PRV-007
Consent checkbox is pre-ticked
MediumDefault severity · Privacy / Legal · Legal, privacy and consent
Last reviewed
What it checks
Checkboxes already checked whose name, id or label mentions consent, marketing, newsletter or terms.
Why it matters
Pre-ticked boxes are not valid consent under GDPR or the DPDP Act, a potential compliance risk.
Recommended fix
Leave consent checkboxes unticked so the visitor actively opts in.
How to verify
Reload the form and confirm every consent checkbox starts unticked.
Example fix prompt
Generic prompt (your report adds the evidence)
Please fix this production issue in my app.
Issue PRV-007: Consent checkbox is pre-ticked
Site: https://your-app.example
First confirm the issue in the code or live config. If it is not present, say so and change nothing.
Task: Remove the default checked state from the consent / marketing checkboxes listed in the evidence so they start unticked, and make sure the form still submits correctly when they are left unticked.
Constraints: make the smallest change that fixes this, keep the current design and behaviour, never paste secret values into code or chat, and tell me which files you changed.
Done when: Reload the form and confirm every consent checkbox starts unticked.References
Potential compliance risk only. This is not legal advice.