The Law Changed.
The Interface Hadn’t.

AT&T’s privacy controls had accumulated across multiple pages with no single place to manage them. Programs were disconnected, consent states were unclear, and customers had no reliable way to understand what they’d agreed to or how their choices connected.

New State Privacy Laws

Raising the bar on transparency, sensitive data use, and consumer consent. Regulators were actively scrutinizing dark patterns.

A Fragmented Interface

Disconnected controls meant customers couldn’t meaningfully exercise their rights. It was becoming a legal liability, not just a UX problem.

A Change in Laws
A Change in Patterns

I evaluated three layout patterns against those constraints:

01
Traditional Tables

Could not handle the volume of legal content required across programs.

02
Row-Based Layouts

Lost the program relationships critical to compliance communication.

03
Stacked Columns

Collapsed under consent state complexity at scale.

None of them worked independently. The content needed a hybrid: rows and columns combined into a single framework that could hold programs, explanations, and consent states simultaneously without sacrificing readability.

One System,
Every Screen

Desktop

Programs sit side by side. Customers scan across and compare options. Consent states are immediately visible without expanding anything.

Mobile

The table shifts into stacked modules. Each program becomes a contained section that expands to reveal detail. Same information, different spatial logic.

Built to Absorb
What’s Coming

Consolidated Controls

All privacy controls in one navigable experience.

Hybrid Table Framework

Holds program relationships, legal content, and consent states in one structure without losing readability.

Responsive by Compliance

Desktop comparison view shifts to mobile stacked modules.

Pattern-Compliant Design

Neutral interface that presents choices without steering them.

Scalable Architecture

New consent programs slot into the existing structure as legislation evolves.

Reduced Regulatory Risk

A consent system built to absorb new state privacy laws without starting over.