Consumer Protection and E-Commerce in 2026: CCPA Enforcement, Dark Patterns and Platform Liability

By Bhaskar Subramanian, Partner, S&S Co. Advocates & Solicitors and Souvik Bose, Associate, S&S Co. Advocates & Solicitors

Published 24 October 2026 · Law stated as on 22 October 2026 · Informational content, not legal advice: see our disclaimer

Five years after the Consumer Protection Act, 2019 created a dedicated regulator, the Central Consumer Protection Authority has settled into a visible pattern of penalty orders against platforms, advertisers and sellers. A fresh round of amendment rules, due to take effect on 1 January 2027, will tighten that regime further on pricing, search rankings and dark patterns. This piece sets out where the law stands today for businesses and consumers who deal in goods and services online, and where it meets product liability, arbitration clauses, RERA and the ordinary business of banks and insurers before consumer commissions.

A regulator, not just a complaints system

The Consumer Protection Act, 2019 did two separate things, and the distinction still confuses people five years on. It kept the old architecture of District, State and National Commissions where an individual consumer can sue for a deficiency in service, a defective good or an unfair trade practice. It also created something the 1986 Act never had: a statutory regulator, the Central Consumer Protection Authority, with its own powers of inquiry, recall and penalty, independent of any particular consumer's complaint.

That second piece matters because it changes who can act and on what trigger. A single buyer with a damaged television still goes to the District Commission nearest to where they live or transact, under the pecuniary limits that the Act and later notifications set for each tier. A systemic practice, a misleading ad running across a platform, a listing of a banned substance, a checkout screen built to trick a user into a paid plan, is something the CCPA can act on without waiting for an aggrieved person to turn up at its door. Sections 18 to 22 of the Act give it that reach: it can inquire or investigate on its own motion, refer a matter for detailed investigation to its Director-General or to a sectoral regulator where the issue spills outside consumer law, order a dangerous or hazardous product recalled with reimbursement to affected buyers, and search and seize records where an inquiry needs them.

The two tracks are not mutually exclusive. A platform fined by the CCPA for a misleading listing can still face an individual consumer's claim for the specific loss that listing caused them, and a pattern of individual complaints reaching the National Consumer Helpline is frequently what triggers a CCPA inquiry in the first place. Businesses selling into India now have to think about both exposures at once: the cost of defending or settling individual claims, and the separate, often larger, reputational and financial cost of a CCPA order that names the company and is picked up by trade press within hours of being passed.

Unfair trade practices and misleading advertisements: the statutory language

Section 2(47) defines an unfair trade practice broadly and deliberately leaves the list that follows open-ended: any method or practice adopted to promote the sale, use or supply of goods or services that misrepresents standard, quality, quantity, grade, composition, style or model; passes off reconditioned or old goods as new; makes claims without adequate testing to support them; or, in a clause with no equivalent in the 1986 Act, refuses to take back defective goods or withdraw a deficient service and refund the price within the time stated or, absent a stated time, within thirty days. That last addition answers a complaint that long predated the 2019 Act: sellers who simply stalled on refunds until a buyer gave up.

A separate provision, Section 2(28), defines a misleading advertisement: one that falsely describes a product or service, gives a false guarantee or is likely to mislead consumers about the nature, substance, quantity or quality of what is on offer, conveys a representation that would itself amount to an unfair trade practice if made directly, or deliberately conceals material information. The CCPA's own advisories treat the two definitions as working together, so that a dark pattern or a doctored discount claim can be pursued as both an unfair trade practice and a misleading advertisement depending on how the facts fit.

The practical consequence for a business reviewing its own marketing and interface design is that the test is not whether a statement is technically false in isolation. A claim can be accurate on its face and still mislead by omission, by implication, or by the way it is laid out on a screen. Advisories issued by the CCPA on this point have repeatedly emphasised that the overall impression created on an ordinary consumer, not a line-by-line parsing of the wording, is what the regulator looks at first.

