MeitY Opens Consent Manager Registration Portal

The Ministry of Electronics and Information Technology (MeitY) launched an online portal on 14 November 2026 for eligible Indian companies to apply for registration as Consent Managers under the Digital Personal Data Protection Act, 2023. The registration framework took effect on 13 November 2026.

Consent Manager registration

Applicants must be incorporated in India and demonstrate adequate technical, operational and financial capacity, including a minimum net worth of ₹2 crore. Consent Managers are intended to provide Data Principals with an accessible, transparent and interoperable platform to give, manage, review and withdraw consent for personal-data processing. The portal launch marks the Act’s second implementation phase.

Data Protection Board remains non-operational

The Data Protection Board of India (DPBI) was constituted by notification on 13 November 2025, with provision for a Chairperson and four Members. As of early November 2026, none had been appointed; applications were invited on 6 May 2026 and advertised on 6 June. The Board therefore cannot yet conduct inquiries, hear complaints or impose penalties. Key provisions on data-fiduciary obligations, Data Principal rights and the Board’s inquiry and penalty powers are scheduled to become enforceable on 13 May 2027. The Act allows penalties of up to ₹250 crore for serious violations.

Important Facts for Exams

• Consent standard: Valid consent must be free, specific, informed, unconditional and unambiguous, and expressed through a clear affirmative action.
• Complaint resolution: The Data Protection Board can refer complaints to alternative dispute resolution and accept voluntary undertakings from Data Fiduciaries.
• Territorial scope: The Act covers digital personal data processed in India, including offline-collected data later digitised, and overseas processing connected with offering goods or services to people in India.
• Enhanced fiduciary duties: Significant Data Fiduciaries must appoint an India-based Data Protection Officer and independent data auditor, and conduct periodic data-protection impact assessments and compliance audits.