Consent Management Under DPDP

Question

Accepted Answer

Section 6 of the DPDP Act sets a high bar for consent. It must be: freely given (no coercion or pre-checked boxes), specific (one purpose at a time), informed (plain-language notice attached), unambiguous (a clear affirmative action), and as easy to withdraw as it was to give.

Operationally, this means every consent event must be (a) captured with timestamp, purpose, channel, and language; (b) stored in a tamper-evident log; (c) enforced in real time across downstream systems (CRM, marketing, analytics, vendors); and (d) revocable through a self-serve preference centre.

A Consent Management Platform (CMP) like OneConsent unifies these four functions into one system of record, eliminating the spreadsheets and fragmented consents that lead to violations.