The registration framework for Consent Managers under the Digital Personal Data Protection (DPDP) Act, 2023, came into effect on 13 November 2026. The framework marks an important step towards operationalising a system that enables Data Principals to exercise greater control over consent relating to their personal data. It forms part of the phased implementation of the DPDP framework and enables eligible entities to seek registration and prepare to offer consent management services. What is the applicability of the Digital Personal Data Protection Act, 2023? The Digital Personal Data Protection Act, 2023 (“Act”) applies to the processing of digital personal data within India. The Act covers personal data collected in digital form, and personal data collected in non-digital form and later digitised. It also applies to processing of personal data outside India, if it is connected with offering goods or services to Data Principals in India. It does not apply to personal data processed by an individual for personal or domestic purposes, and to personal data made publicly available by the Data Principal, or by any other person under a legal obligation to publish it. Role and Accountability of Consent Managers A Consent Manager is an entity registered with the Data Protection Board of India (Board) that enables Data Principals to give, manage, review and withdraw consent through an accessible, transparent and interoperable platform. The framework seeks to strengthen trust and accountability in the digital ecosystem, with Consent Managers being accountable to the Data Principals. Eligibility and Registration Process Companies incorporated in India with adequate technical, operational and financial capacity, including a net worth of not less than ₹2 crore, may seek registration as Consent Managers. These requirements are intended to ensure that registered entities have the resources and capabilities to provide secure, reliable and accountable services. Eligible companies may apply to the Board for registration through the Data Protection Board of India portal. The Board will assess applications against the applicable requirements and may register qualifying companies. The list of registered Consent Managers will be made publicly available on the Board’s website. Other key provisions concerning the rights of Data Principals, the obligations of Data Fiduciaries, and the Board’s inquiry and penalty processes are scheduled to come into effect on 13 May 2027.