Who is a Consent Manager under the DPDP Act?

A Consent Manager is a person registered with the Data Protection Board of India who gives Data Principals a single, accessible, transparent and interoperable point at which to give, manage, review and withdraw their consent across Data Fiduciaries. It is a defined statutory role that acts on the individual's side of the relationship, not a description of consent software.

Jupinder Bedi

This is routinely confused with a consent management platform, which is software a Data Fiduciary runs to collect and honour consent for its own processing. Most Indian businesses need the platform; installing one does not make you a Consent Manager.

Becoming a registered Consent Manager is a deliberate business decision carrying its own registration and interoperability obligations. It is not a compliance step for an ordinary Data Fiduciary.

General information about the DPDP Act, not legal advice. Obligations depend on your circumstances.

Jupinder Bedi — Jupinder writes on data protection practice at ProtectComply, with a focus on how obligations translate into system behaviour.

Where do you stand under DPDP?

Take the free readiness check and find out in 10 minutes.

Start free readiness check →