New Delhi, November 15, 2026: India has taken another step towards strengthening digital privacy with the implementation of the Consent Manager registration framework under the Digital Personal Data Protection (DPDP) Act, 2023. The Ministry of Electronics and Information Technology (MeitY) brought the registration framework into effect on November 13, 2026, and launched an online portal for eligible Indian companies to apply for registration.
The new framework is designed to give individuals greater control over how their personal data is shared and how their consent is managed across digital services.
The government has also established a minimum net worth requirement of ₹2 crore for companies seeking registration as Consent Managers.
What Is a Consent Manager?
A Consent Manager is an entity registered with the Data Protection Board of India that provides a platform through which individuals can manage consent relating to their personal data.
Under the framework, users will be able to:
- Give consent for the processing of their personal data.
- Review the consent they have previously provided.
- Manage their consent through an accessible platform.
- Withdraw consent when they no longer wish to allow a particular use of their data.
The idea is to make consent management more transparent and easier to handle across digital platforms.
For example, when a person shares personal information with a digital service, a Consent Manager could help that individual review and manage the permissions associated with the data, subject to the applicable framework.
Government Launches Online Registration Portal
MeitY Secretary S. Krishnan launched the online registration portal on November 14, 2026.
Eligible companies can submit their applications through the official portal:
Official Portal: https://dpbi.gov.in
The Data Protection Board of India will assess applications against the applicable requirements. Companies that meet the conditions may be registered as Consent Managers. The government has stated that the list of registered entities will be made publicly available on the Board's website.
The registration process is intended to ensure that organisations offering consent management services have the resources and capabilities required to operate reliably.
Who Can Apply to Become a Consent Manager?
The framework allows companies incorporated in India to seek registration, provided they meet the prescribed eligibility requirements.
One of the key financial conditions is a minimum net worth of ₹2 crore.
Applicants must also demonstrate adequate technical, operational and financial capacity to provide secure and accountable consent management services.
This means that companies interested in entering the privacy technology sector will need more than just a software platform. They will also need to meet the regulatory and operational standards set by the Data Protection Board.
How Could This Change India's Digital Ecosystem?
Digital services routinely process personal information, including contact details, account information and other user-provided data. Managing permissions across multiple platforms can be difficult for individuals.
A structured Consent Manager ecosystem could make it easier for users to understand where they have provided consent and exercise greater control over those permissions.
The framework may also create opportunities for businesses working in:
- Privacy technology and data governance.
- Cybersecurity and identity management.
- Regulatory compliance software.
- Enterprise data management.
- Digital consent and permission management.
For technology companies, the development could create a new area of demand for privacy-focused products and services.
However, the actual impact will depend on how registered Consent Managers operate, how widely businesses adopt the system and how easily individuals can use these services.
DPDP Act Implementation Will Continue in Phases
The Consent Manager registration framework is part of the phased implementation of the Digital Personal Data Protection framework.
According to MeitY, other key provisions concerning the rights of Data Principals, obligations of Data Fiduciaries, and the Data Protection Board's inquiry and penalty processes are scheduled to come into effect on May 13, 2027.
This means that the November 2026 development should not be interpreted as every provision of the DPDP Act becoming operational at once. Different parts of the framework are being implemented according to the announced timeline.
Businesses handling personal data should monitor official government notifications and prepare for the requirements applicable to their activities.
What Should Users and Businesses Do Now?
For individuals, the development is an important step towards a more structured system for managing digital consent. Users should continue to review privacy policies and permissions when using online services.
Businesses should assess how they collect, process and manage personal data. They should also follow official MeitY and Data Protection Board updates to understand which compliance requirements apply to them and when.
Companies planning to apply as Consent Managers should carefully review the eligibility criteria and registration requirements before submitting an application.
Conclusion
The launch of India's Consent Manager registration portal marks an important development in the country's digital privacy framework. With a minimum net worth requirement of ₹2 crore and registration under the Data Protection Board of India, the framework aims to establish accountable organisations that help individuals manage their personal data consent.
As the DPDP Act moves through its implementation phases, the effectiveness of the system will depend on practical adoption, transparent operations and user awareness.
For India's growing digital economy, stronger consent management could become an important part of building trust between individuals, businesses and online platforms.
Disclaimer: This article is based on the government's announcement dated November 14, 2026. The framework is being implemented in phases. Readers and businesses should refer to official MeitY and Data Protection Board notifications for applicable legal requirements.