The Ministry of Electronics and Information Technology (MeitY) has initiated registration for consent managers mandated by the Digital Personal Data Protection (DPDP) Act, 2023, aiming to enhance individual control over personal data processing.
- Consent managers help individuals control personal data use.
- Companies need ₹2 crore net worth to register as consent managers.
- Registration portal operational at dpbi.gov.in for applications.
What happened
The Ministry of Electronics and Information Technology (MeitY) has officially opened the registration process for consent managers as stipulated under the Digital Personal Data Protection (DPDP) Act, 2023. An online portal hosted at dpbi.gov.in was launched to allow Indian companies meeting eligibility criteria to apply for registration with the Data Protection Board of India (DPBI). This step operationalizes the framework enabling companies to offer consent management services to data principals, or individuals whose personal data is subject to processing.
Consent managers act as intermediaries to help individuals give, review, manage, and withdraw consent for the processing of their digital personal data. Companies seeking registration must be incorporated in India and demonstrate adequate technical, operational, and financial capacity, including a minimum net worth of ₹2 crore. Through the registration and assessment process, the DPBI will approve companies that comply with the prescribed standards and publicly list them for transparency.
Why it matters
The DPDP Act introduces a comprehensive legal framework designed to safeguard the personal data of individuals in India and promote transparency and accountability among organizations handling such data. Consent managers represent a crucial component of this regulatory landscape by giving data principals greater control over how their personal information is collected, used, and shared. This granular control over digital consent is expected to foster trust in the emerging data ecosystem and protect privacy rights effectively.
By formalizing the role and registration of consent managers, the government ensures that these entities uphold standards of security, accountability, and interoperability, which are fundamental to lawful and ethical data processing. The move also places financial and operational responsibility on organizations providing consent management services, helping to raise industry standards and support compliance with the new data protection norms.
What to watch next
Meanwhile, the broader phased rollout of the DPDP Act continues with upcoming provisions enhancing data principal rights, compliance obligations on data fiduciaries, and regulations related to children’s data protection. Stakeholders in India's digital economy—including startups, MSMEs, and larger enterprises—should closely monitor these implementation stages to align their data practices with the new statutory landscape.