India's Data Privacy Law to Reshape E-commerce and App Interfaces, Targeting 'Dark Patterns'

Overview

New Digital Personal Data Protection (DPDP) Rules 2025 are set to significantly alter how e-commerce, food delivery, and ride-hailing apps operate in India. The rules tighten controls on user data collection by targeting 'dark patterns'—deceptive interface designs—requiring platforms to make consent withdrawal as easy as consent giving, and imposing stricter data deletion policies.