California approves new regulations under CCPA to prohibit the use of “dark patterns”, tricks deployed by websites and apps to frustrate or mislead users
New regulations were approved under California's Consumer Privacy Act on Monday that will prohibit the use of so-called dark patterns …
Context & Ripple Effects
This closes a loop that opened when the CCPA was signed into law in 2018 and went into force amid widespread confusion over its rushed timeline. Enforcement began in July 2020 despite industry pleas for a pandemic-related delay (California refused and enforced anyway), and Proposition 24's passage last November added a dedicated Privacy Protection Agency on top of the Attorney General's authority.
The new dark-pattern regulations are the first sign of that machinery regulating conduct rather than just data: they make the design of consent and opt-out flows itself a compliance surface. That matters because the AG's later enforcement examples already showed companies can't lean on trade groups' blanket opt-out tools not tailored to CCPA mechanics.
First-order effects
- Websites and apps subject to CCPA must now audit and redesign any consent flow, unsubscribe path, or settings screen engineered to confuse or exhaust users, since such designs can invalidate a user's legally required choice.
Second-order effects
- Consent-management vendors and privacy consultancies gain a mandated market: every affected site needs flows built to the state's specification rather than conversion-optimized defaults, and Prop 24's Privacy Protection Agency gives companies a second enforcer to answer to once it stands up.
Third-order effects
- If California's pattern holds, interface design stops being an unregulated marketing discipline and becomes a governed one — with the state's rules functioning as a de facto national standard because most consumer web services don't geofence their UX.
The trend: US privacy regulation is shifting from broad statutory rights toward granular, enforcement-backed control over how interfaces present choices, with California's expanding regulatory apparatus setting the template.