Who is a Consent Manager under the DPDP Act?

A Consent Manager is a person registered with the Data Protection Board of India who gives Data Principals a single, accessible, transparent and interoperable point at which to give, manage, review and withdraw their consent across Data Fiduciaries. It is a defined statutory role that acts on the individual's side of the relationship, not a description of consent software.

Jupinder Bedi

This is routinely confused with a consent management platform, which is software a Data Fiduciary runs to collect and honour consent for its own processing. Most Indian businesses need the platform; installing one does not make you a Consent Manager.

Becoming a registered Consent Manager is a deliberate business decision carrying its own registration and interoperability obligations. It is not a compliance step for an ordinary Data Fiduciary.

General information about the DPDP Act, not legal advice. Obligations depend on your circumstances.

Jupinder BediJupinder writes on data protection practice at ProtectComply, with a focus on how obligations translate into system behaviour.

Where do you stand under DPDP?

Take the free readiness check and find out in 10 minutes.

Start free readiness check →