DPDP Act: Consent Manager Registration Opens, ₹2 Crore Net Worth Required

DPDP Act: Consent Manager Registration Opens, ₹2 Crore Net Worth Required

New Delhi, Nov 14: The Centre has taken another major step towards strengthening digital data privacy in India with the commencement of the Consent Manager registration framework under the Digital Personal Data Protection (DPDP) Act, 2023.

 Representational Image 

The Ministry of Electronics and Information Technology (MeitY) has opened the registration process for eligible Indian companies seeking to operate as Consent Managers, enabling individuals to exercise greater control over how their personal data is shared and used.

MeitY Secretary S. Krishnan formally launched an online registration portal, dpbi.gov.in, on Friday, November 13, through which eligible companies can submit their applications to the Data Protection Board of India.

Under the prescribed eligibility conditions, companies must be incorporated in India and possess adequate technical, operational and financial capabilities, including a minimum net worth of ₹2 crore.

What Are Consent Managers and How Will They Work?

Consent Managers will play an important role in India’s evolving digital privacy framework.

These are entities registered with the Data Protection Board of India that will provide individuals, referred to as Data Principals under the law, with a platform to give, review, manage and withdraw consent for the use of their personal data.

The system is designed to make consent management more transparent, accessible and interoperable, allowing individuals to exercise greater control over their digital information.

Consent Managers will also be accountable to the individuals whose consent they help manage, strengthening trust and responsibility within the country’s digital ecosystem.

Registration Process Opens for Eligible Indian Companies

With the launch of the online portal, eligible companies can now apply to the Data Protection Board of India for registration.

The Board will examine applications based on the prescribed eligibility requirements and assess whether applicants have the necessary financial strength, technological infrastructure and operational capacity to deliver secure and reliable consent management services.

Companies that successfully meet the conditions may receive registration. The Board will also publish the list of registered Consent Managers on its official website, allowing stakeholders to identify authorised service providers.

The minimum net worth requirement of ₹2 crore is intended to ensure that registered entities have sufficient financial resources to maintain accountable and dependable services.

Major DPDP Act Provisions to Come into Effect in May 2027

The commencement of the registration framework forms part of the Centre’s phased implementation of the DPDP Act and its accompanying rules.

Other important provisions relating to the rights of individuals, responsibilities of Data Fiduciaries and the Data Protection Board’s inquiry and penalty mechanisms are scheduled to come into effect on May 13, 2027.

The phased rollout is expected to provide organisations and other stakeholders with time to prepare for the new regulatory requirements.

Push to Strengthen India’s Digital Privacy Ecosystem

The registration initiative marks an important development in India’s efforts to establish a more transparent and accountable framework for handling personal data in the digital economy.

By enabling individuals to manage and withdraw consent through registered platforms, the framework aims to strengthen user control and improve accountability among entities processing personal information.

Further details about the DPDP Act, 2023, and the DPDP Rules, 2025, are available on the Ministry of Electronics and Information Technology’s official website, meity.gov.in.

Eligible companies can access the registration portal at https://dpbi.gov.in to review the requirements and submit their applications.