The CCPA's toolkit against false and misleading advertising

Section 21 is the provision that has generated the most enforcement activity. On a finding that an advertisement is false or misleading, the CCPA can direct the trader, manufacturer, endorser, advertiser or publisher concerned to discontinue it or to modify it in a manner and within a time it specifies. Failure to comply, or a fresh contravention, exposes the party to a penalty that can extend to ten lakh rupees, with escalation to fifty lakh rupees for a subsequent offence. The CCPA can impose that penalty directly on the manufacturer or advertiser, and separately on the endorser of the advertisement, up to the same monetary ceilings.

Endorsers, including celebrities and increasingly influencers with large followings, do have a defence. Section 21(5) protects an endorser who exercised due diligence to verify the truth of the claims made in the advertisement before endorsing it. What counts as due diligence is not defined in the Act itself, and CCPA guidance has pointed toward obtaining the advertiser's substantiation for performance or efficacy claims before agreeing to the endorsement, rather than relying on the advertiser's assurance alone. Beyond the monetary penalty, the CCPA can prohibit an endorser from making any endorsement for up to one year, rising to three years for a repeat contravention, a sanction that for anyone whose income depends on endorsement work is often more consequential than the fine.

A separate defence under Section 21(6) protects a person who published an advertisement in the ordinary course of their business, such as a newspaper, broadcaster or platform carrying someone else's ad. That defence falls away, under the proviso to the sub-section, if the publisher had prior knowledge of a CCPA order requiring the advertisement's withdrawal or modification and carried on regardless. For platforms that serve third-party advertising at scale, this creates a practical compliance point: once an order naming a specific advertisement has been served or published, continuing to carry it is no longer a passive, ordinary-course act.

Criminal liability sits apart from these administrative penalties. Section 89 makes it an offence for a manufacturer or service provider to cause a false or misleading advertisement prejudicial to consumers' interests, punishable on a first conviction with imprisonment of up to two years and a fine of up to ten lakh rupees, rising on a subsequent conviction to imprisonment of up to five years and a fine of up to fifty lakh rupees. In practice, criminal prosecutions under this section remain far rarer than the administrative orders under Section 21, and most of the CCPA's visible enforcement activity through 2026 has stayed on the administrative track.

Dark patterns: naming the thirteen practices

The CCPA notified the Guidelines for Prevention and Regulation of Dark Patterns, 2023 on 30 November 2023 under its Section 18 rule-making power, and they apply to every platform and seller that systematically offers goods or services to consumers in India, reaching well beyond e-commerce marketplaces in the narrow sense. Annexure I to the guidelines lists thirteen specified dark patterns, expanded from ten in the draft after comments flagged gaps the draft had missed.

Among the named practices are false urgency, where a platform invents or exaggerates scarcity or demand, for instance showing a false countdown or an invented number of other people viewing the same hotel room, to push an immediate purchase; basket sneaking, where an item, donation or add-on service is slipped into the cart at checkout without the buyer's clear consent; confirm shaming, where the option to decline is worded to provoke fear, guilt or ridicule rather than presented neutrally; and forced action, where a user is made to do something unrelated to their original purpose, such as creating an account or sharing data, in order to complete a transaction they had already begun. The list also covers subscription traps that make cancellation needlessly complex or buried, drip pricing where the final price is revealed only in late stages of checkout, disguised advertisements presented as organic content or search results, interface interference that visually nudges a user toward one option by making the alternative hard to see or select, bait and switch tactics, trick questions designed to produce an answer the user did not intend, nagging through repeated interruptions, rogue malware bundled with a download, and SaaS billing patterns that make it disproportionately difficult to downgrade or cancel a recurring payment compared with how easy it was to sign up.

Importantly, the guidelines are explicit that they do not themselves create a new cause of action separate from the Act; a practice falling within Annexure I is treated as an unfair trade practice under Section 2(47) or a misleading advertisement under Section 2(28), and enforcement proceeds through the ordinary Section 21 and Section 89 route. Whether a particular design choice crosses the line still depends on the facts of each case, and the guidelines say as much, so a business cannot treat the list as a safe-harbour checklist to work around; the test remains the overall effect on an ordinary user, not whether a specific label from Annexure I technically applies.

