For the first time in Indian law, the Consumer Protection Act, 2019 drags the digital marketplace squarely within the consumer-protection net. Where the 1986 Act spoke only of goods bought and services hired in the physical world, the 2019 Act expressly captures the consumer who buys “through offline or online transactions through electronic means or by teleshopping or direct selling or multi-level marketing.” Section 94 then arms the Central Government with rule-making power to prevent unfair trade practices in e-commerce, and the Consumer Protection (E-Commerce) Rules, 2020 translate that mandate into a detailed compliance code for platforms such as Amazon, Flipkart and their sellers. This article maps the definitions, the Rules, the doctrine of fall-back liability, the regulation of dark patterns, and the leading case law that has shaped intermediary liability in India’s online economy.

Why E-Commerce Needed Its Own Regime

The explosive growth of online retail created problems the 1986 Act was never designed to answer. A consumer in one State buys from a seller registered in another, fulfilled from a warehouse in a third, on a platform incorporated abroad. Counterfeits, non-delivery, opaque return policies, manipulated pricing and fake reviews proliferated in a space where it was often unclear who the consumer was even contracting with. The 2019 Act responds on three levels. First, it widens the definition of “consumer” in Section 2(7) by an explanatory clause that expressly brings online and electronic transactions within the term “buys any goods” and “hires or avails any services.” Second, it introduces dedicated definitions of e-commerce and electronic service providers. Third, it empowers the Central Government, through Section 94, to frame measures to prevent unfair trade practices in e-commerce and direct selling. The combined effect is that an aggrieved online buyer is now indisputably a “consumer” who may approach the District, State or National Commission, a point reinforced by the broadened understanding of key definitions under the Act.

Critically, the new framework also reflects a policy shift away from treating platforms as passive bulletin boards. The legislative intent, echoed in commentary on the Act, is that e-commerce sites “cannot escape as aggregators anymore.” Product liability now extends to sellers and, in appropriate cases, to platforms that vouch for goods, marking a decisive break from the safe-harbour mindset borrowed from intermediary law.

Statutory Definitions: E-Commerce and Electronic Service Provider

Two definitions in Section 2 anchor the regime. Section 2(16) defines “e-commerce” as “buying or selling of goods or services including digital products over digital or electronic network.” The inclusion of “digital products” is significant: software, e-books, streaming subscriptions and app-based services fall within the Act. Section 2(17) defines “electronic service provider” as “a person who provides technologies or processes to enable a product seller to engage in advertising or selling goods or services to a consumer and includes any online market place or online auction sites.” This definition is deliberately broad enough to capture marketplaces and auction sites within the product-liability and unfair-trade-practice architecture of the Act.

The more granular vocabulary — “e-commerce entity,” “marketplace e-commerce entity” and “inventory e-commerce entity” — appears not in the parent Act but in the 2020 Rules, discussed below. An “e-commerce entity” means any person who owns, operates or manages a digital or electronic facility or platform for electronic commerce, but expressly excludes a seller offering goods or services for sale on a marketplace e-commerce entity. This careful exclusion preserves the distinction between the platform and the merchant who merely lists on it — a distinction that becomes decisive when courts apportion liability.

Section 94: The Rule-Making Engine

Section 94 is short but foundational. It provides that for the purposes of preventing unfair trade practices in e-commerce, direct selling, and to protect the interests and rights of consumers, the Central Government may take such measures “in the manner as may be prescribed.” The phrase “as may be prescribed” ties Section 94 to the rule-making power in Section 101. It is the umbrella under which the entire E-Commerce Rules edifice stands.

The 2020 Rules were notified in exercise of the powers conferred by sub-clause (zg) of sub-section (1) of Section 101 read with Section 94 of the Act. The pairing matters: Section 94 supplies the substantive object (preventing unfair trade practices in e-commerce), while Section 101(1)(zg) supplies the specific delegated authority. Where a platform contravenes the Rules, the consumer’s remedy lies through the redressal commissions, and systemic violations may attract the attention of the Central Consumer Protection Authority, whose investigative and class-action powers cover unfair trade practices in the online space.

