Policies · eGov
The Consent Manager registration framework under the Digital Personal Data Protection Act, 2023 became operational on 13 November 2026, allowing eligible Indian companies to apply through a newly launched portal.
✦ AI SUMMARY 30-second read
- MeitY Secretary S Krishnan launched the online registration portal on 13 November 2026, enabling Indian companies to apply for Consent Manager status with the Data Protection Board of India.
- Applicants must be incorporated in India and hold a minimum net worth of Rs 2 crore, with demonstrated technical capability to run interoperable consent platforms.
- The framework goes live six months before the broader substantive compliance provisions of the DPDP Rules, 2025, which are scheduled to commence on 13 May 2027.
Why it matters: The framework establishes a new regulated intermediary category giving individuals a single platform to manage data consent across multiple entities.
This summary was generated by AI. Editors may review and update it.
Document details
| Document type | Rules & Regulation |
|---|---|
| Issued by | Government of India |
| Region | India |
| Published | 14 November 2026 |
The Consent Manager registration framework under India's Digital Personal Data Protection Act, 2023 came into effect on 13 November 2026. MeitY Secretary S Krishnan launched the online registration portal on that date, enabling eligible Indian companies to begin applying to the Data Protection Board of India.
Consent Managers are registered intermediaries that provide individuals with a single platform to give, manage, review and withdraw consent across multiple data fiduciaries. Applications are evaluated against criteria set out in Rule 4 of the DPDP Rules, 2025.
What the document says
Companies seeking registration must be incorporated in India and maintain a minimum net worth of Rs 2 crore. They must also demonstrate technical capability to operate interoperable consent platforms.
Registered Consent Managers will be prohibited from accessing the personal data they broker. They are to function solely as conduits for consent signals between individuals and data processors.
Who is affected
Eligible Indian companies wishing to operate as Consent Managers may submit applications through the registration portal to the Data Protection Board of India. Those approved will form a new category of regulated entity within India's data protection ecosystem.
Individuals stand to benefit by gaining a centralised mechanism to control their consent across multiple data fiduciaries rather than managing permissions separately with each.
What happens next
The registration framework is now operational six months ahead of the broader substantive compliance provisions of the DPDP Rules, 2025, which are scheduled to commence on 13 May 2027. This phased approach is intended to allow consent infrastructure to be established before the main compliance obligations take effect.
Detailed information about the DPDP Act, 2023 and the DPDP Rules, 2025 is available through the Ministry of Electronics and Information Technology's official website.