{
  "id": "CON-134",
  "slug": "con-134",
  "title": "SMS consent needs its own control and its own sentence",
  "statement": "Messaging consent must not share a control or a sentence with email or phone-call consent.",
  "rationale": "One box reading \"yes, contact me by email and text\" produces a record that cannot show which channel the consumer wanted, and the honest answer is usually email — that is the one they were thinking about. Klaviyo warns against collecting both on one surface for the same reason: the combined control converts better precisely because it captures people who did not decide.",
  "layer": "CONSENT_FLOW",
  "layerSlug": "consent-flow",
  "object": "opt-in surface control set; consent disclosure text",
  "severity": "BLOCKING",
  "detectability": [
    "CRAWL"
  ],
  "failureClass": "TERMINAL_WEBSITE",
  "authorities": [
    "Telnyx",
    "Twilio",
    "TextUs",
    "Infobip",
    "Bird",
    "Sakari",
    "Klaviyo"
  ],
  "applicability": {
    "consentMethods": [
      "web_form",
      "checkout",
      "account_settings",
      "third_party",
      "pos"
    ]
  },
  "applicabilityText": "Applies when consent was collected by web form, checkout, account settings, third party and point of sale.",
  "universal": false,
  "remediation": "Split into two controls with two sentences: one for email, one for text. The SMS sentence carries the SMS disclosures; the email one does not need them. Done when a consumer can take the newsletter and decline the texts in one submission.",
  "example": "☐ Email me Acme Coffee news.\n☐ Text me Acme Coffee offers. Msg frequency varies. Msg & data rates may apply. Reply STOP to unsubscribe, HELP for help.",
  "pitfalls": [
    "Two checkboxes sharing one sentence above them is the same defect with extra steps — each control needs wording of its own that names its channel."
  ],
  "notes": "Distinct from CON-BOX-BUNDLED, which is about bundling with terms acceptance. Here both halves are genuine consents and the defect is that they are one act. WEB-100 states the same rule for a QR landing page, and CON-133 the wording half.",
  "catalogIds": [
    "CON-133",
    "WEB-100"
  ],
  "phase": "approval",
  "automated": true,
  "url": "https://ekas.io/rules/10dlc/consent-flow/con-134/",
  "markdown": "https://ekas.io/rules/10dlc/consent-flow/con-134.md",
  "registry": "https://ekas.io/rules/10dlc/",
  "updated": "2026-07-25",
  "licence": "CC BY 4.0 — https://creativecommons.org/licenses/by/4.0/"
}