← CCPA/CPRA · Business obligations

Regs 7004 — Symmetric choices and no dark patterns

medium consent

Requirement

Methods for submitting requests and obtaining consent use easy-to-understand language, offer symmetry in choice (declining is no harder than accepting), avoid confusing language, interactive elements or manipulative design, and require minimal steps; agreement obtained through dark patterns is not consent.

What the engine looks for

Every group below must be satisfied — by an affirmative statement, not a plan, a hedge or a denial — for the control to count as covered. A term ending in … matches any word it begins. Supporting terms do not change the verdict — they raise confidence and distinguish a policy that names a mechanism from one that gestures at a category.

Required element 1 — any one of
dark patterndark patternssymmetrysymmetricequal prominencemanipulative designmanipulative
Required element 2 — any one of
consentchoicechoicescookie banneropt-outrequestsdeclin…accept
Supporting terms — specificity signals
regs 7004same number of stepsreject allplain language
Contradiction markers

Finding any of these outranks coverage — a policy that admits the gap is worse than silence.

pre-ticked pre-checked boxes

Equivalent controls elsewhere

Matched on shared topics. Satisfying this control usually moves these too.

FrameworkControlTitleShared topics
GDPR Art.7 Conditions for consent consent
NDPA 2023 s.26 Conditions for valid consent consent
GDPR Art.6 Lawful basis for processing consent
GDPR Art.21 Right to object, including to direct marketing consent
COPPA 312.5 Verifiable parental consent before collection consent
NDPA 2023 s.25 Lawful basis for processing consent
GDPR Art.8 Conditions for a child's consent to online services consent
GLBA Reg P 1016.7-1016.10 Opt-out of sharing with nonaffiliated third parties consent