India’s Data Protection Act Rewrites Consent Design
India’s Digital Personal Data Protection Act, 2023 changes how consent must be taken online. A recent legal explainer makes it clear that consent must be free, informed, specific, unconditional, and easy to withdraw. That requirement lands directly on screens, flows, and interaction design. This reframes UI and UX as sites of legal accountability. Buttons, default settings, copy hierarchy, and timing now decide whether consent is valid or manipulative.Dark patterns, preticked boxes, and buried opt-outs are no longer just poor practice. They are legal risks. In a country where millions are first-time internet users, the interface often becomes the only explanation of rights. India’s data protection regime will not be enforced only through penalties. It will be enforced through everyday design choices, pixel by pixel.
It will be enforced through everyday design choices, pixel by pixel.