Rules
Dark Patterns vs Persuasion: Where US Regulators Draw the Line
Dark patterns vs persuasion in US law: the FTC, state privacy rules and what a compliant disclosure must contain before a charge, plus penalties and refunds.
What to take away
- The FTC treats dark patterns as unfair or deceptive acts under Section 5 of the FTC Act, and state attorneys general can bring their own claims on the same conduct.
- A compliant disclosure names the material terms before payment, in readable type, and apart from unrelated agreements.
- Federal negative option rules require a cancellation path at least as simple as the path that enrolled the customer.
- California and several other states add consent, notice and retention duties on top of federal law.
- A finding of non-compliance usually ends in a consent order, refunds and civil penalties, not a warning letter.
Who has jurisdiction
The Federal Trade Commission is the primary federal enforcer for deceptive interface design. Its authority rests on Section 45 of the United States Code, which bars unfair or deceptive acts or practices in or affecting commerce. That single sentence reaches checkout flows, trial offers and cancellation screens.
State attorneys general enforce their own consumer protection statutes and often act sooner than the FTC does. California adds a second layer through the CCPA and its amendments, which the California Privacy Protection Agency enforces. Colorado, Connecticut, Virginia and Texas have privacy laws of their own, each with its own consent standard.
What a compliant disclosure contains
A lawful disclosure puts the material term in front of the buyer before money moves. It uses ordinary words, sits in a readable size, and is not detached from the consent it describes. A pre-checked box or a fee revealed at the final step is what regulators call a dark pattern: an interface that pushes people into an action they did not intend.
| Element | What it must contain | Where it belongs |
|---|---|---|
| Terms | The amount of each charge, how often it recurs, and the renewal date | Directly above the payment button |
| Consent | An affirmative step the customer takes, kept apart from other agreements | At the point of sale |
| Cancellation | The method for stopping the charge, using the channel that enrolled them | On the confirmation page and each receipt |
| Contact | A mailing address, phone number or email for questions | In the offer and the receipt |
Consent rules assume a buyer who reads and weighs what a seller states. Informational influence ethics covers what a listener is owed when they rely on a claim.
Records to keep
A business should be able to reconstruct what a customer saw and agreed to. Keep:
- The exact screen copy and layout shown at sign-up
- A timestamped record of the consent action
- Every renewal notice sent before a charge
- Cancellation requests and the date each was honored
- A log of complaints and how each was closed
What happens if you do not comply
The FTC seldom sends a warning first. It files a complaint and settles on a consent order that bans the practice, orders refunds, and requires compliance reporting for years. California's 2022 action against Sephora over opt-out signals ended in a civil penalty, a corrective plan and an order to honor those signals.
The FTC's Negative Option Rule, known as click-to-cancel, set a federal standard for subscriptions before a federal appeals court vacated it in 2025. The agency has said it will keep pursuing the same conduct case by case under Section 5 and the Restore Online Shoppers' Confidence Act.
Sellers learn the same lesson each time: small permissions compound, and disputes begin with a click nobody remembers making. Commitment and consistency sets out what decides whether a yes holds up.
Where the rules differ by place
California requires businesses to honor opt-out preference signals and to limit the use of sensitive personal data. Colorado and Connecticut require consent before sensitive data is processed, and both give residents a right to appeal a denied request. Several state consumer protection statutes allow private lawsuits, a remedy the FTC Act does not create. Timing differs too: some attorneys general publish guidance first, while others file without notice.
Example: a trial offer that failed on three counts
Take an illustrative trial page. It advertises a free month in large type, mentions the renewal only in a footnote, and pre-checks a box for a second product. Three failures appear at once: the material term is buried, the consent is bundled, and the cancellation number is missing from the receipt.
Testimonials add a second risk when they read like editorial content. FTC guidance on native advertising requires that paid placements be identifiable as advertising. A truthful count of subscribers is a fair claim, and social proof ethics examines what a number owes the reader who trusts it.
Common questions
Does a pre-checked box count as consent?
No. Regulators treat a pre-selected option as the business choosing for the customer. Consent has to be an affirmative step the buyer takes, and it cannot be bundled with unrelated terms.
Can a subscription renew without a reminder?
It can, when the terms were disclosed clearly at sign-up and the cancellation path is simple. Renewal notices help, but they do not repair a disclosure that was buried at the start.
Is persuasion itself a problem?
No. Persuasion that informs a buyer and design that deceives a buyer are treated differently. The FTC targets hidden terms, false urgency and forced consent, not persuasive writing.
Does guidance from a state attorney general carry the weight of law?
Not on its own. The statute binds, and guidance signals where an office intends to look. Authority compared with expertise separates that formal power from a reputation for toughness.
