Readiness assessment
The Act
The DPDP Act, explainedThe DPDP Rules 2025

Ch IPreliminary

S.1 Short title and commencementS.2 DefinitionsS.3 Application and scope

Ch IIObligations of Data Fiduciary

S.4 Grounds for processingS.5 NoticeS.6 ConsentS.7 Certain legitimate usesS.8 Data Fiduciary obligationsS.9 Children’s dataS.10 Significant Data Fiduciary

Ch IIIRights and duties of Data Principal

S.11 Right to accessS.12 Correction and erasureS.13 Grievance redressalS.14 Right to nominateS.15 Duties of the Data Principal

Ch IVSpecial provisions

S.16 Transfer outside IndiaS.17 Exemptions

Ch VData Protection Board of India

S.18 Establishment of the BoardS.19 Composition of the BoardS.20 Salary and term of officeS.21 DisqualificationsS.22 Resignation and vacanciesS.23 Proceedings of the BoardS.24 Officers and employeesS.25 Members as public servantsS.26 Powers of the Chairperson

Ch VIBoard powers and procedure

S.27 Powers and functions of the BoardS.28 Procedure followed by the Board

Ch VIIAppeal and dispute resolution

S.29 Appeal to the Appellate TribunalS.30 Tribunal orders as a decreeS.31 Alternate dispute resolutionS.32 Voluntary undertaking

Ch VIIIPenalties

S.33 Penalties and the ScheduleS.34 Penalties to Consolidated Fund

Ch IXMiscellaneous

S.35 Good-faith protectionS.36 Power to call for informationS.37 Blocking of accessS.38 Consistency with other lawsS.39 Bar of jurisdictionS.40 Power to make rulesS.41 Laying of rules before ParliamentS.42 Power to amend the ScheduleS.43 Power to remove difficultiesS.44 Amendments to other Acts
Industries
Implementation
Training
Resources
About
Readiness assessment
Home / Guides / Consent Management
Consent collection

DPDP Act Consent Management Guides and Resources

Understand what the DPDP Act requires, design consent that is valid and provable, and build the controls to manage and withdraw it across your systems. This is the complete collection of DPDP consent guides, tools and resources. Start with the implementation guide, then go deep on each topic.

Start here

DPDP Act Consent Management: the complete guide

The full operating model for consent under the DPDP Act, across web, app, CRM, systems and processors, with the 2026 to 2027 implementation timeline.

Read the complete guide →
Build and Govern

Consent Manager

The Section 6 Consent Manager role, registration and what it changes.

Consent Manager vs CMP vs Build

Choosing between a registered Consent Manager, a CMP, or building your own.

DPDP Consent Architecture: Records, Identity and EnforcementComing soon

Reference design for capturing, storing and enforcing consent state.

Apply

Rule 10 Parental Consent (Children's Data)Coming soon

Verifiable guardian consent and the limits on tracking children.

Marketing, Cookies, CRM and Tracking Under DPDPComing soon

Consent for advertising, analytics and behavioural tracking.

RBI Digital Lending and DPDP ConsentComing soon

Consent patterns for lending workflows versus unrelated promotional use.

Not sure where your consent stands?

Score your consent practices against the Act and Rules, then get matched with an implementation partner who can own the delivery.

Building a notice? Use the consent notice generator when you are ready.