The Consumer Protection (E-Commerce) Rules, 2020: Architecture

The Consumer Protection (E-Commerce) Rules, 2020 were notified on 23 July 2020. Their scope, set out in Rule 2, is strikingly broad. The Rules apply to all goods and services bought or sold over a digital or electronic network including digital products; to all models of e-commerce, including marketplace and inventory models; to all e-commerce retail; and — importantly — to an e-commerce entity that is “not established in India but systematically offers goods or services to consumers in India.” This extra-territorial reach means a foreign platform that targets Indian consumers cannot disclaim Indian consumer law merely by pointing to its place of incorporation.

The Rules carve the e-commerce universe into two species. A marketplace e-commerce entity is one that provides an information-technology platform on a digital or electronic network to facilitate transactions between buyers and sellers. An inventory e-commerce entity is one that owns the inventory of goods or services and sells such goods or services directly to consumers, and includes single-brand retailers. The classification drives the allocation of duties: the marketplace is primarily a facilitator with disclosure and grievance obligations, while the inventory entity, being the actual seller, carries seller-type obligations directly. The Rules then prescribe duties of e-commerce entities generally, liabilities of marketplace entities, duties of sellers on marketplaces, and duties of inventory entities.

Duties of E-Commerce Entities (Rule 4)

Rule 4 imposes baseline obligations on every e-commerce entity. Each must appoint a nodal person of contact or an alternate senior designated functionary resident in India to ensure compliance, and must prominently display its legal name, principal geographic address, name and details of its website, and customer-care contact details. Every e-commerce entity must establish an adequate grievance-redressal mechanism and appoint a grievance officer whose name and contact details are displayed on the platform. The officer must acknowledge a consumer complaint within forty-eight hours and redress it within one month from the date of receipt — a hard timeline that gives the consumer a concrete benchmark for deficiency.

Rule 4 also targets manufactured consent and pricing abuse. An e-commerce entity must not record the consent of a consumer automatically, including through pre-ticked checkboxes; consent must be express and affirmative. It must not impose cancellation charges on a consumer who cancels after confirming a purchase unless similar charges are also borne by the entity when it cancels unilaterally. It must not manipulate the price of goods or services to gain unreasonable profit, nor discriminate between consumers of the same class, nor adopt unfair or arbitrary classification of consumers affecting their rights. Refunds, where due, must be effected within a reasonable period in accordance with Reserve Bank of India guidelines. These obligations operationalise the broader consumer rights recognised by the Act in the specific context of online commerce.

Liabilities of Marketplace Entities (Rule 5)

Rule 5 fixes the marketplace with disclosure and due-diligence obligations. A marketplace e-commerce entity must require sellers, through an undertaking, to ensure that descriptions, images and other content about goods or services are accurate and correspond directly with the appearance, nature, quality, purpose and other general features of the product. It must obtain a prescribed set of details from each seller — the seller’s legal name and principal address, GSTIN where applicable, a customer-care number, and a rating or aggregate feedback mechanism. It must display, in a clear and accessible manner, the total price with a break-up, expiry date of goods where applicable, the country of origin necessary for enabling an informed decision at the pre-purchase stage, and all mandatory notices and information required by applicable law.

A marketplace entity may, where it complies with Section 79 of the Information Technology Act, 2000, claim intermediary safe-harbour. But the Rules make clear that the entity must include in its terms and conditions a description of any differentiated treatment it gives to goods or sellers of the same category, and must provide information on available payment methods, security of those methods, charge-back options and the grievance-redressal mechanism. The cumulative effect is that the marketplace, while not the seller, cannot remain wilfully blind to what is sold through it.

Duties of Sellers and Inventory Entities (Rules 6 and 7)

Rule 6 obliges sellers on a marketplace to have a prior written contract with the marketplace entity, to appoint a grievance officer, and to ensure that advertisements for marketing are consistent with the actual characteristics of the goods or services. A seller must not refuse to take back goods, or withdraw or discontinue services, or refuse refunds, if such goods or services are defective, deficient, spurious, or not of the characteristics or features advertised, or if delivered late (save in force-majeure conditions). The seller must furnish the same suite of disclosures — total price, country of origin, return, refund, exchange, warranty and guarantee details, delivery and shipment particulars, and grievance-officer details.

