentation) to any transaction whatsoever by providing that a contract through vitiated consent is voidable illustrating that a dark pattern is best understood doctrinally as a digital age mechanism for procuring the very defect in consent.

Dark Patterns as Appeared in Research

Why Dark Patterns concern us ?

Dark patterns concern us because they manipulate how people make decisions in digital environments, often leading to outcomes that benefit designers or companies at the expense of users. Beneath their technical design lies a set of ethical and normative issues that affect individuals, markets, and democratic governance.

Individual Welfare

From the individual welfare perspective, dark patterns diminish users’ well-being by causing financial losses, invading their privacy, or imposing cognitive burdens. They can trick users into spending money unintentionally, sharing personal data against their preferences, or wasting time navigating deceptive interfaces. Such practices exploit human limitations in attention and understanding, threatening users’ ability to act in their own best interests.

Collective Welfare

From the collective welfare perspective, dark patterns harm society as a whole. They erode competition by raising barriers to switching and market entry, obscure true prices to limit transparency, and undermine trust in digital markets. Over time, this reduces market efficiency and places honest businesses at a disadvantage. These practices can also lead to wider societal harms, such as the misuse of data for political manipulation or disinformation.

Regulatory Objectives

From the regulatory objectives perspective, dark patterns raise concerns because they subvert established legal and policy frameworks designed to protect consumers. By concealing material information or misleading users, these designs can violate consumer protection, privacy, and data consent laws. They challenge regulators’ ability to uphold fairness, transparency, and informed consent—core principles of market integrity and democratic governance.

Individual Autonomy

Finally, from the individual autonomy perspective, dark patterns are troubling because they undermine the user’s right to make free and informed choices. They use subtle design cues to steer decisions, often pushing users toward actions they would not otherwise take. In doing so, they erode trust and personal agency—the foundations of ethical interaction and democratic participation in digital spaces.

In essence, dark patterns are not just bad design; they are manipulative design. They raise deep concerns because they compromise welfare, distort markets, weaken regulatory safeguards, and violate the moral right of individuals to autonomous decision-making in the digital sphere.

Ethical Dimension of Dark Patterns

Autonomy and Informed Consent

Research widely identifies that violation of the users autonomy as a foundational ethical harm of dark patterns. Chugh and Jain observe that this is a violation of the fundamental principle of informed consent, which stipulates that a person must be fully aware of what he/she is consenting to, and thus cannot be deceived or coerced. Such interfaces conflict with ethical principles of free and informed consent, long protected by the law.

Nissenbaum's concept  on contextual integrity brings in another element by arguing that the moral ground for design lies in adhering to the typical rules of information flow in that specific context. Dark patterns violate these rules by either subtly leading or perplexing users to the point where they end up divulging more information or adding-on features they did not plan to. The combined insights of these theorists reveal that dark patterns not only curtail user choices but also undermine the very trust and norms that render the digital interactions fair and transparent through the use of such tactics.

Behavioural Manipulation and Exploitation of Biases

A large body of research shows that dark patterns deliberately exploit cognitive biases identified in behavioural economics. Sharma and Sharma note that the digital platforms “capitalise on cognitive biases” to influence users in a way that the decisions are  favourable to them. For example:

— Loss aversion is exploited through scarcity messages. (Only 2 are left!!)

— Default bias is exploited through pre-selected consent boxes.

— Fear-based framing appears in confirm shaming messages (“No, I do not want to save money”), designed to make users feel embarrassed and guilty.

Kahneman’s dual-process theory explains why dark patterns are effective. These techniques target “System 1” - fast, intuitive, emotional reasoning rather than “System 2,” which engages in slow, logical deliberation. This intentional  manipulation raises some serious fundamental ethical concerns about coercion and unfair influence of digital environment.

Privacy Ethics and Decisional Autonomy

Privacy related dark patterns are especially troubling because they directly interfere with a user’s ability to control their own personal information. Kelly and Burkell, in their study examine teen focused social networking platforms, identify tactics such as confusing instructions, obstruction and default public sharing settings that increase users’ social exposure. These practices creating illusory consent, undermining the users decisional privacy, their right to decide independently what information to share and with whom.

Solove’s border theory of privacy helps explain why these harms are significant. He argues that privacy violation harms arise not merely from data collection but significantly from losing control of one’s own digital identity. Dark patterns actively undermine this control by tricking users into disclosures they did not intend to, creating ethical concerns.

