Skip to content

Safety and Deception Requirements #348

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 5 commits into from
Aug 12, 2025
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 2 additions & 1 deletion guidelines/groups/layout.json
Original file line number Diff line number Diff line change
Expand Up @@ -3,6 +3,7 @@
"relationships",
"recognizable-layouts",
"orientation",
"structure"
"structure",
"no-obstruction"
]
}
12 changes: 12 additions & 0 deletions guidelines/groups/layout/no-obstruction.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@
---
children:
- no-obstructions
- clearly-dismissable-content-overlays
- disabled-controls
- stable-layout
- consistent-positioning
- implicit-misdirection
- no-infinite-scrolling
---

Users can percive and operate user interface components and navigation without obstruction.
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
---
status: developing
type: foundational
---

When content temporarily overlays other content, it must be clearly dismissible or movable via standard interaction methods and its presence does not disrupt critical screen reader announcements or keyboard focus
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
---
status: developing
type: supplemental
---

If elements are designed to be persistent (e.g., sticky headers/footers), their position is predictable and do not overlap with primary content in a way that makes it unreadable or unusable.
6 changes: 6 additions & 0 deletions guidelines/groups/layout/no-obstruction/disabled-controls.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
---
status: developing
type: foundational
---

If a control is disabled, then information explaining why it is disabled and what actions the user needs to take to enable it is provided visually nad programmatically.
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
---
status: exploratory
type: supplemental
---

The design should avoid scenarios where disabling a control implicitly suggests a false pathway or intentionally hides the correct one.
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
---
status: developing
type: supplemental
---

Content does not include infinite scrolling.
6 changes: 6 additions & 0 deletions guidelines/groups/layout/no-obstruction/no-obstructions.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
---
status: developing
type: foundational
---

Content that is essential for a user's task or understanding is not permanently covered by non-dismissible or non-movable elements.
6 changes: 6 additions & 0 deletions guidelines/groups/layout/no-obstruction/stable-layout.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
---
status: exploratory
type: supplemental
---

Content does not shift or reflow in a way that causes users to lose their place or makes previously visible content inaccessible without explicit user action.
3 changes: 2 additions & 1 deletion guidelines/groups/policy-and-protection.json
Original file line number Diff line number Diff line change
@@ -1,7 +1,8 @@
{
"children": [
"content-source",
"security-and-privacy",
"information-privacy",
"agreement-and-risk",
"algorithms"
]
}
9 changes: 9 additions & 0 deletions guidelines/groups/policy-and-protection/agreement-and-risk.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,9 @@
---
children:
- agreement-indicated
- comparable-risk
- risk-statements
---

Users understand the benefits, risks and consequences of options they select.

Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
---
status: developing
type: foundational
---

The interface indicates the legal, financial, privacy or security related consequences, before a user enters a legal, financial, privacy, or security related agreement.
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
---
status: developing
type: foundational
---

When people with disabilities are required to use alternative or additional processes or content not used by people without disabilities, use of the alternative does not expose them to additional risk.
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
---
status: developing
type: supplemental
---

The interface states the benefits, risks and potential consequences of choices.
6 changes: 3 additions & 3 deletions guidelines/groups/policy-and-protection/algorithms.md
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
---
children:
- algorithm-bias
- social-media-algorithm
- inclusive-data-set
- no-harm-from-algorithms
---

Users are not disadvantaged by algorithms.
Users are not disadvantaged or harmed by by algorithms.

This file was deleted.

Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
---
status: developing
type: assertion
---

Data sets have been trained using representative and unbiased disability related information that is proportional to the general population.
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
---
status: developing
type: assertion
---

User testing and ethics reviews have been conducted to minimize the possibility that algorithms cause harm to people with disabilities.

This file was deleted.

1 change: 0 additions & 1 deletion guidelines/groups/policy-and-protection/content-source.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,6 @@
children:
- citation
- indicate-third-party-content
- obscuring-primary-content
---

Users can determine when :term[content] is provided by a Third Party
Original file line number Diff line number Diff line change
@@ -1,6 +1,7 @@
---
needsAdditionalResearch: true
status: exploratory
type: supplemental
---

The author or source of the primary :term[content] is visually and :term[programmatically] indicated.
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
---
needsAdditionalResearch: true
status: exploratory
title: Indicate third-party content
type: supplemental
---

Third-party :term[content] (AI, Advertising, etc.) is visually and :term[programmatically] indicated.

This file was deleted.