Rule 7 applies parallel obligations to inventory e-commerce entities, with one notable feature: an inventory entity that explicitly or implicitly vouches for the authenticity of the goods or services sold by it, or guarantees their authenticity, will be held to appropriate liability in any action relating to that authenticity. Because the inventory entity is the actual seller, it bears the full disclosure burden — including country of origin, total price with break-up, and accurate descriptions — directly rather than vicariously. This statutory consequence of “vouching” is a deliberate echo of the judicial reasoning in the counterfeit-goods cases discussed below.

Fall-Back Liability of the Marketplace

One of the most consequential additions to the regime is the concept of fall-back liability. The idea is that where a seller registered on a marketplace platform fails to deliver goods or services owing to its negligent conduct, or any act or omission, causing loss to the consumer, the marketplace e-commerce entity cannot wash its hands of the failure simply because it was “only the platform.” The marketplace becomes the consumer’s fall-back — a backstop liability that survives the seller’s default.

Fall-back liability was a centrepiece of the amendments proposed to the E-Commerce Rules in June 2021. The proposal sought to make a marketplace entity subject to fall-back liability where a seller registered on its platform fails to deliver goods or services due to negligent conduct, or any commission or omission, that causes loss to the consumer. Coupled with proposals to mandate a Chief Compliance Officer, a nodal contact person and a resident grievance officer, to register entities with the DPIIT, and to curb “specific flash sales” and “mis-selling,” the 2021 draft signalled a tightening of platform accountability. While the 2021 amendments remained at the consultation stage and were not fully notified in the form proposed, the doctrine of fall-back liability has become central to academic and judicial thinking about the marketplace’s residual responsibility, and it informs how the redressal commissions assess deficiency against platforms.

Counterfeits and the “Active Intermediary”: Christian Louboutin v Nakul Bajaj

The single most influential judicial contribution to platform liability is Christian Louboutin SAS v Nakul Bajaj, decided by the Delhi High Court on 2 November 2018. The luxury footwear house alleged that the website Darveys.com was selling counterfeit goods bearing its marks. The defendants resisted, claiming the protection of the safe-harbour for intermediaries under Section 79 of the Information Technology Act, 2000. The Court framed the decisive question: was the website a passive conduit, or an active participant in the sale?

Justice Pratibha M. Singh enumerated a list of roughly twenty-six tasks an online entity might perform — from identifying the seller, advertising the products, and using the trademark in meta-tags, to transporting the product, providing authentication or quality assurance, and processing payment. The more of these an entity performs, the more it crosses from conduit to active participant. On the facts, Darveys.com identified sellers, promoted the products, enrolled members for a fee and guaranteed authenticity. The Court held it could not be treated as a mere intermediary entitled to Section 79 protection. The case is foundational because it establishes that vouching for authenticity and actively curating sales strips a platform of safe-harbour — the very logic later embedded in Rule 7’s treatment of entities that “vouch” for authenticity.

Platforms, Direct Selling and Consent: Amazon v Amway

The interface between e-commerce platforms and direct-selling entities was tested in Amazon Seller Services Pvt. Ltd. v Amway India Enterprises Pvt. Ltd., decided by a Division Bench of the Delhi High Court on 31 January 2020 in appeals arising from FAO(OS) 133/2019. Direct-selling companies — Amway, Oriflame and Modicare — had obtained an injunction restraining platforms such as Amazon, Cloudtail and Snapdeal from selling their products without prior written consent, invoking the 2016 Direct Selling Guidelines.

