s.2 · s.6 · Rule 4 · Sch. I
Consent Manager
A Consent Manager is a person registered with the Data Protection Board that acts as a single point through which a Data Principal can give, manage, review and withdraw consent, on an accessible, transparent and interoperable platform.
Consent Managers are India’s answer to consent sprawl: rather than managing consent separately with every business, an individual can route it through one registered intermediary. The Consent Manager is accountable to the Data Principal and acts on their behalf.
Rule 4 and the First Schedule set the conditions to register, including an Indian company with a minimum net worth, and thirteen continuing obligations. Registration is granted, suspended and cancelled by the Board.
A cookie banner is not a Consent Manager. The term has a specific meaning under the Act and only a Board-registered entity can use it.
Questions people ask
- Do we have to use a Consent Manager?
- No. Section 6(7) lets a Data Principal choose to give consent through one. The Data Fiduciary must be able to accept consent that arrives that way.
- Is our consent management platform a Consent Manager?
- Not unless it is registered with the Board under Rule 4. Most consent tools are Data Processors that help you collect consent directly.
Related terms
The DPDP brief
One email a month. What moved in the Act, and what our scans found.
Every claim cited to its section, the same way these pages are. No product news, no roundups of other people’s blogs.