Politics · India · 3 hrs ago
India opens applications for data consent managers
India has opened applications for companies to become consent managers under its data protection law.
These firms could offer an app or website where people review, grant or withdraw data permissions for businesses on the platform.
Users would also be able to see a record of requests they declined and permissions they withdrew.
Applicants must be India-incorporated firms with at least Rs 2 crore in net worth, and the Data Protection Board of India will assess their capacity before registering them.
Registered firms must keep consent records for at least seven years, protect them from data breaches and avoid conflicts of interest.
The registration framework took effect on November 13, while key provisions on user rights, business duties and the board’s powers are due to start on May 13, 2027.
India has opened applications for companies to become consent managers under its data protection law.
Registered firms can provide a website or app where users review, grant or withdraw permissions given to participating businesses.
Consent managers must keep users’ consent histories for at least seven years and protect the records from data breaches.
Companies incorporated in India with a net worth of at least Rs 2 crore can apply.
Key provisions on users’ rights, companies’ obligations and the Data Protection Board’s powers are due to take effect on May 13, 2027.
- Who
- Companies incorporated in India with a net worth of at least Rs 2 crore can apply to become consent managers.
- What
- The government opened applications under India’s data protection law. Registered firms can provide users with a service to manage consent given to participating businesses.
- When
- The registration framework took effect on Nov 13. The article was published on Nov 14, 2026.
- Where
- India.
- Why
- To let users review and manage permissions given to participating businesses through a consent manager.
This story does not have two clearly opposing sides.
The registration framework under the Digital Personal Data Protection Act took effect.
The Times of India reported that the government had opened applications and that Electronics and IT secretary S Krishnan launched the application portal.
Key provisions on users’ rights, companies’ obligations and the Data Protection Board’s powers are due to take effect.
- Minimum net worth
- Rs 2 crore
- Record retention
- At least seven years
- Registration framework
- Took effect Nov 13
- Future provisions
- Due to take effect May 13, 2027
- Oversight body
- Data Protection Board of India