Economic / Market Dimensions

Market Failure and Information Asymmetry

Law and economics scholarship argues that dark patterns do more than mislead users, they also harm the overall functions of markets. Nousiainen and Ortega explain that manipulative interface designs worsen the already existing information asymmetries between platforms and consumers, distort consumer choices, and increase transaction costs. For example, when consumers unknowingly enrol in subscriptions or purchase unintended services, markets no longer reflect true consumer preferences, creating a classic form of market failure.

Empirical data reinforces this concern : Mathur et al.’s large scale audit of 11,000 e-commerce platforms revealed hundreds of manipulative patterns, showing that dark patterns are not isolated incidents but part of wide systematic nature practice. This widespread use of dark patterns makes consumer markets less transparent and ultimately less efficient.

Profit Maximisation and Data Monetisation

Economic incentives strongly drive the use of dark patterns, as platforms rely on them to boost revenue. One strategy is to maximise sales, using tactics like countdown timers, fake urgency and basket sneaking and subscription traps. Pushing the users to make unintended purchases. The second strategy is increasing data extraction and collection, especially social media platforms that earn profits through targeted advertisement. More the data, more accuracy and more value to ads.

Kelly and Burkell note that these social media services profit from wider user exposure, incentivising designs that make privacy protective choices difficult. Similarly, Chugh and Jain document how Indian e-commerce platforms use dark patterns to increase not only conversions but also collection of personal data. Together these findings highlight on how dark patterns are deeply tied to profit maximisation and data monetisation strategies.

Competitive Distortion and Regulatory Responses

Incorporating dark patterns into their design not only drives the profits of the firms using them up but also grants them an unfair edge over the companies that have chosen the transparent design route. The experimental research of Luguri and Strahilevitz proves that even "light" dark patterns can considerably raise opt-ins for the sharing of data, hence revealing the efficiency and destructiveness of these tactics. Hence, it is a situation in which all are losing, as companies feel compelled to resort to manipulative designs in order to be at least as good as their rivals in the market.

The problem, however, is being addressed by regulators in different areas of the world. The Federal Trade Commission in the U.S. considers dark patterns unfair and deceptive practices and thus puts them under its ambit. The European Union, via the GDPR and later instructions, effectively puts aside any and all consent schemes that could be termed manipulative and commands real user choice. The same goes for India, where the Consumer Protection Act 2019 labels certain dark pattern practices as unfair and thus, in essence, as theories that get an advantage through trickery or deception, a view that is supported by Sharma and Sharma's research. With regulators focusing their attention more on this area, an economic range slowly becomes the basis for viewing dark patterns as not just ethical issues but rather as problems that necessitate stronger legal action and hence, the coming of the court has to be decided in their favour.

Social Dimensions

Increased Social Exposure and Norm Shaping

Kelly and Burkell argue that privacy dark patterns are not only individual influencers but also, to a great extent, global factors affecting the acceptance of certain ways of behaving in society. When platforms choose “public” as the default, they in effect push a lot of users into social exposure whom this may not even be fully aware of. This is especially true for youngsters; they might think of such high visibility as the )normal or expected) way to be active on the internet, thus, they would reveal more than they otherwise would. Eventually, such design decisions modify and even create the norms of society which are more or less strong depending on the level of openness and disclosure. Thus, dark patterns influence not only the choices individuals make regarding their privacy but also the social milieu within which these choices are made.

Social Risks: Harassment, Reputation, Identity

Regardless of the risks the dark patterns are forcing the users to share more or hiding significant privacy controls, the users still being sure, could come to such unfortunate cases as being harassed, cyberstalked, having their identities stolen or reputations damaged. Most of the time, users don't even realize how exposed they are on the Internet and this gets them to leave digital traces unintentionally which others might exploit. Solove mentions that the digital footprints of such people, particularly those made under a manipulative situation, can "haunt people forever", since they are hard to get rid of and may come back in a negative way. These risks are even higher in collectivist cultures where social judgement has more impact and for the weaker groups such as children, women, and the disenfranchised ones.

