Skip to content
checkDPDP

Guide

Five cookie-consent dark patterns you have to stop using

A surprising number of Indian websites still use confused consent — pre-ticked boxes, hard-to-find reject buttons, "agree" buttons styled as the only choice. They are all DPDP risks.

10 Jan 2026 · 5 min read

The DPDP Act requires consent that is free, specific, informed and unambiguous. Five UX patterns fail at least one of those. If your banner uses any of them, expect a scanner Warning or Fail — and an enforcement risk under the Rules.

We walk through each pattern with a real example and the fixed version side-by-side.

Note. Guidance, not legal advice. For specific compliance decisions, please consult a qualified data-protection lawyer.

← All posts