The 2026 amendment: what changes from 1 January 2027

The Department of Consumer Affairs notified the Consumer Protection (E-Commerce) (Amendment) Rules, 2026 on 9 September 2026, amending the 2020 Rules, with the changes taking effect from 1 January 2027. The amendment is the most significant revision to the e-commerce rules since they were first notified in July 2020, and it converts several points that had previously sat only in guidance or enforcement practice into binding rule obligations.

On dark patterns, every covered platform must now conduct an annual self-audit of its own interface against the thirteen specified practices in the 2023 guidelines and is expected to make the outcome of that audit visible, rather than treating compliance as a matter addressed only reactively after a CCPA notice. This closes a gap that commentators had flagged since the guidelines were first issued: the guidelines themselves, unlike the draft that preceded them, did not spell out a standalone consequence for non-compliance, leaving enforcement to rely entirely on the general unfair trade practice and misleading advertisement provisions.

For pricing, the amendment introduces a defined reference point for discount claims. Where a platform advertises a price reduction, it must display the reduced price alongside a 'prior price', defined as the lowest price at which the same product was offered on that platform in the preceding thirty days. This targets a familiar practice of inflating a notional 'original price' immediately before a sale event to make the discount look larger than it is.

A third change touches discoverability: platforms must not manipulate search results or category rankings in a way that misleads buyers about why one listing appears above another, and must publish, in plain language, the main parameters that drive their ranking. Sponsored or paid listings must carry a clear label distinguishing them from organic results. Separately, the amendment requires platforms to integrate their own grievance handling with the National Consumer Helpline's convergence process, so that a complaint lodged with the Helpline reaches the platform's own redressal system rather than sitting in a parallel channel. Secondary commentary describes these obligations in broadly consistent terms, though the precise operative wording of each clause should be checked against the gazette notification before a compliance programme is finalised, since trade commentary on a rule this recent can get granular details slightly wrong even while agreeing on the overall shape of the change.

What the CCPA has actually been enforcing

Reading the CCPA's order book through 2026 gives a clearer sense of where the regulator's attention has gone than the statute alone does. Dark pattern enforcement has reached beyond classic e-commerce: PhysicsWallah, an edtech platform, was fined five lakh rupees on 1 June 2026 over dark patterns on its website and app, with McAfee India fined one lakh rupees in the same action; SpiceJet was fined one lakh rupees on 14 July 2026 over its online booking interface; and Namma Yatri, a ride-hailing app, received directions on 1 September 2026 over an allegedly misleading tipping mechanism. None of these businesses would ordinarily be thought of primarily as e-commerce marketplaces, which is the point: the guidelines apply by reference to the interface and the practice, not to a narrow category of regulated entity.

A second cluster of orders targets listings of restricted, hazardous or non-compliant goods, where the CCPA has been willing to penalise the platform rather than only the third-party seller. Flipkart was fined ten lakh rupees over a listing of an unregistered agro-chemical marketed as a herbicide, and separately five lakh rupees over toys that did not meet Bureau of Indian Standards requirements under the Toys (Quality Control) Order, 2020. Weblink Private Limited was fined ten lakh rupees on two separate occasions in September 2026 over listings facilitating the sale of hazardous explosive substances, including picric acid, and Dial4Trade Technologies was fined ten lakh rupees over a listing that facilitated the sale of ammonium nitrate. In February 2026 the CCPA issued notices to six e-commerce platforms, including one eventually resulting in a ten lakh rupee penalty against Xboom, over listings of anti-drone jammer devices whose sale is restricted under telecom law; in that order the CCPA took the position that a product listing is itself an advertisement even where it carries no separate 'buy now' mechanism, rejecting the platform's argument that a listing without an active purchase button fell outside its advertising obligations.

