E-Commerce Rules in India Under Consumer Protection Act 2019: A Complete Legal Guide

India's e-commerce market is projected to reach USD 137 billion by 2025 and USD 363 billion by 2030, making it one of the fastest-growing digital economies in the world. To protect the millions of consumers who now shop online, the Government of India enacted the Consumer Protection Act 2019, replacing the older 1986 Act, and introduced the Consumer Protection (E-Commerce) Rules 2020. These rules brought e-commerce activities under a dedicated regulatory framework for the first time, establishing clear obligations for online platforms, sellers, and service providers. Whether you operate an online marketplace, sell through e-commerce platforms, or run a direct-to-consumer brand, understanding these rules is essential to avoid penalties, consumer complaints, and reputational harm.

The Consumer Protection Act 2019 widened the definition of consumer to explicitly include persons who buy goods or avail services through electronic means, closing a significant gap in the 1986 Act. The Central Consumer Protection Authority (CCPA), established under Section 10 of the Act with effect from July 24, 2020, has the power to regulate unfair trade practices, issue safety notices, and order product recalls. The E-Commerce Rules 2020 impose distinct obligations based on business model: marketplace entities (which connect buyers and sellers) must ensure seller information is displayed, appoint a grievance officer, and not manipulate search result rankings. Inventory-based entities (which own and sell goods directly) must disclose the terms of return, refund, exchange, and warranty. Both models must display the country of origin for all products, provide clear pricing without hidden charges, and ensure cancellation rights are easily accessible. Proposed amendments have further strengthened the framework, including mandatory registration with DPIIT, appointment of a Chief Compliance Officer, restrictions on certain flash sales that limit consumer choice, and regulations on algorithmic pricing.

If you operate an e-commerce business in India, your compliance checklist should include several critical items. Appoint a Grievance Officer whose contact details are prominently displayed on your platform. Ensure all product listings include accurate descriptions, country of origin, seller details, and total price inclusive of all charges. Implement a clear, accessible return and refund policy that complies with the Rules. Do not use search result manipulation or preferential treatment of affiliated sellers. If you are a marketplace, verify seller information and maintain records of all transactions. The BIS Draft Guidelines on E-Commerce Self-Governance issued in January 2025 add further requirements: platforms must conduct diligent KYC of third-party sellers, provide environmental impact disclosures, and ensure consent is genuinely voluntary with no pre-ticked checkboxes. The DPDP Rules 2025 specify a three-year data retention policy for e-commerce platforms with over two crore registered users. Non-compliance with CCPA orders can result in criminal prosecution under Section 88, with liability extending to directors and officers.

The e-commerce regulatory landscape in India continues to evolve rapidly. The CCPA has been actively enforcing dark patterns guidelines, issuing notices to major platforms. BIS self-governance standards are moving toward becoming mandatory benchmarks. FDI rules for e-commerce continue to be refined, with strict enforcement of marketplace versus inventory model distinctions. For e-commerce businesses, staying ahead of these regulatory developments is not just about compliance but about competitive advantage and consumer trust. The Sansa Kanoon Pranali Partners team advises e-commerce platforms, D2C brands, and online sellers on regulatory compliance, consumer protection strategy, and platform liability management. Contact us for a comprehensive compliance review or ongoing advisory support tailored to your e-commerce operations.