Consent
Under the DPDP Act, consent must be free, specific, informed, unconditional and unambiguous, given by a clear affirmative action, limited to the personal data necessary for the specified purpose, and as easy to withdraw as it was to give.
It must be requested with a notice available in English or a language listed in the Eighth Schedule to the Constitution. Pre-ticked boxes, bundled consent and making a service conditional on unrelated processing all fail the test.
General information about the DPDP Act, not legal advice.