Amazon was fined one lakh rupees over a listing of sweets marketed as temple prasad from Ayodhya's Ram Mandir without the temple trust's authorisation, an order in which the CCPA again rejected the argument that intermediary status under the Information Technology Act shields a marketplace from consumer protection obligations, and held that those obligations cannot be reassigned to third-party sellers purely by a contractual term in the platform's seller agreement. Taken together, the pattern across these orders is consistent: size of penalty tracks the gravity of consumer harm (public safety risks from hazardous goods draw the largest fines), and the CCPA has shown no reluctance to proceed against the platform directly rather than treating a marketplace as merely a conduit for sellers.

Platform liability: intermediary status, fall-back liability and privity

A recurring defence raised by marketplaces, both before the CCPA and in individual consumer disputes, is that they are intermediaries under Section 2(1)(w) of the Information Technology Act, 2000, and therefore entitled to safe harbour from liability for content or listings posted by third-party sellers, subject to compliance with the IT Rules' due diligence requirements. That safe harbour speaks to liability for third-party content as such; it has not, on the CCPA's reading in the orders discussed above, been treated as a shield against the platform's own statutory duties as an e-commerce entity under the Consumer Protection Act and the E-Commerce Rules, 2020, duties that attach to the platform by virtue of running the marketplace, independent of what any individual seller did.

Those duties are set out principally in Rule 4 of the 2020 Rules, which requires every e-commerce entity to display its legal name and contact details, appoint a grievance officer whose name and contact details are published, acknowledge a complaint within forty-eight hours and resolve it within one month, and designate a nodal contact person resident in India for coordination with law enforcement and regulators. The Rules also introduced the concept of fall-back liability: where a seller registered with a marketplace entity fails to deliver goods or services ordered by a consumer because of the seller's negligence or a wrongful act or omission, and that failure causes loss, the marketplace itself can be held liable to the consumer. Industry bodies have pushed back on this concept as inconsistent with the general principle that a party should not be punished for another's wrong, and have asked that fall-back liability be confined to a duty to ensure a timely refund rather than open-ended compensation; whether that narrower reading will be adopted remains to be settled through future rule-making or litigation.

At the level of individual disputes, the Punjab State Consumer Disputes Redressal Commission's 2022 decision in Flipkart Internet Pvt Ltd v Arish Juneja illustrates how a forum can reach a marketplace even without relying on fall-back liability as such. The Commission rejected Flipkart's argument that it functioned purely as an intermediary with no direct contractual relationship with the buyer, holding instead that by processing payment and controlling the transaction flow, the platform created a form of privity with the consumer sufficient to found liability, and upheld the lower forum's order against the platform. Businesses structuring marketplace agreements with sellers should treat this as a live risk rather than a settled dead end for consumers: the more control a platform exercises over payment, logistics and the buyer-facing transaction, the weaker any argument that it is a neutral conduit becomes.

Product liability: a route distinct from deficiency in service

Chapter VI of the Act, Sections 82 to 87, created a standalone product liability action with no direct counterpart in the 1986 Act's scheme, which had treated defective goods mainly through the lens of deficiency in service or unfair trade practice claims against the immediate seller. Section 83 allows a complainant to bring a product liability action against a product manufacturer, a product service provider, or a product seller, for harm caused on account of a defective product, and the action can be brought before the District, State or National Commission according to the usual pecuniary jurisdiction rules, rather than requiring a separate civil suit.

Section 84 sets out the grounds on which a manufacturer is liable: a manufacturing defect; a design defect; deviation from manufacturing specifications; the product not conforming to an express warranty; and, a ground with no equivalent in the 1986 regime, inadequate instructions or warnings about correct usage or about dangers involved in use that were not obvious to an ordinary consumer. One point commentators flag as significant is that liability for breach of an express warranty under Section 84 does not depend on proving the manufacturer was negligent or acted fraudulently in making the warranty; the warranty's breach alone is enough. Section 85 makes a product service provider liable where the service was faulty, imperfect, deficient or inadequate in quality, or where an act, omission, commission or negligence by the service provider, including withholding or misrepresenting information about the risks or correct usage of the service, caused the harm. Section 86 reaches the product seller specifically where the seller exercised substantial control over the design, testing, manufacture, packaging or labelling of the product and that control was a substantial factor in the harm, where the seller altered or modified the product in a way that substantially caused the harm, where the seller made an express warranty independent of the manufacturer's warranty, or where the seller failed to exercise reasonable care in assembling, inspecting or maintaining the product, or disregarded the manufacturer's own warnings or instructions, and that failure proximately caused the harm.

