NEW DELHI: Govt has opened applications for companies to become consent managers under India’s data protection law. Once registered, these firms will be able to offer a website or app where users can review the permissions they have given to participating businesses and grant or withdraw consent.For users, the service could bring permissions from several businesses into one place. For instance, a user could review a data request from one company and withdraw an earlier permission given to another through the same app, if both businesses are on the platform.
Share your thoughts in the comments
Be respectful ยท TOI community guidelines
Consent managers will have to give users access to their consent history, including requests they declined and permissions they withdrew. Rules require firms to keep these records for at least seven years, put safeguards in place to prevent data breaches and avoid conflicts of interest with the businesses whose requests they handle.The registration framework under the Digital Personal Data Protection Act took effect on Nov 13. Electronics and IT secretary S Krishnan launched the application portal. Companies incorporated in India with a net worth of at least Rs 2 crore can apply. The Data Protection Board of India will assess whether applicants have the technical, operational and financial capacity to provide the service and publish a list of firms it registers.Govt is implementing the law in phases. Key provisions covering users’ rights, companies’ obligations and board’s powers to conduct inquiries and impose penalties will take effect from May 13, 2027.