Impact on Vulnerable Groups

Dark patterns are especially detrimental to the vulnerable population, as they tend to have the least means for either noticing or fighting against the manipulation of the design. Adolescents are the ones that are most affected due to their impulsivity, peer influence, and their unawareness of the risks that are long-term. Older users suffer from the fact that they are generally not very skilled at using the internet, so they are more likely to go along with the default settings or miss the concealed terms. Those belonging to the low-income group have to deal with a greater mental load and time pressure, which can unconsciously push them toward making hasty decisions that the dark patterns have already influenced. Complete novices on the internet especially in India may have a hard time grasping the meaning of the interface signals, the setting of privacy, or the misleading prompts. Chugh and Jain point out that in India, the situation is made worse by the fact that the people that speak different languages face a barrier, that the people with limited digital knowledge are more prone to fall victim to misleading design, and that there is a lack of access to reliable information, which in turn makes the groups even more vulnerable to manipulative design.

Psychological and Mental Dimensions

Exploitation of Cognitive Biases

The operation of dark patterns is grounded in the exploitation of cognitive biases that are well-known and recognized by people. The mental shortcuts are the ones that most people take when they try to make quick decisions. Scarcity cues like “Only 1 left!” are the ones that trigger the scarcity bias and countdown clocks, while activating urgency bias, push users to act without thinking. Messages such as “Most people choose this option” are the ones that use social proof to make a particular choice seem normal or desirable. Guilt-based prompts, often seen in confirmshaming, pressure users by making the alternative appear irresponsible or unwise. All these techniques have been documented in behavioural economics and have been predicted as behavioural tendencies and thus platforms can subtly but strongly steer user decisions through these techniques.

Cognitive Overload and Decision Fatigue

Obstruction-based dark patterns such as torturous and confusing cancellation or opt-out processes and so on intentionally lead to cognitive overload and users find themselves mentally fatigued. People in such situations tend to take the fastest and the easiest way out rather than the one that guarantees their rights. Kelly and Burkell observe that this friction is often purposely created to dissuade users from taking protective measures with respect to their privacy like changing visibility settings or opting not to share their data. Gradually, such barriers become a part of decision fatigue which takes away the users’ capability to deliberate carefully and to assert their preferences. This not only diminishes their feeling of control but also adds psychological tension leading to the choices being made more by tiredness than by true consent.

Emotional Manipulation and Mental Well-Being

One of the main ways many dark patterns operate is through emotions which in turn affect user behaviour. Anxiety can be the result of scarcity messages, guilt can be the result of confirming shaming prompts, and fear can be the result of loss-framed messages. All of these situations are driving the users to make decisions that they would not make otherwise. The more a person encounters such emotionally charged prompts the more their sense of control can weaken, thus the person will feel more stressed and have less confidence in their own decisions. This is even more so for teenagers, who are in identity formation phase, and are very responsive to social signals and pressures, which make them especially vulnerable to emotionally manipulative design practices through the internet.

Challenges

Dark patterns - design interfaces that confuse, coerce, manipulate, or exploit users - have presented a set of complex challenges in legal, technological, and policy domains, which are interrelated. Although regulators worldwide are paying more attention to the issue, it is still very hard to come up with rules that are both effective and adaptable to change. The difficulties come from the various problems related to definitions, gaps in enforcement, changes in technology, and the coexistence of data protection and consumer welfare. The challenges are listed out in the upcoming sections under broad thematic headings, and each is backed up by academic literature.

1. Definitional Ambiguity and Conceptual Complexity

One of the most basic problems is that there is no common or universally accepted definition for dark patterns. Regulatory authorities are finding it difficult to come up with a definition that is both considerably inclusive and at the same time, very precise- as dark patterns differ considerably in their design, usage, and effect. If the definition is too broad, it might be vague and thus harmful practices might go undetected through loopholes; if it is specific to certain patterns, a list may become quickly outdated as design changes by the firms. Researchers indicate that designers’ “intent” for defining dark patterns is not the right approach as intent is almost impossible to demonstrate and there can be many stakeholders in a company involved who might have different opposite intents to each other (King & Stephan). The Loyola article refers to this issue as well by saying that overly broad definitions could lead to overlapping and thus unclear areas wherein the legitimate persuasion transforms into illegitimate manipulation. The inability of dark patterns to be captured in the laws with a clear and definite understanding leads to uncertainty for both regulators and businesses.

