India has opened an online registration route for companies seeking to operate as Consent Managers under the Digital Personal Data Protection framework, giving the new intermediary role a practical entry point a day after the relevant provisions took effect.
The Ministry of Electronics and Information Technology launched the portal on 14 November. Eligible Indian companies may apply through dpbi.gov.in, subject to a minimum net worth of ₹2 crore and an assessment of their technical, operational and financial capacity.
A registered Consent Manager is intended to let a Data Principal give, manage, review and withdraw consent through a platform that is accessible, transparent and interoperable. The model separates the consent interface from the Data Fiduciaries that seek permission to process personal data, while placing the intermediary under the supervision of the Data Protection Board of India.
The Board will assess applications and publish a list of registered Consent Managers. Registration therefore is not automatic on filing: applicants must satisfy the statutory conditions and remain subject to the duties attached to the role.
The launch follows the commencement on 13 November of the Consent Manager registration framework. Other core elements of the legislation — including broader rights and obligations, inquiry powers and penalty provisions — are scheduled to take effect on 13 May 2027. That staggered timetable gives the Board and prospective intermediaries six months to build the consent-management layer before the wider enforcement architecture becomes operational.
The ministry’s official announcement describes the portal as a step toward a usable, accountable consent system rather than a general licence for data processing. A Consent Manager will facilitate a person’s choices; the legal responsibility for processing remains with the entity using the data.