The exceptions follow in Section 87. Under Section 87(1), no product liability action can be brought against a product seller where, at the time of the harm, the product had been misused, altered or modified by someone other than the seller, breaking the chain between what the seller supplied and what caused the injury. Section 87(2) gives manufacturers specific defences against claims based on an alleged failure to warn: among the grounds commonly cited in secondary commentary, a manufacturer is protected where the product was bought by an employer for use at the employer's workplace and the manufacturer had already warned that employer, and where the product was sold as a component to be integrated into another product and the manufacturer gave the buyer adequate warnings, with the resulting harm attributable to the finished product rather than the component itself. The precise boundaries of these defences, including whether an obviousness-of-danger defence exists in the text as some commentary suggests, are best confirmed against the Act's current text before being relied on in a specific matter, since the secondary sources available do not uniformly reproduce the full subsection.

Where consumer fora meet arbitration clauses

Consumer contracts, particularly in real estate, banking, insurance and high-value e-commerce, routinely carry arbitration clauses, and sellers have repeatedly argued that such a clause should require a consumer's grievance to be routed to arbitration rather than a consumer forum. That argument has lost consistently at the Supreme Court. In Fair Air Engineers Pvt Ltd v N.K. Modi, the Court held that the remedy under consumer protection law is additional to, not a substitute for, other remedies, and an arbitration clause does not by itself oust a consumer forum's jurisdiction. In Emaar MGF Land Ltd v Aftab Singh, decided in February 2018, the Court dismissed a developer's appeal and upheld the National Commission's position that an arbitration clause does not curtail consumer forum jurisdiction even after the 2015 amendment to Section 8 of the Arbitration and Conciliation Act, 1996 strengthened the general mandate to refer disputes to arbitration where a valid arbitration agreement exists.

The Court revisited the point in June 2026 in T.K.A. Padmanabhan v Abhiyan Cooperative Group Housing Society Ltd, where it held that once a complaint has been entertained by a consumer forum, the proviso to Section 12(4) of the 1986 Act (carried forward in substance into the 2019 Act's equivalent provisions) does not permit that complaint to be transferred to arbitration or to any other forum at that stage, setting aside the orders below and restoring the complaint for adjudication on its merits before the District Commission. Read together, these rulings leave very little room for a seller to resist a consumer forum complaint on the strength of an arbitration clause alone; the clause may still govern a dispute between commercial counterparties, but it does not reach a consumer who has chosen the statutory forum.

A practical consequence follows for drafting. An arbitration clause in a standard-form consumer contract is not worthless, since it remains available and enforceable as between the business and any non-consumer counterparty, and some businesses still include one to manage B2B channel disputes on the same paper. But treating it as a device to keep genuine retail consumers out of consumer fora has not worked and current authority gives no reason to expect it will start working.

Where consumer fora meet RERA, banking and insurance

Real estate buyers face a similar overlap question, resolved differently. In Imperia Structures Ltd v Anil Patni, the Supreme Court held that Section 79 of the Real Estate (Regulation and Development) Act, 2016, which bars civil courts from entertaining matters that RERA or its tribunal can decide, bars civil courts only, not the quasi-judicial consumer fora, which operate under a separate statute altogether. The Court read the scheme as leaving the choice to the allottee: a homebuyer aggrieved by delayed possession, defective construction or a builder's refusal to execute a conveyance deed can proceed either before the Real Estate Regulatory Authority or before a consumer commission, and the existence of one route does not foreclose the other. Commentators have flagged the practical risk this creates, namely parallel proceedings over the same facts before two different bodies, but the Court's answer stands and has not been displaced.

