India's New E-Commerce Rules Land Sept 10: The D2C Compliance Checklist Before January

What changed on September 10

On September 10, the Department of Consumer Affairs notified the Consumer Protection (E-Commerce) (Amendment) Rules, 2026. The timing is not an accident: it lands right as Indian D2C brands pour budget into the festive quarter, and the compliance clock runs out on January 1, 2027. So you get the busiest selling season of the year to fix your store before enforcement starts.

Most coverage framed this as a crackdown on the big marketplaces. Part of it is. But several clauses apply to any e-commerce entity, and that includes your Shopify store, your checkout, and how you handle customer data. If you skim the headlines and assume it's Amazon's problem, you'll walk into January with a store that's quietly non-compliant.

The amendment is confirmed and mandatory. The core additions are worth reading slowly, because each one maps to a specific thing on your site. An annual dark-pattern self-audit is now required, checking your store against the Guidelines for Prevention and Regulation of Dark Patterns, 2023. Discounts must display both the current price and the prior price, where "prior" means the lowest price in the preceding 30 days. Sellers must disclose their details, and for imported goods, the importer and country of origin. Product listings need clear return policy, warranty, delivery, and payment terms. Consumer data cannot be used without express and affirmative consent. Bundled fees for unrelated services are restricted, with an exception for loyalty and membership programs. And platforms must join the National Consumer Helpline convergence process and hand complainants a copy of their recorded complaint.

Which rules actually hit your store

Separate the noise from your to-do list. A few clauses, like the ban on manipulating search results, are aimed at marketplaces. The ones that matter most to a direct-to-consumer brand hit your own store directly. Here's the split.

Marketplace-focused (matters if you sell on Amazon, Flipkart, quick commerce)

Search-result manipulation and sponsored-listing labels are platform obligations. You don't build those systems, but as a seller you'll feel the downstream effects: cleaner labelling of paid placements, and stricter checks on the claims in your listings. If a chunk of your revenue rides on marketplaces, expect the platforms to push new listing requirements onto you to stay compliant themselves.

Your-store obligations (matters on your own site)

Dark patterns, price transparency, express consent, seller and product disclosure, and bundled-fee limits all apply to you the moment you sell directly. These are the ones to audit now, because no platform is going to fix them for you. The awkward part for D2C founders is that a lot of these were sold to you as "best practice CRO" a few years ago. The urgency timer, the pre-ticked upsell, the strategic MRP: growth teams installed these on purpose to lift conversion. The rules don't care that they worked. What lifted your conversion rate in 2024 is, in several cases, the exact behaviour the 2026 amendment now names and restricts. So treat this less as a legal chore and more as unwinding a set of habits your own store picked up on the way up.

The dark-pattern audit: what to check first

This is the clause most D2C stores will fail, because half of the standard "conversion tricks" from the last few years are now on the wrong side of the line.

Fake urgency and scarcity

The countdown timer that resets when you reload. The "Only 2 left!" badge that's been there for a month. If the urgency isn't real, it's a dark pattern. Either make it genuine, tied to actual stock or a real deadline, or remove it. Real urgency during a festive drop is fine. Manufactured urgency is exactly what the rule targets, and it's the easiest thing for a consumer to screenshot and report.

Drip pricing

If shipping, handling, or COD fees only appear on the final checkout step, that's drip pricing. The price a customer sees early should be close to what they pay. Surface fees up front. It also happens to reduce the checkout abandonment that dripped fees cause, so this one pays for itself even before you count the compliance benefit.

Pre-ticked boxes and sneaky add-ons

A pre-ticked insurance add-on, a "subscribe and save" that's checked by default, a donation quietly added: all pre-selected consent, all now a problem. Every add-on should start unchecked and be a deliberate choice the customer makes, not one they have to notice and undo.

Cancellation and unsubscribe friction

If subscribing takes one tap and cancelling takes six screens and a phone call, that asymmetry is a recognised dark pattern. Make leaving as easy as joining. The same applies to your WhatsApp and email lists: opting out should be one clear step.

Price display and the 30-day rule

The prior-price rule has teeth because it defines "prior price" for you: the lowest price in the preceding 30 days. So the classic move, inflate an MRP and show a fat fake discount, stops working. If you sold at ₹1,499 last week, you can't advertise "₹2,999, now ₹1,799" as a discount, because ₹1,499 was your real recent low.

Practically, this means your discount labels need to reference actual price history, not aspirational MRPs. If your store or app shows struck-through prices, confirm the higher number is defensible against your own last 30 days. Festive pricing is where brands get sloppy here, running "biggest sale ever" banners on prices they were already close to last month, and it's exactly the window enforcement will watch. Build your festive discounts off a real baseline and you avoid the problem entirely.

Consent and bundled fees

Two quieter clauses, both easy to get wrong.

Express and affirmative consent means the customer actively agrees before you use their data, including for marketing. The pre-ticked "send me offers on WhatsApp" box has to go. Make it an unchecked, clearly worded opt-in. This also strengthens your CRM list quality, because contacts who actively chose you engage far better than ones who were opted in by default and never wanted the messages.

Bundled fees for unrelated services are restricted, with loyalty and membership programs carved out as the exception. If your checkout auto-adds a fee for something the customer didn't ask for, unbundle it. A membership that a customer opts into is fine. A mandatory charge stapled to an unrelated service is not, and "everyone does it" won't be a defence once the rules are in force.

Your before-January checklist

You have the festive quarter to get clean. Work it in this order.

Run the dark-pattern audit across your product pages and full checkout flow, and document it, since the audit itself is now an annual requirement. Fix pricing labels so every discount references a real 30-day low. Convert every pre-ticked consent and add-on into an active opt-in. Add a standard disclosure block, covering returns, warranty, delivery, and payment terms, to your product template so it appears on every listing without manual effort. Unbundle any forced fees. And keep a written record of what you changed and when, so you can show diligence if a complaint or query ever lands.

If your store is deep in the festive push and you'd rather not pull a developer off revenue work to comb through checkout compliance, that's the kind of thing our growth marketing team handles alongside the campaigns, so the store you're scaling traffic to is one that won't get flagged in January.

The bottom line

The Consumer Protection (E-Commerce) Amendment Rules, 2026 aren't just a marketplace story. Mark Jan 1, 2027 as your deadline and treat the festive quarter as your fix window. The easy mistake here is assuming the rules are someone else's problem when several of them sit right on your own checkout. A weekend of cleanup now is a lot cheaper than a compliance scramble, or a notice, later.