2. Multi-Domain Legal Overlap and Fragmented Enforcement

Dark patterns are overlapping in different legal areas, like consumer law, data protection, contract law, unfair trade practices, and interface design regulation, which makes the enforcement very complex and divided. The Loyola article mentioned that U.S. courts have usually resorted to existing areas like contract law (e.g., assent, notice) and data protection principles to regulate indirectly manipulative interfaces which lead to inconsistent results. The LSPR assessment of India points out a like problem: authorities must connect consumer protection frameworks with data privacy obligations to tackle dark patterns comprehensively. In the absence of synchronized institutional coordination, the harmful practices are often placed between legal categories which results in regulators having partial or incomplete authority.

3. Proving Manipulation: The Limits of Intent-Based Enforcement

Some places make it necessary to show that there was an intention to deceive as a condition for the prohibition on misleading practices, and this approach results in a major obstacle for law enforcement. According to King & Stephan, intent is an unreliable indicator since the interface design is a result of many teams UX designers, marketers, engineers so it is almost impossible to pinpoint the usage of guilt manipulating. Dark patterns frequently affect people unknowingly using their inbuilt biases, which makes it easier for corporations to assert “neutral design choices.” The article from LSPR is of the view that performance-based standards should be the ones that take over, and they should be judging the results (consumer misunderstanding, forced consent, loss of control) instead of the intent which is hard to understand. Nonetheless, moving into such standards brings the need for the new methodologies, benchmarks, and interpretive guidance, which the regulators have not yet come up with.

4. Measurement Challenges and Absence of Empirical Standards

A fundamental difficulty is represented by the absence of empirical tools, metrics, and thresholds to determine the degree of manipulativeness of a design. User studies in academic research are still at the beginning stage, and there are very few standardized procedures for quantifying impacts like cognitive load, influence, consent quality, or user autonomy (King & Stephan). The Loyola paper, like the others, also mentions the absence of common evaluation guidelines for the regulators' ability to determine if a certain pattern has gone from persuasion to manipulation. The situation without quantifiable criteria is such that even regulators' actions can become subjective, vary from one case to another, and be challenged by powerful tech giants. This, in turn, puts a heavy burden of proof on the litigating parties and makes the deterrent effect weak.

5. Rapid Evolution of Technology and Interface Design

Digital interfaces develop way faster than the traditional regulatory cycles can accommodate. Once a certain dark pattern is made illegal, businesses can quickly change or redesign their interface to still manipulate users but now using different methods. The Loyola article points out that regulations that are not updated might become outdated very soon. In the same way, the LSPR assessment of India's guidelines strongly emphasizes the use of adaptive frameworks, since the diversity of manipulative designs like AI-driven personalization, cross-device tracking, or behavioral profiling is increasing all the time. Technology's agility is a direct reason for the regulatory vulnerability, thus making the real-time monitoring and the periodic guideline updates a necessity.

8. Lack of Inter-Regulatory Coordination

To regulate dark patterns it necessitates the cooperation of consumer authorities, privacy regulators, competition commissions, and digital services organizations. Nonetheless, in the majority of jurisdictions these agencies are operating independently. The LSPR commentary on India recommends joint panels or cross-authority coordination, pointing out that dark patterns frequently result in the exploitation of consumers and infringement of privacy rights. In the absence of institutional coordination, companies take advantage of the regulatory silos. For instance, a design may be in line with consumer laws while at the same time breaching data protection laws—or the other way around. Fragmentation weakens the power of enforcement and it becomes easier for harmful practices to emerge and stealthily bypass the regulators’ view.

9. Global Inconsistency and Jurisdictional Variations

(References: Loyola Consumer Law Review)

Dark patterns are used on worldwide platforms, but regulations have responded quite differently depending on the place. The European Union outlaws dark patterns in the Digital Services Act, while the United States turns to laws that apply only to certain industries and India implements separate guidelines. The Loyola article illustrates the situation where U.S. courts had to either fall back on contract principles or data protection rules since there were no clear statutes. This situation where laws vary from one place to another has led to compliance uncertainty for companies operating in multiple countries and also given the opportunity for harmful designs to continue existing in areas with less strict regulations. The lack of a unified international approach gives the users’ rights a blow and makes the enforcement of laws across borders more complicated.