Banking and insurance generate a comparable pattern, though without a dedicated statute like RERA creating the overlap question in the first instance. A customer with a grievance against a bank, whether over wrongful dishonour of a cheque, a disputed digital payment fraud liability allocation, locker theft, or a wrongful classification of an account, has access to both the regulator's grievance mechanism (the RBI's integrated ombudsman scheme) and a consumer complaint for deficiency in service, and nothing in the Banking Regulation Act or the RBI's own schemes excludes consumer forum jurisdiction. The same is true of insurance, where a policyholder can pursue the Insurance Ombudsman under the 2017 Rules or file directly before a consumer commission for repudiation of a claim, and recent rulings continue to test the boundary of what counts as a deficiency in service in this space: the Supreme Court has held that a consumer forum cannot simply override a detailed insurance surveyor's report without identifying a specific flaw in it, while also holding, in a separate matter, that a bank's unexplained delay in presenting a cheque for collection can itself amount to deficiency in service.

For businesses operating across these sectors, the practical lesson is the same one that runs through the whole of this piece: a sectoral regulator's processes, whether RBI, IRDAI or RERA, do not substitute for compliance with consumer protection law, and a business that treats its sectoral regulator as the only audience it needs to satisfy is likely to be surprised by a consumer complaint running on a wholly separate track, often with a faster timeline and a more consumer-favourable standard of proof than the sectoral process would apply.

Procedure, limitation and the traps that keep recurring

A consumer complaint must ordinarily be filed within two years from the date the cause of action arose, though the forum has discretion to admit a delayed complaint on sufficient cause being shown, and the point at which the cause of action arises for a latent defect is usually taken to run from when the defect was discovered or reasonably discoverable, not from the date of purchase. Pecuniary jurisdiction determines which tier hears a complaint in the first instance, and businesses defending repeat claims should track the current thresholds carefully, since they have moved since the 2019 Act came into force and a complaint filed at the wrong tier can face a jurisdictional objection that delays the substantive hearing.

Once a complaint is admitted, the respondent's timeline to file a written version is strict rather than indicative. The National Commission held, in a 2026 ruling in HDFC Bank's favour, that the forty-five day period to file a written statement under the Act (thirty days extendable by a further fifteen) is a firm, absolute ceiling that a forum cannot shorten through its own stricter view of promptness, setting aside a State Commission order that had struck off the bank's written statement even though it had been filed within that window, and reinforcing a line of Supreme Court authority on the same point reaching back to 2020. Respondents who miss this window risk the complaint proceeding to final hearing on the complainant's version alone, which makes early docketing of consumer complaints, and prompt instruction of counsel once a notice is received, a genuine operational priority rather than a formality.

A second recurring trap concerns who can be sued at all. The Andhra Pradesh High Court held in 2026 that advocates cannot be sued for deficiency in service under the Consumer Protection Act for the manner in which they conduct litigation, following the earlier Bar of Indian Lawyers line of Supreme Court authority that treats the practice of law as outside the Act's definition of 'service' for this purpose; the same logic has at various points been argued, with mixed success, for other professions exercising independent skill and judgment. A third trap, more practical than legal, is documentary: whether the claim concerns a defective product, a denied insurance claim or a builder's delay, forums consistently penalise parties, on either side, who cannot produce the underlying paperwork (purchase invoices, the policy document and proposal form, the builder-buyer agreement) at the first hearing, and adjournments sought to produce documents that should have been filed with the complaint or the written version are treated unsympathetically by most commissions.

A compliance and complaint checklist in prose

A platform or seller reviewing its own exposure under this regime should work through several questions in sequence rather than treating compliance as a single checklist item. First, does any part of the checkout, pricing or subscription flow resemble one of the thirteen specified dark patterns, assessed not by label but by the overall impression a typical user would form; second, can every discount or 'original price' claim be substantiated against an actual prior selling price over the preceding thirty days, given the definition the 2026 amendment will apply from January 2027; third, are sponsored or paid placements visibly distinguished from organic results, and is there a plain-language explanation of ranking criteria available to a user who looks for one; fourth, is the grievance officer's identity and contact information current and genuinely staffed to meet the forty-eight hour acknowledgment and one month resolution timelines, since a grievance mechanism that exists on paper but does not function in practice invites both individual complaints and CCPA scrutiny; and fifth, where the business relies on third-party sellers, does its seller agreement allocate the risk of fall-back liability clearly, while recognising that such an allocation binds the seller and the platform between themselves but does not necessarily bind a consumer who was never a party to it.

