New Delhi: The consent manager registration framework under the Digital Personal Data Protection (DPDP) Act, 2023, came into effect on 13 November 2026, allowing eligible Indian companies to apply for registration as Consent Managers.
S. Krishnan, Secretary, Ministry of Electronics and Information Technology (MeitY), launched the online registration portal at https://dpbi.gov.in to facilitate applications from eligible companies.
The launch marks a significant phase in the implementation of the DPDP framework, which aims to enable Data Principals to exercise greater control over consent relating to their personal data.
Through the consent manager registration process, eligible entities can seek approval to offer consent management services under the provisions of the Act.
The framework establishes a registration mechanism for entities seeking to operate as Consent Managers, with specific eligibility criteria and accountability requirements.
Role and Responsibilities of Consent Managers Under DPDP Act
A Consent Manager is an entity registered with the Data Protection Board of India (Board) that enables Data Principals to give, manage, review and withdraw consent through an accessible, transparent and interoperable platform.
The consent manager registration framework seeks to strengthen trust and accountability in the digital ecosystem by ensuring that registered entities remain accountable to Data Principals.
Consent Managers will provide a platform through which individuals can exercise greater control over how consent relating to their personal data is managed.
Consent Manager Registration: Eligibility Criteria and Net Worth Requirement
Under the newly implemented framework, companies incorporated in India with adequate technical, operational and financial capacity can apply for registration as Consent Managers.
One of the key eligibility requirements is a minimum net worth of ₹2 crore. Companies must also demonstrate that they have the necessary resources and capabilities to deliver secure, reliable and accountable consent management services.
These eligibility conditions are intended to ensure that entities entering the consent management ecosystem have the financial strength and operational capabilities required to fulfil their responsibilities.
How to Apply for Consent Manager Registration
Eligible Indian companies can submit their applications to the Data Protection Board of India through the newly launched online portal at https://dpbi.gov.in.
The Board will evaluate applications against the applicable eligibility and registration requirements. Companies that satisfy the prescribed conditions may be granted registration to operate as Consent Managers.
Following the registration process, the list of approved Consent Managers will be made publicly available on the Board’s website.
The online portal is expected to facilitate the application process for eligible companies seeking to enter the consent management ecosystem under the Digital Personal Data Protection framework.
DPDP Act Implementation: Next Phase Scheduled for May 2027
The consent manager registration framework is part of the phased implementation of the Digital Personal Data Protection Act, 2023, and the DPDP Rules, 2025.
While the registration framework came into effect on 13 November 2026, other key provisions concerning the rights of Data Principals, obligations of Data Fiduciaries, and the Data Protection Board’s inquiry and penalty processes are scheduled to come into effect on 13 May 2027.
The phased implementation will progressively operationalise the different provisions of the DPDP framework.
Further information on the DPDP Act, 2023, and the DPDP Rules, 2025, is available on the Ministry of Electronics and Information Technology’s official website at https://www.meity.gov.in/.
For related queries, the email address secretary[at]dpbi[dot]gov[dot]in may be contacted.
For more details on the Consent Manager Registration Framework, click here.
