Consent Manager Framework: Registration Window Opens Ahead of November 2026
Rule 4 governing Consent Managers becomes effective on 13 November 2026. Eligible companies are preparing to register with the Data Protection Board.
Under Rule 4 of the DPDP Rules, 2025, Consent Managers — companies that let individuals give, review and withdraw consent through a single interoperable platform — must register with the Data Protection Board. This provision is effective 12 months after notification, i.e., 13 November 2026.
To qualify under Schedule I, a Consent Manager must, among other things, maintain a minimum net worth of ₹2 crore, operate a secure and neutral platform, avoid conflicts of interest, and retain consent audit trails for at least seven years.
Businesses that rely on user consent should plan to integrate with registered Consent Managers as part of their DPDP readiness programme.