Someone on the receiving end of a defective product, a misleading claim or a platform's failure to act should likewise work through a sequence: gather the invoice, the advertisement or listing as it appeared (screenshots with visible dates matter, since listings change), and any written exchange with the seller's grievance officer; decide, where the claim concerns inherent harm from a defect rather than ordinary deficiency in service, whether a product liability action under Chapter VI adds anything beyond a conventional complaint, since the two routes can be pleaded together before the same forum; check the pecuniary jurisdiction and limitation position before filing rather than after a return of the complaint; and, where the matter also touches RERA, a sectoral ombudsman or an arbitration clause, make a considered choice of forum rather than filing in two places by default, since parallel proceedings, while not barred outright on the authorities discussed above, invite satellite litigation over which proceeding should yield to the other and rarely help the complainant reach a faster result.

What remains unsettled

Several points in this area are genuinely open rather than merely under-litigated. The precise reach of fall-back liability under Rule 4, specifically whether it extends to general compensation for a seller's failure or is more properly confined to ensuring a timely refund, has been argued by industry but not yet tested to a final answer in reported litigation at the level of the Supreme Court or National Commission; businesses should treat the wider reading as the safer compliance assumption until a court narrows it. The exact text of the manufacturer's failure-to-warn defences under Section 87(2), including whether an 'obvious danger' defence exists in the enacted provision as some secondary commentary suggests, could not be confirmed with certainty from the sources used for this piece, and anyone relying on that specific defence in an active matter should verify the current statutory text directly rather than from commentary.

How the 2026 amendment rules will be enforced once they take effect on 1 January 2027 is also an open question in practice rather than in drafting: a self-audit obligation of the kind the amendment introduces for dark patterns depends heavily on how rigorously the CCPA checks the audits platforms actually produce, and the gazette notification's operative text on the finer mechanics of the 'prior price' and ranking-disclosure obligations deserves a direct read against the primary notification rather than reliance on the secondary summaries this piece has drawn on, since early trade commentary on a rule this recent has a track record of smoothing over details that later turn out to matter. Finally, whether the apparent rise in CCPA penalties against platforms for third-party listings, rather than only against the listing sellers, will extend to civil liability for individual consumers harmed by the same listings, as opposed to remaining confined to the CCPA's own regulatory penalty, is a question current authority does not yet answer with any certainty.

The practical shape of consumer protection law in India has moved well past the single idea most people still associate with it, a forum where an individual can complain about a bad purchase. It now runs a dedicated regulator with recall and penalty powers, a named list of prohibited interface practices, an incoming set of pricing and ranking disclosure obligations, and a body of case law that keeps closing off the exits sellers have tried to use, whether an arbitration clause, an intermediary defence, or a RERA proceeding running in parallel.

For a business operating any kind of consumer-facing platform or supply chain, the discipline this calls for is less about any single rule and more about treating consumer protection compliance as a standing function rather than a response to the next notice. For a consumer or a smaller business facing a defective product, a misleading claim or an unresponsive platform, the range of routes now available, individual complaint, CCPA reference, product liability action, RERA, or a sectoral ombudsman, is wider than it was even five years ago, and choosing between them carefully, rather than defaulting to the first one that comes to mind, is usually what decides how quickly and how fully the grievance gets resolved.

Frequently Asked Questions

References & Further Reading

The provisions, rulings and official documents below were relied on for this article, which states the law as on 22 October 2026. The position can change with amendments, rules and later decisions, so check the current text before acting on any of it.

