# CMP-URL-DISTINCT — Privacy policy and terms URLs must be different pages

> The privacy policy URL and the terms of service URL must not be the same page.

- **Rule ID:** CMP-URL-DISTINCT
- **Layer:** Campaign (`CAMPAIGN`)
- **Checks:** `campaign.privacy_url + campaign.terms_url`
- **Severity:** HIGH — Rejected by at least one carrier or provider, and a common cause of failure at the rest.
- **When it bites:** Gates approval — get this wrong and registration is refused
- **How it is detected:** Deterministic (settled in code from the submitted values)
- **Fix type:** Fix the field — a better value in the form clears it
- **Required by:** TCR, Twilio
- **Applies:** Applies to every 10DLC registration.
- **Canonical URL:** https://ekas.io/rules/10dlc/campaign/cmp-url-distinct/

## Why this rule exists

The privacy policy and the terms answer different questions — how data is handled versus what the program is — and reviewers check them separately. Brands routinely paste the same combined-legal-page URL into both fields, and a presence-only check passes it while a reviewer opening both links does not.

## How to fix it

Link the privacy policy and the terms of service separately. If you only have one combined page, publish a distinct SMS terms page.

## Example of a compliant value

```text
Privacy: https://acmecoffee.com/privacy · Terms: https://acmecoffee.com/terms
```

## Notes

Catalog POL-017. Brands paste the same URL twice constantly and "both fields present" passes today.