Google removing a fake review and India's Central Consumer Protection Authority (CCPA) acting against a business are not the same event, and mixing them up is easy because both share the acronym everyone half-remembers. Google's rules are a private platform's own terms of service. India's CCPA, created under the Consumer Protection Act, 2019, is an actual government regulator with the power to fine a business and, in some cases, send someone to jail. A business can be perfectly fine with one and in real trouble with the other, at the same time.
Quick disambiguation first, because it trips people up constantly: the CCPA in this article is India's Central Consumer Protection Authority. It has nothing to do with the California Consumer Privacy Act, which shares the same three letters and shows up in half the search results if you type "CCPA" into Google. Different country, different law, different subject entirely.
Two systems, doing genuinely different jobs
It helps to stop thinking of "Google's rules" and "Indian law" as two versions of the same thing. They were built for different purposes, by different kinds of authority, and they fail differently too.
| Google's review policy | India's CCPA / Consumer Protection Act, 2019 | |
|---|---|---|
| Who runs it | Google, a private company | A government regulator, under the Ministry of Consumer Affairs |
| What it actually covers | Whether content on Google Maps reflects a genuine experience | Misleading advertising, unfair trade practices and (for e-commerce platforms) fake review handling |
| Typical consequence | Review removed, Business Profile suspended or restricted | Monetary penalty, and in serious misleading-ad cases, imprisonment |
| Who it applies to | Anyone with a Google Business Profile, everywhere Google operates | Businesses and advertisers operating in India, regardless of whether Google is even involved |
| How you find out | An email or notice in your Business Profile dashboard | A formal notice or order from the CCPA |
| Can you appeal | Yes, through Google's own reinstatement process | Yes, through the legal process the Act provides for |
What India's CCPA has actually done about fake reviews
This part is genuinely useful to know and rarely explained clearly. In November 2022, India's Department of Consumer Affairs, working with the Bureau of Indian Standards (BIS), released IS 19000:2022, an Indian Standard titled "Online Consumer Reviews, Principles and Requirements for their Collection, Moderation and Publication." It was reported at the time as the first standard of its kind anywhere, and it asks review platforms to appoint a review administrator, verify reviewer identity, and disclose paid or incentivised reviews clearly.
Two things about it are worth being precise about, because a lot of what circulates online overstates this.
- It is currently voluntary, not mandatory. Government officials have said they would consider making it compulsory if fake reviews kept getting worse, but as it stands, compliance is not legally forced on every platform.
- It was written with e-commerce and services platforms in mind (Amazon, Flipkart and Zomato were specifically named when it was announced), not with every individual Google Business Profile. It targets the platforms that host reviews at scale, not a single restaurant's listing.
Where the broader law does reach your business directly
IS 19000 is the specific standard, but it sits inside something much bigger: the Consumer Protection Act, 2019 itself, and the CCPA's separate 2022 Guidelines for Prevention of Misleading Advertisement and Endorsements. Those apply broadly to any misleading commercial claim, which absolutely includes a business faking or buying reviews to mislead customers. This is the part that can reach an individual restaurant, clinic or salon directly, not just a marketplace platform.
Under the Act, the CCPA can penalise a business or an endorser up to ₹10 lakh for a misleading advertisement, rising to ₹50 lakh for a repeat offence, alongside possible imprisonment of up to two years for a first offence and five years for a subsequent one. An endorser can also be barred from endorsing that product or service for up to a year, or three years on repeat.
Google suspending your profile is bad for business. A CCPA order under the Act is a legal matter with real financial and, in extreme cases, criminal consequences. Fake reviews sit close enough to "misleading advertising" that a business built around them is exposed to both systems, not either one.
What this actually means if you run a shop, clinic or restaurant
None of this should worry an owner who is simply asking real customers for honest feedback, which is the only thing either system has ever objected to avoiding. The practical takeaway is narrow and simple.
- Never buy reviews, incentivise reviews with a discount tied to a rating, or write reviews on a customer's behalf. This is the one behaviour that puts you at risk under both Google's policy and Indian consumer law, at the same time.
- Keep your own records of how you collect reviews. If you use a tool like FiveNudge that only ever sends a WhatsApp request and never touches the content, that process itself is your best evidence of good faith.
- Treat "voluntary standard today" as "possibly mandatory tomorrow." A framework this specific, built jointly by BIS and the Department of Consumer Affairs, is not the kind of thing that quietly disappears.
This article explains how these two systems relate to each other in general terms. It is not a substitute for advice from a lawyer familiar with your specific situation, especially if you have already received a notice from either Google or a regulator.
Real reviews are the only version that is safe under every system
FiveNudge only ever asks. No gating, no incentives, no writing content for anyone. It is the one approach that never puts you at odds with Google or with Indian consumer law.
Start free · 2-min setup14 days free · ₹499/month after · Cancel anytime