Consent Managers: Your Data Control Hub

Consent Managers help you centrally manage your data sharing preferences across multiple companies and platforms

The Consent Manager Framework

Criteria

Strict eligibility requirements

Registration

Board approval process

Obligations

Fiduciary duties & records

Supervision

Board oversight

What Consent Managers Do

1

Collect Your Preferences

Gathers your consent preferences across multiple websites and apps

2

Manage Consent

Stores and manages your data sharing choices in one place

3

Enforce Choices

Ensures companies follow your preferences for data usage

4

Track Requests

Helps you submit rights requests (data access, erasure, etc.) to companies

5

Verify Compliance

Monitors if companies comply with your preferences and choices

Why Use a Consent Manager?

  • Single place to manage all your data sharing choices
  • Automated submission of data rights requests
  • No need to contact companies individually
  • Better visibility and control over your data
  • Better assurance of compliance because registered Consent Managers must meet legal requirements and are supervised by the Data Protection Board
  • Dispute resolution support

Legal Criteria to Register

(First Schedule, Part A)

  • Must be an Indian incorporated company
  • Net worth of at least ₹2 Crore
  • Sound financial condition & management
  • MOA/AOA must embed fiduciary obligations
  • Platform must meet standards set by the Board (interoperability, security, etc.)

Key Obligations

(First Schedule, Part B and Rule 4)

  • Must act in a fiduciary capacity (trustee of your data)
  • Must keep records of notices/consents/sharing for at least 7 years
  • Must not subcontract their obligations
  • Must provide dispute resolution mechanism
  • Must ensure data they relay is not used/read by them
  • Must publish transparency reports

Note: In addition to mandatory obligations, the Board may prescribe technical & operational standards; platforms must design accordingly.

For Businesses

If you plan to handle personal data via a Consent Manager, ensure the manager is on the registered list published by the Board.

Managing Consent: With vs Without Manager

AspectWithout ManagerWith Consent Manager
CostFree (but time-consuming)Nominal fee or free tier
Effort RequiredContact each company separatelyOne-time setup on platform
Time to ManageHours per companyMinutes for all
Track ComplianceManual trackingAutomated monitoring
Rights RequestsFill forms for each companyBulk submission
Legal SupportNo supportDispute resolution help

Registered Consent Managers (Coming Soon)

The Data Protection Board is establishing the list of registered Consent Managers. Check back soon for verified options.

Built with v0