1. Consumer Protection Act, 2019, Sections 2(28), 2(47), 18, 19, 20, 21, 22, 82-87, 89
2. Consumer Protection (E-Commerce) Rules, 2020, Rule 4 (duties of e-commerce entities, fall-back liability)
3. Consumer Protection (E-Commerce) (Amendment) Rules, 2026, notified 9 September 2026, effective 1 January 2027
4. Guidelines for Prevention and Regulation of Dark Patterns, 2023, Annexure I (thirteen specified dark patterns), notified 30 November 2023
5. T.K.A. Padmanabhan v Abhiyan Cooperative Group Housing Society Ltd, Civil Appeal No. 10724 of 2016, decided 4 June 2026 (Supreme Court)
6. Emaar MGF Land Ltd v Aftab Singh, decided 13 February 2018 (Supreme Court)
7. Fair Air Engineers Pvt Ltd v N.K. Modi (Supreme Court)
8. Imperia Structures Ltd v Anil Patni and Another, (2020) 12 SCR 373 (Supreme Court)
9. Flipkart Internet Pvt Ltd v Arish Juneja, State Consumer Disputes Redressal Commission, Punjab, decided 22 February 2022
10. HDFC Bank v Thomas Alexander (and connected matters), National Consumer Disputes Redressal Commission, 2026, on the 45-day written statement timeline
11. Andhra Pradesh High Court, 2026, on advocates and Section 2(42) 'service' under the Consumer Protection Act
12. Central Consumer Protection Authority order against PhysicsWallah and McAfee India, 1 June 2026 (dark patterns)
13. Central Consumer Protection Authority order against SpiceJet, 14 July 2026 (dark patterns in booking interface)
14. Central Consumer Protection Authority directions against Namma Yatri, 1 September 2026 (tipping mechanism)
15. Central Consumer Protection Authority order against Flipkart (unregistered herbicide listing, CCPA/2/2026-A) and against Flipkart (non-BIS toys, CCPA-2/11/2023-CCPA Part-4)
16. Central Consumer Protection Authority orders against Weblink Private Limited, September 2026 (picric acid and explosive substance listings)
17. Central Consumer Protection Authority order against Dial4Trade Technologies, 1 September 2026 (ammonium nitrate listing, CCPA-11/6/2026-CCPA)
18. Central Consumer Protection Authority order against Xboom and notices to e-commerce platforms, February 2026 (anti-drone jammer listings)
19. Central Consumer Protection Authority order against Amazon (Ram Mandir prasad listing)
20. Toys (Quality Control) Order, 2020
21. Information Technology Act, 2000, Section 2(1)(w) and intermediary due diligence rules under the IT Rules, 2021
22. Real Estate (Regulation and Development) Act, 2016, Section 79
23. RBI Integrated Ombudsman Scheme and Insurance Ombudsman Rules, 2017 (sectoral grievance mechanisms referenced for the banking and insurance overlap)

Related reading on this site

• Consumer complaint jurisdiction limitation guide
• Ecommerce consumer protection rules 2020 guide
• Ecommerce return refund policy compliance guide
• Dark patterns consumer protection ecommerce compliance guide
• Dark pattern basket sneaking remediation liability guide
• Celebrity endorser liability misleading advertisement ccpa
• Misleading advertisement ccpa penalties guide
• Product liability consumer protection act guide
• Deficiency service vs unfair trade practice distinction
• Ccpa product recall section 20 guide
• Occupancy certificate homebuyer consumer rights guide
• Possession undertaking consumer claim survives guide
• Consumer protection ecommerce amendment rules 2026 dark patterns
• Ccpa flipkart amazon jiomart cyclosinone unregistered herbicide penalty
• Ccpa xboom anti drone jammer listings misleading advertisement
• Supreme court arbitration clause does not oust consumer fora
• Delhi consumer commission indigo liable denying boarding flight reschedule
• Hdfc bank thomas alexander ncdrc written statement 45 days
• New india assurance hemkund duplex fire insurance surveyor report supreme court
• Andhra pradesh hc advocates not liable consumer protection
• Up scdrc members pay article 142 hc judges consumer commission