What are DPDP consent requirements?
Consent must be free, specific, informed, unconditional, and unambiguous, obtained through a clear notice that lists the personal data and purposes being processed.
Bundled consent, dark patterns, and pre-ticked boxes are inconsistent with the Act. Each purpose should be separable where practical.
Withdrawal must be as easy as giving consent. Maintain verifiable consent records with version history for audits.
Related Act sections
Tools & resources
Back to Complete DPDP Guide | All DPDP FAQs
DPDP implementation support
- Gap assessment & remediation roadmap (INR 49,999+)
- Breach runbook & DPBI templates
- SDF / DPO / DPIA programs