The Division Bench set aside the injunction, holding that the 2016 Direct Selling Guidelines were advisory in character and did not have the force of law, and that the platforms could in appropriate cases invoke intermediary protection under Section 79 of the IT Act. While the case turned on trademark and the legal status of guidelines rather than the Consumer Protection Act, it is instructive for the e-commerce regime: it demonstrates that the consent and authenticity questions which dominate platform litigation must be grounded in binding law — a vacuum the 2019 Act and the 2020 Rules were precisely designed to fill. After the Rules, much of what the Direct Selling Guidelines could only “recommend” acquired statutory teeth.

Deficiency and Redressal in the Online Marketplace

When an online transaction goes wrong, the consumer’s primary remedy remains a complaint for deficiency in service or unfair trade practice before the consumer disputes redressal commissions. The Act materially eases the online consumer’s path. Under Section 34, a complaint may be filed where the complainant resides or personally works for gain, not merely where the opposite party is located — a reform of obvious value when the seller “could be located anywhere.” The Act also permits e-filing of complaints and hearings by video-conferencing.

The redressal forums have applied settled deficiency principles to online facts. In Paras Jain v Amazon Seller Services Pvt. Ltd. (NCDRC), reported at IV (2021) CPJ 119, a consumer who had bought a mobile phone online and was caught by a mid-stream change in the platform’s “easy return” policy was held not entitled to exemplary punitive damages on those particular facts, the National Commission noting the narrow window between the policy change and the purchase and ultimately addressing the matter on jurisdictional grounds. The case illustrates that online disputes are adjudicated on ordinary deficiency standards: a platform’s published return policy is part of the bargain, but relief is calibrated to the demonstrated loss and to the pecuniary and territorial jurisdiction of the forum approached.

Dark Patterns: The 2023 Guidelines

The most recent layer of online consumer protection targets manipulative interface design. On 30 November 2023, the Central Consumer Protection Authority issued the Guidelines for Prevention and Regulation of Dark Patterns, 2023. A “dark pattern” is defined as any practice or deceptive design pattern using the user interface or user experience on any platform that is designed to mislead or trick users into doing something they did not originally intend, by subverting or impairing consumer autonomy, decision-making or choice, amounting to a misleading advertisement, unfair trade practice or violation of consumer rights.

The Guidelines apply to all platforms systematically offering goods or services in India, as well as advertisers and sellers, and specify thirteen dark patterns: false urgency, basket sneaking, confirm shaming, forced action, subscription trap, interface interference, bait and switch, drip pricing, disguised advertisement, nagging, trick wording, SaaS billing and rogue malware. The prohibition on pre-ticked checkboxes already present in the 2020 Rules dovetails with the new framework’s insistence on explicit, affirmative consent. The CCPA has reinforced compliance through advisories directing e-commerce platforms to conduct self-audits to detect and eliminate dark patterns, demonstrating how the Authority’s powers and functions are increasingly deployed in the digital sphere.

Product Liability and the E-Commerce Seller

Chapter VI of the 2019 Act introduces a dedicated product-liability action that resonates powerfully online. A product manufacturer, product service provider or product seller may be held liable in a product-liability action for harm caused by a defective product. Crucially, the definition of “product seller” is wide enough to capture, in appropriate circumstances, entities in the e-commerce supply chain that are substantially involved in placing the product in the stream of commerce. The legislative shift is that product liability now extends to sellers and service providers alongside manufacturers, so that platforms which go beyond passive listing — by warehousing, branding, or vouching for goods — may face liability they could once have deflected as “aggregators.”

This is the statutory counterpart to the judicial “active intermediary” doctrine. Where an inventory entity owns and sells the stock, it is the seller and bears seller liability directly. Where a marketplace merely facilitates, its exposure runs through Rule 5’s disclosure obligations and, on the policy trajectory set by the 2021 proposals, through fall-back liability. Together with the introduction of the CCPA and the recognition of statutory consumer rights, product liability completes the picture of an Act that treats the online seller as fully answerable. The framework is best read alongside the Act’s introduction and scheme and the overall Consumer Protection Act hub.

