Back to Module
1 of 11|Consent Management Framework
video 15 min•Consent Architecture
Consent Collection
Best practices for collecting valid consent without dark patterns.
🎯 Learning Objectives
- ▸ Understand the principles of valid consent collection
- ▸ Identify and avoid dark patterns
- ▸ Design clear affirmative actions
The Anatomy of Good Consent
When a user lands on your website or app, they should understand what data you are collecting and why. Consent collection must be frictionless but explicit.
- • Clear Affirmative Action: The user must click "I Agree" or toggle a switch. Silence, inactivity, or pre-ticked boxes do not count.
- • Granularity: Allow users to consent to specific purposes. For example, separate checkboxes for "Marketing" and "Analytics".
- • No Bundling: Do not force users to accept marketing tracking just to read your privacy policy.
- • Easy to Refuse: The "Reject" button must be as prominent as the "Accept" button.
The DPDPA (and global laws like GDPR) strictly prohibit "dark patterns"—design tricks that trick users into giving consent.
Dark Patterns to Avoid
Dark patterns are UI designs that subvert or impair user autonomy. Here are common ones to avoid:
- • Roach Motel: It is easy to sign up, but impossible to find the "delete account" or "withdraw consent" button.
- • Confirmshaming: Using guilt-tripping language like "No thanks, I prefer to stay ignorant about my privacy".
- • Hidden Costs: Not revealing that consenting to marketing will result in spam calls.
- • Trick Questions: Asking confusing double-negative questions.
📖 Glossary
- Dark Patterns
- User interface designs that are crafted to trick or manipulate users into doing things they might not otherwise do, like making a purchase or giving consent.
- Granular Consent
- Consent given separately for different purposes, rather than a single "all or nothing" choice.
🔑 Key Takeaways
- Consent must be explicit; pre-ticked boxes are illegal.
- Use plain language, not complex legal jargon.
- Do not bundle multiple consents into one blanket checkbox.
📚 Further Reading
- DPDPA Section 6 — Government of India (2023)
Course Author
Shilpi Kulshrestha
Shilpi is a corporate lawyer with over a decade of experience in data protection, company law, and regulatory compliance. She has advised 50+ startups and enterprises on DPDPA readiness, privacy gover...