10. Enforcement Capacity, Resource Constraints, and Delayed Remedies

In many cases, even if laws are in place, the enforcement agencies might not possess the technical knowledge, data analysis tools, or UX auditing ability to spot the dark patterns. According to King & Stephan, the majority of FTC evaluations use HCI experts yet are still confidential and not available to the public, thus limiting public awareness and precedent. The LSPR review underlines the importance of a fast-tracked process since the harm caused by dark patterns can be quick and irreversible, particularly in areas such as children’s apps, financial transactions, or auto-renewed subscriptions. Legal measures without strong enforcement and significant penalties will likely be more symbolic than real in terms of their effectiveness.

Way Ahead: Strengthening the Regulatory Response to Dark Patterns

1. Building Clear and Adaptive Legal Definitions

The lack of a consistent, strong definition is the main reason why regulating dark patterns is so difficult. The legal definitions need to be very flexible to include the new manipulative designs and at the same time very precise to avoid ambiguity. It would be better for the legislators to move from intent-based tests which are very hard to prove - to outcome-based standards that would evaluate if a design has materially misled or coerced users. The models from the EU like the EDPB’s Guidelines on Dark Patterns (2022) and the Digital Services Act are good examples of how the combination of clear definitions and technology-neutral principles can facilitate enforcement. Building up alignment across jurisdictions, particularly in the areas of privacy, consumer protection, and competition laws, will be an effective measure to prevent the loopholes that digital platforms take advantage of.

2. Strengthening Enforcement Mechanisms and Accountability

In order to achieve compliance, it is necessary to have strong enforcement that is well-coordinated across different regulatory bodies. Agencies must have the power to use tools like compulsory audits, proactive interface assessments, and significant fines that deter non-compliance. Global examples such as the GDPR fines for Grindr and the ACCC lawsuit against Google indicate that when regulators consider manipulative design as a major cause of consumer harm, deterrence becomes stronger. Moreover, enforcement frameworks should prioritize the companies' transparency obligations and mandate them to disclose the impact of their design on user decisions. Moreover, if digital platforms were to be imposed a fiduciary duty, that would guarantee a minimum obligation to act in the users' best interest, thus preventing manipulative design from happening even before specific patterns are discovered.

3. Advancing Research, Measurement Standards, and Public Awareness

Future policy decisions should be guided by human-computer interaction (HCI) research, behavioral studies, and consumer psychology. The number of empirical studies that analyze the effects of design on user freedom is still low, and the regulatory bodies require common procedures for the assessment of the dark patterns they are particularly coping with those patterns that are "grey" as to their nature of being persuasive or manipulative. The public education campaigns can work hand in hand with the above-mentioned initiatives by making users aware of the different types of tactics, such as misleading consent banners, forced continuity, and deceptive opt-in flows. A user community that is well informed, in synergy with the partnership of academics and regulators, will gradually build a stronger digital milieu.

India-Specific Way Ahead

India's Dark Patterns Guidelines for 2023 are a significant step forward, but still, a lot of work needs to be done. It is very important to have a close connection with the Digital Personal Data Protection Act (DPDPA) to deal with government data-driven manipulative designs. Bringing the term 'data fiduciary' in a direct way into dark pattern regulation would mean imposing wider duties of fairness, transparency, and loyalty—thus, protecting even those non-data-collecting patterns like nagging or false urgency that fall under the dark patterns.

Moreover, India should think about setting up a joint mechanism between the CCPA and the Data Protection Board to supervise instances in which there is a conflict between consumer harm and privacy violations. The guidelines should also give the annexure-I a binding force in order to prevent interpretive uncertainty and provide for consistent compliance. The enforcement in India should also be quicker and more user-friendly because the harm caused by dark patterns in highly trafficked digital markets can happen very quickly. In the end, the regulatory future of India should bring together privacy, consumer protection, and competition insights, in such a way that it would not only be a reflection of global best practices but also be tailored to the unique scale of its digital ecosystem.

Terms

“user” shall mean any person who accesses or avails any computer resource of a platform.

User Interface design is the visual and interactive elements of a digital product, created to ensure that it is both visually appeasing and easy to use. User Interference design includes elements like layout, colour theme, typography and animations. These designs greatly affect the user’s experience, because of which they can sometimes be intentionally used to control and influence the user’s choice.

“Necessary fees” are charges which are essential for the completion of the order, such as delivery fees, gift wrapping, government imposed taxes, or any other charges which are explicitly disclosed to the consumer at the time of purchase.

Contributors & review status

Curated / edited bynot yet recorded

Peer reviewpending

Project reviewpending

Expert reviewpending

Page created 2026-08-21  ·  Last updated 2026-08-24