19 changes: 19 additions & 0 deletions guidelines/groups/policy-and-protection/information-privacy.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,19 @@
---
children:
- access-to-information
- accessible-privacy-settings
- acknowledge-information-sharing
- at-data-collection
- disability-information-privacy
- global-privacy-settings
- notify-about-sensitive-information
- safe-content
- security-procedures
- supported-decision-making
---

When providing private and sensitive information, users understand:
* That the information requested is private and sensitive,
* How the information requested will be used, and
* The risks involved in providing the information.

Original file line number Diff line number Diff line change
@@ -0,0 +1,8 @@
---
status: developing
type: foundational
---

Private or sensitive information is available to the person to which it applies (e.g., logging in to personal information, clearance for access to information, downloadable version, persistent way to access information via an icon or button). (e.g. personal medical records/information, account information, etc.)


Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
---
status: developing
type: supplemental
---

When the amount of information shared can be adjusted, the method of adjusting the amount of information causes a minimal cognitive burden.
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
---
status: developing
type: foundational
---

When private or sensitive disability information will be disclosed or used by third parties or algorithms (including AI), the user is notified and must acknowledge the notification to proceed.
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
---
status: developing
type: foundational
---

When information about assistive technology use or disability related settings or patterns of behavior are captured, a way is provided for users to turn off the collection or manage the resulting data.
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
---
status: developing
type: foundational
---

Disability related vulnerability information is not disclosed to or used by third parties and algorithms (including AI, “user navigation trackers” for UX folks to see how people use the page and possibly give AT information to UX teams). This should include implied disability, such as noticing difficulties with numbers, or use of language suggest mental health disability or vulnerability.
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
---
status: developing
type: foundational
---

Privacy settings from the operating system, user agent, and application are honored.
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
---
status: developing
type: foundational
---

When private or sensitive information is displayed, notify the user and provide a mechanism to hide the information.
Original file line number Diff line number Diff line change
@@ -0,0 +1,8 @@
---
status: developing
type: assertion

---

Content that may be inappropriate or cause harm as identified by an existing standard, policy, or regulation OR identified through user testing is programmatically (and visually?) indicated and a mechanism to avoid it is provided.

Original file line number Diff line number Diff line change
@@ -0,0 +1,7 @@
---
status: developing
type: assertion
---

Private and sensitive information is handled according to [named security procedures] and reviews are conducted.

Original file line number Diff line number Diff line change
@@ -0,0 +1,8 @@
---
status: developing
type: supplemental
needsAdditionalResearch: true

---

The interface provides a mechanism to support decision making while enabling user autonomy.

This file was deleted.

This file was deleted.

This file was deleted.

This file was deleted.

This file was deleted.

16 changes: 11 additions & 5 deletions guidelines/groups/process-and-task-completion/avoid-deception.md
Original file line number Diff line number Diff line change
@@ -1,10 +1,16 @@
---
children:
- deceptive-controls
- exploitive-behaviors
- misinformation
- preselections
- redirection
- changes-in-agreement
- no-misleading-wording
- no-artificial-pressure
- no-misinformation
- no-hidden-preselections
- no-redirection
- no-sneaking
- no-emotionally-misleading-designs
- no-misdirection
- no-nagging
- no-stress
---

Users do not encounter deception when completing tasks, unless essential to the task.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looking back on this and thinking about this from both sides of the screen, I would like to expand on this a lot more than what it is worded as, for the current wording to me can appear as, "Well, we can deceive users and just say it is essential to the task for completion." I think what we currently have here can be exploited by organizations and/or individuals even further and they can use this as a loophole to get around using a deceptive pattern (or even an anti-pattern).

"Users do not, and should not encounter [term]deceptive patterns, [term]anti-patterns, or deception of any kind to complete a task the user has set forth for themselves or is essential to completing a task to proceed in an interaction (form submission, email signup, etc.)."

Or something similar to that effect. I think if we expand on this a bit further and close that potential loophole, this would satisfy my hesitation to proceed.

I have added both terms to the Shared Glossary and would like to see these terms somewhere in the guidelines at some point as a reference in the future for people, regarding what we have built here.

Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
---
status: developing
type: foundational
---

A user is notified before any change in terms of agreement to a continuing process, service, or task, and is given the opportunity to provide consent to continue.

This file was deleted.

This file was deleted.

This file was deleted.

Original file line number Diff line number Diff line change
@@ -0,0 +1,8 @@
---
status: developing
type: foundational
---

Process completion does not include artificial time limits

Note: Implying to a user that they will lose a benefit if they don’t act immediately is an artificial time limit.
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
---
status: developing
type: supplemental
---

Systems do not threaten individuals or restate decisions in a degrading way.
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
---
status: developing
type: foundational
---

During process completion, preselected options that impact finance, privacy or safety are visibly and programmatically available to the user by default, exept when the user selected these options previously in the process.
Loading