This paper sets out the harms that can arise when certain types of practices are used to present information and choices to consumers about the collection and use of their personal information. It gives examples of concerning design practices, and provides a set of expectations that the ICO and CMA share of firms, and UX and product designers, that will support good practice.