Joshi: CCPA Penalises PhysicsWallah, McAfee Over Dark Patterns
Synopsis
Key Takeaways
Union Consumer Affairs Minister Pralhad Joshi on Wednesday announced that the Central Consumer Protection Authority (CCPA) has imposed penalties on edtech platform PhysicsWallah and cybersecurity firm McAfee for deploying so-called 'dark patterns' on their digital interfaces. The minister said the orders target design practices that compromised informed consumer choice and consent, and form part of a wider clampdown on manipulative online experiences in India's digital marketplace.
In his post, Joshi said the action underlined the CCPA's 'commitment to ensuring a fair, transparent and consumer-friendly digital marketplace', adding that 'consumer consent must always be explicit, informed and free from manipulative design practices'. He tagged the development with hashtags including #CCPA, #ConsumerRights, #DigitalTransparency and #DarkPatterns, and linked to an official press release.
Context
Dark patterns are interface choices that nudge or trick users into decisions they might not otherwise make — for instance, pre-ticked boxes, hidden charges, confirm-shaming, drip pricing, or hard-to-find unsubscribe buttons. The CCPA has, over the past two years, sharpened scrutiny of such practices on e-commerce, edtech, travel and software-subscription platforms.
PhysicsWallah is among India's largest home-grown edtech firms, offering test-preparation courses for engineering and medical entrance examinations. McAfee is a global cybersecurity company whose antivirus and identity-protection subscriptions are sold widely to Indian consumers, often through auto-renewal flows.
Policy backdrop
The CCPA was set up as a statutory regulator under the Consumer Protection Act, 2019, which replaced the 1986 legislation and for the first time brought e-commerce and direct selling formally under consumer-rights enforcement. The Authority has powers to investigate violations, order recalls, impose penalties and issue directions to discontinue unfair trade practices.
In 2023, the CCPA notified the Guidelines for Prevention and Regulation of Dark Patterns, listing specific manipulative interface practices and classifying them as unfair trade practices. The guidelines covered categories such as false urgency, basket sneaking, subscription traps, forced action, interface interference and bait-and-switch — providing the legal scaffolding for enforcement actions of the kind announced by the minister.
Stakeholders and impact
For consumers, the orders signal that regulators are willing to penalise large platforms — both Indian and multinational — when consent flows or pricing displays are found to be misleading. Subscription-heavy categories, including edtech course bundles and security-software auto-renewals, have drawn repeated complaints over cancellation hurdles and unclear billing.
For industry, the action raises compliance stakes. Platforms operating in India will face pressure to audit checkout journeys, default settings and renewal disclosures against the CCPA's published list. Legal teams at digital firms have, in recent quarters, been re-examining interface choices that were earlier treated as routine growth or retention tools.
The political messaging is also notable. By personally amplifying the CCPA's orders, Joshi — who also holds the New and Renewable Energy and Food and Public Distribution portfolios and is a senior BJP leader from Karnataka — is positioning consumer protection as a visible plank of the Union government's digital-governance agenda.
What's next
Attention will turn to whether the CCPA follows up with further show-cause notices to other major platforms in e-commerce, travel aggregation, food delivery and over-the-top streaming, where dark-pattern complaints have been documented. Any move to tighten the Consumer Protection (E-Commerce) Rules or to issue binding standards — rather than guidelines — would further raise the compliance bar.
For now, the orders against PhysicsWallah and McAfee serve as a benchmark: regulators are prepared to convert the 2023 dark-patterns framework into concrete penalties, and digital businesses operating in India can expect interface design to be treated as a consumer-rights issue rather than a purely commercial choice.