The Ministry of Electronics and Information Technology (MeitY) has opened registration for a DPDP consent manager under the Digital Personal Data Protection (DPDP) Act, 2023. The registration framework came into effect on 13 November, and IT Secretary S Krishnan launched the online portal dpbi.gov.in for companies to apply to the Data Protection Board of India (DPBI), Inc42 reported on 14 November 2026.
A consent manager is an entity registered with the DPBI. It lets data principals give, manage, review and withdraw consent for the processing of their personal data through an interoperable platform.
Who Can Register as a DPDP Consent Manager?
Applicants must meet three conditions, according to the report:
- The company must be incorporated in India.
- It must have adequate technical, operational and financial capacity.
- It must have a minimum net worth of Rs 2 crore.
The DPBI will assess applicants against the prescribed requirements and approve those that qualify. A list of registered consent managers will be published on the Board’s website.
What It Means for Indian Businesses
Under the Act, data fiduciaries must obtain consent before processing personal data, except in specified cases. Consent must be “free, specific, informed, unconditional and unambiguous”. Fiduciaries must also maintain reasonable security safeguards and notify the DPBI and affected individuals of data breaches.
Verifiable parental consent is required for children under 18, and tracking, behavioural monitoring and targeted advertising directed at children are restricted, subject to exemptions.
The opening of consent manager registration is one step in the phased rollout of the law. The Act was passed by Parliament in August 2023, and MeitY notified the DPDP Rules, 2025 in November 2025.
Industry Reaction and Expert Commentary
MeitY said the framework “marks an important step towards operationalising a system” that lets data principals exercise greater control over their consent. It added that consent managers “will be accountable to data principals”. The report did not carry reactions from industry bodies or legal experts.
What Happens Next?
The DPBI will review applications and publish the list of registered consent managers on its website. The provisions on data principals’ rights, data fiduciary obligations and the DPBI’s inquiry and penalty processes are due to take effect in May 2027.
Frequently Asked Questions
Where can companies apply to become a consent manager under the DPDP Act?
Companies can apply through the online portal dpbi.gov.in, which was launched by IT Secretary S Krishnan.
What is the minimum net worth for a DPDP consent manager?
Applicants must have a minimum net worth of Rs 2 crore and must be incorporated in India.
What does a consent manager do?
A consent manager lets data principals give, manage, review and withdraw consent for the processing of their personal data through an interoperable platform.
Source: Inc42 (Shrishti Bisht), 14 November 2026.
Leave a comment