Exam Pointers and Synthesis

For judiciary and CLAT-PG candidates, a few anchors recur. Definitions: Section 2(16) (e-commerce) and Section 2(17) (electronic service provider); “e-commerce entity” excludes the seller who merely lists on a marketplace. Source of the Rules: Section 94 read with Section 101(1)(zg); Rules notified 23 July 2020. Key duties: grievance officer with 48-hour acknowledgement and one-month redressal; prohibition of pre-ticked checkboxes; cancellation-charge symmetry; country-of-origin disclosure; extra-territorial application to foreign platforms targeting Indian consumers. Doctrines: fall-back liability of the marketplace (2021 proposals); the “active intermediary” test stripping safe-harbour where a platform vouches for or curates sales.

On case law, remember Christian Louboutin SAS v Nakul Bajaj (Del HC, 2 Nov 2018) for the twenty-six-task active-intermediary test and the loss of Section 79 IT Act protection; Amazon v Amway (Del HC DB, 31 Jan 2020) for the advisory status of the 2016 Direct Selling Guidelines; and Paras Jain v Amazon Seller Services, IV (2021) CPJ 119 (NCDRC), for the application of ordinary deficiency and jurisdiction principles to an online return-policy dispute. Finally, the Dark Patterns Guidelines, 2023 (30 Nov 2023, thirteen specified patterns) represent the regime’s newest frontier, extending consumer autonomy from the terms of sale to the very design of the screen on which the consumer clicks “buy.”

Frequently asked questions

Are online purchases covered by the Consumer Protection Act, 2019?

Yes. The 2019 Act expressly widens “consumer” to include a person who buys goods or avails services through offline or online transactions through electronic means, teleshopping, direct selling or multi-level marketing. An online buyer is therefore unambiguously a consumer who may approach the District, State or National Commission. The 1986 Act did not specifically cover e-commerce, and this lacuna was deliberately closed.

Under which provision were the E-Commerce Rules, 2020 made, and when?

The Consumer Protection (E-Commerce) Rules, 2020 were notified on 23 July 2020 in exercise of the powers conferred by sub-clause (zg) of sub-section (1) of Section 101 read with Section 94 of the Consumer Protection Act, 2019. Section 94 supplies the object of preventing unfair trade practices in e-commerce; Section 101(1)(zg) supplies the specific delegated rule-making authority.

What is the difference between a marketplace and an inventory e-commerce entity?

A marketplace e-commerce entity provides an information-technology platform to facilitate transactions between buyers and sellers — it is a facilitator, not the seller. An inventory e-commerce entity owns the inventory of goods or services and sells them directly to consumers, and includes single-brand retailers. The inventory entity, being the actual seller, bears seller-type disclosure and authenticity obligations directly, while the marketplace primarily bears disclosure and grievance-redressal duties.

What is “fall-back liability” of a marketplace?

Fall-back liability is the principle that a marketplace e-commerce entity cannot fully escape responsibility where a seller registered on its platform fails to deliver goods or services owing to its negligent conduct, act or omission, causing loss to the consumer. It makes the marketplace a backstop for the seller’s default. The concept was a centrepiece of the June 2021 proposed amendments to the E-Commerce Rules and now shapes how platform accountability is assessed.

What did Christian Louboutin v Nakul Bajaj decide about platform liability?

In Christian Louboutin SAS v Nakul Bajaj (Delhi High Court, 2 November 2018), the Court held that Darveys.com, which sold counterfeit goods and guaranteed their authenticity, was an active participant rather than a passive intermediary and could not claim safe-harbour under Section 79 of the IT Act, 2000. The Court listed roughly twenty-six tasks that distinguish an “active intermediary” from a mere conduit. The reasoning underlies Rule 7’s treatment of entities that “vouch” for authenticity.

What are the Dark Patterns Guidelines, 2023?

Issued by the Central Consumer Protection Authority on 30 November 2023, the Guidelines for Prevention and Regulation of Dark Patterns, 2023 prohibit deceptive interface designs that mislead consumers into unintended actions. They apply to all platforms systematically offering goods or services in India and specify thirteen dark patterns, including false urgency, basket sneaking, confirm shaming, subscription trap, drip pricing, bait and switch, and disguised advertisements. They reinforce the 2020 Rules’ ban on pre-ticked consent.