Consent Manager Registration Framework Takes Effect Under DPDP Act; Online Portal Launched

Framework begins phased implementation

The Consent Manager registration framework under the Digital Personal Data Protection (DPDP) Act, 2023, came into effect on 13 November 2026. The source describes this as part of a phased implementation of the DPDP framework. At this stage, eligible entities can seek registration and prepare to provide consent management services; the source does not state that every applicant will be registered or that the wider DPDP framework is already fully operational.

Online portal opens applications

Shri S. Krishnan, Secretary, Ministry of Electronics and Information Technology, launched the portal at https://dpbi.gov.in. Eligible companies may use it to apply to the Data Protection Board of India for registration. Applications will be assessed against applicable requirements, and the Board may register companies that qualify. The source also states that the list of registered Consent Managers will be made publicly available on the Board’s website.

Role and eligibility of Consent Managers

A Consent Manager is described as an entity registered with the Data Protection Board of India that provides an accessible, transparent and interoperable platform. Through that platform, Data Principals can give, manage, review and withdraw consent. The framework also states that Consent Managers are accountable to Data Principals and is intended to strengthen trust and accountability in the digital ecosystem.

Companies seeking registration must be incorporated in India and have adequate technical, operational and financial capacity. The stated financial threshold is a net worth of not less than ₹2 crore. These are eligibility requirements for companies seeking registration, rather than a statement that all companies meeting them have already been approved.

Other DPDP provisions are scheduled for a later date

The source separates the registration phase from other provisions concerning Data Principals’ rights, Data Fiduciaries’ obligations, and the Board’s inquiry and penalty processes. Those provisions are scheduled to come into effect on 13 May 2027. The stated date concerns their scheduled commencement and does not establish that they were already in force on 13 November 2026.