{
  "id": "CON-093",
  "slug": "con-093",
  "title": "The policy links must say which document they open",
  "statement": "The links to the Privacy Policy and the Terms & Conditions must be labelled as those documents, and the pages they open must title themselves the same way.",
  "rationale": "A consumer deciding whether to read the terms needs to know that is what the link is. \"Learn more\", \"details\", or a bare \"here\" tells them nothing, and a reviewer checking whether the required links are present cannot confirm it either. The document side matters for the same reason: a page reachable from a link labelled Privacy Policy that never calls itself one is not obviously the policy at all.",
  "layer": "CONSENT_FLOW",
  "layerSlug": "consent-flow",
  "object": "link text and document titles of the policy links",
  "severity": "HIGH",
  "detectability": [
    "CRAWL",
    "VISION"
  ],
  "failureClass": "TERMINAL_WEBSITE",
  "authorities": [
    "CTIA"
  ],
  "applicability": {
    "excludeConsentMethods": [
      "verbal_live",
      "verbal_ivr"
    ]
  },
  "applicabilityText": "Applies when consent was NOT collected by live verbal and IVR.",
  "universal": false,
  "remediation": "Use the document names as the link text — \"Privacy Policy\" and \"Terms of Service\" — and make sure each page carries the matching title as a heading. Done when both the link and the page it opens use the same name.",
  "example": "By checking this box you agree to Acme Coffee's <a href=\"/sms-terms\">Terms of Service</a> and <a href=\"/privacy\">Privacy Policy</a>.",
  "pitfalls": [
    "Bundling both documents behind one link labelled \"our policies\" fails even when the destination contains both, because the consumer cannot tell what they are agreeing to before they click."
  ],
  "notes": "Excluded from the verbal methods, which have no link text to label — a script names the policy aloud instead, which CON-VERBAL-ELEMENTS already checks as its eighth element.",
  "catalogIds": [
    "POL-032",
    "POL-120"
  ],
  "phase": "approval",
  "automated": true,
  "url": "https://ekas.io/rules/10dlc/consent-flow/con-093/",
  "markdown": "https://ekas.io/rules/10dlc/consent-flow/con-093.md",
  "registry": "https://ekas.io/rules/10dlc/",
  "updated": "2026-07-25",
  "licence": "CC BY 4.0 — https://creativecommons.org/licenses/by/4.0/"
}