CCPA Penalises SpiceJet for Dark Patterns Under Consumer Laws

In a landmark order, the Central Consumer Protection Authority (CCPA) has imposed a penalty of ₹1 lakh on SpiceJet Limited for employing deceptive “dark patterns” on its digital booking platform. The order, delivered by Chief Commissioner Smt. Nidhi Khare and Commissioner Shri Anupam Mishra, underscores a rigorous enforcement of consumer rights in the evolving landscape of e-commerce.

The Anatomy of the Dispute The proceedings were initiated suo motu after the CCPA flagged questionable interface designs on SpiceJet’s website. The core issue involved the use of pre-ticked checkboxes that automatically enrolled passengers into the “SpiceClub Loyalty Program” and subscribed them to promotional communications. By defaulting to a “preferred” outcome, the airline effectively bypassed the requirement for explicit, informed, and affirmative user consent.

While SpiceJet initially maintained that its website was "customer-friendly" and denied any deceptive practices, a subsequent investigation by the Director General revealed that the airline merely swapped one manipulative design for another. Even after removing the pre-ticked loyalty program box, the platform replaced it with another pre-selected option related to receiving marketing newsletters, demonstrating a persistent effort to nudge users toward pre-determined choices.

A Tug-of-War Over Consent During the hearings, SpiceJet argued that the loyalty program provided redeemable reward points—not monetary benefits—and that the pre-ticked boxes for communication preferences were technical errors. The airline further emphasized its history as a low-cost carrier that prioritized connectivity and national service, particularly during the COVID-19 pandemic.

The Authority, however, was unmoved by these justifications. It held that the airline’s interface failed to uphold the fundamental principle of consumer autonomy. The CCPA noted that the design forced consumers into a “double-layered” decision process, where they had to actively uncheck boxes to opt-out, effectively turning the passive act of booking a flight into a mechanism for unwanted enrollment.

Legal Analysis: The Dark Pattern Framework The CCPA’s ruling serves as a vital application of the Guidelines for Prevention and Regulation of Dark Patterns, 2023 . The Authority categorized SpiceJet’s interface as utilizing three distinct prohibited patterns: 1. Trick Question: Using confusing language, such as negatively framed opt-out statements, which misdirects the user. 2. Forced Action: Requiring users to manage subscription settings as a prerequisite for completing a travel booking. 3. Interface Interference: Highlighting preferred company outcomes while obscuring neutral user choices.

By doing so, the airline violated Section 2(47) regarding unfair trade practices , Section 2(46) concerning unfair contracts , and Section 2(28) relating to misleading advertisements .

Key Observations The judgment clarifies the standard for digital consent in India, emphasizing that affirmative action is not an option but a requirement. Key observations include:

"In the present case, the opposite party designed its interface in a manner that favoured enrolment into the SpiceClub loyalty program and subscription to promotional communications through pre-selected options. By enforcing the company's preferred outcome as the default choice and requiring consumers to actively deselect such options, the interface highlighted one course of action while obscuring an equally neutral choice."

"Consent inferred through pre-ticked checkboxes altered consumers' rights and obligations without their express agreement, making such consent legally unacceptable."

"The use of pre-selected enrolment options by the opposite party is therefore directly contrary to the requirements embodied under the said Rule [ Rule 4(9) of the Consumer Protection (E-Commerce) Rules, 2020 ]."

The Path Forward: Mandated Compliance The CCPA has ordered SpiceJet to ensure that all corrective measures—specifically the removal of pre-ticked boxes—are maintained permanently. The airline is required to submit a compliance report within 15 days of the order’s receipt.

This decision serves as a stern warning to e-commerce entities: digital interfaces must be designed for transparency, not manipulation. For consumers, the ruling reaffirms their right to make travel bookings without being nudged into services or communications they never intentionally signed up for. Consistent enforcement of these standards is expected to reshape how airlines and digital marketplaces prioritize user choice in the coming years.