Skip to content
GK24

Consent Manager Registration Under DPDP Act Comes Into Effect

The Consent Manager registration framework under the DPDP Act, 2023 took effect, and MeitY Secretary S. Krishnan opened the dpbi.gov.in portal for applicants.

By Published · 2 min read
Consent Manager Registration Under DPDP Act Comes Into Effect — GK24 title card

Why in News

On 14 November 2026 the Ministry of Electronics and Information Technology announced that the Consent Manager registration framework under the DPDP Act, 2023 had come into effect, and MeitY Secretary S. Krishnan launched the dpbi.gov.in portal for applications.

India’s personal data law moved another step towards full working order. The Ministry of Electronics and Information Technology said on 14 November 2026 that the part of the law dealing with the registration of Consent Managers had begun to operate from 13 November 2026. To put it to use, MeitY Secretary S. Krishnan opened an online gateway at dpbi.gov.in through which companies may file their applications.

The law calls an ordinary person whose data is being handled a Data Principal. A Consent Manager is a company on the register of the Data Protection Board of India whose task is to hand that person a single counter from which permission over personal data can be granted, looked over, altered or taken back. The counter must be easy to reach, plain about what it shows, and built so that it can talk to other systems. The duty of a Consent Manager runs to the person whose data it is, and not to the business gathering the data — that, more than anything, is what the design is meant to secure.

Who may apply

A company has to be incorporated in India to be considered. It must also be able to show skill in technology, strength in day-to-day operations and sound finances, with a net worth no lower than ₹2 crore. Every application will be weighed by the Board against those conditions, and the names of the firms it clears are to be listed openly on the Board’s own website so that the public can check who is on the roll.

A rollout in stages

This registration window is only one slice of a timetable. The pieces that remain — what a Data Principal may demand, the duties loaded on a Data Fiduciary, and the Board’s own authority to hold an inquiry and impose a penalty — are listed to start on 13 May 2027. The working detail sits in the DPDP Rules, 2025, which the Ministry has placed on its website along with the text of the Act.

Why it matters for the exam

The Act was passed in 2023 and its rules notified in 2025, so the question paper now has three fixed pegs to hang a question on: the Board that registers, the portal that receives, and the two dates that divide the rollout. The ₹2 crore floor on net worth and the condition that the applicant be an Indian company are the kind of eligibility detail that a one-mark question is built from.

Important Facts

FrameworkRegistration of Consent Managers under the Digital Personal Data Protection (DPDP) Act, 2023
In force from13 November 2026
Portaldpbi.gov.in
Launched byS. Krishnan, Secretary, Ministry of Electronics and Information Technology (MeitY)
Registering authorityData Protection Board of India
Minimum net worth₹2 crore
Who may applyCompanies incorporated in India with technical, operational and financial capacity
RulesDPDP Rules, 2025
Remaining provisions from13 May 2027

Exam Point of View

Remember the Act (DPDP Act, 2023), the rules (DPDP Rules, 2025), the date the framework began (13 November 2026), the portal (dpbi.gov.in), who launched it (MeitY Secretary S. Krishnan), the body that registers (Data Protection Board of India), the minimum net worth (₹2 crore) and the date the remaining provisions begin (13 May 2027).

Practice Questions

Q1.Science & TechnologyEasy

The Consent Manager registration framework that came into effect in November 2026 is part of which law?

  1. A.The Information Technology Act, 2000
  2. B.The Digital Personal Data Protection Act, 2023
  3. C.The Right to Information Act, 2005
  4. D.The Aadhaar Act, 2016
Show answer
Correct answer: B. The Digital Personal Data Protection Act, 2023

The framework for registering Consent Managers is a part of this Act, and it began to operate from 13 November 2026, with the working detail supplied by the DPDP Rules, 2025.

Q3.Science & TechnologyMedium

Which body registers Consent Managers and will publish the list of those registered?

  1. A.Telecom Regulatory Authority of India
  2. B.Data Protection Board of India
  3. C.Competition Commission of India
  4. D.National Payments Corporation of India
Show answer
Correct answer: B. Data Protection Board of India

A Consent Manager is by definition an entity registered with this Board, and it is the Board that will test each application against the eligibility conditions, register the companies that qualify and place the list of registered Consent Managers on its website for the public to see.

Q4.Science & TechnologyHard

From which date are the remaining provisions of the DPDP Act, covering Data Principals’ rights and the Board’s penalty powers, scheduled to take effect?

  1. A.13 November 2026
  2. B.1 April 2027
  3. C.13 May 2027
  4. D.13 May 2028
Show answer
Correct answer: C. 13 May 2027

The law is being brought into force in stages. The stage that has just opened is the registration of Consent Managers, which took effect from 13 November 2026 and is served by the portal dpbi.gov.in.

Frequently Asked Questions

What is a Consent Manager under the DPDP Act, 2023?

A Consent Manager is a company registered with the Data Protection Board of India that gives a Data Principal one accessible, transparent and interoperable platform on which to give, manage, review and withdraw consent for the use of personal data. A Consent Manager is accountable to the Data Principal.

What is the minimum net worth required to register as a Consent Manager?

A net worth of not less than ₹2 crore. The applicant must also be a company incorporated in India and must show adequate technical, operational and financial capacity. Applications are filed on the portal dpbi.gov.in and assessed by the Data Protection Board of India.

When do the remaining provisions of the DPDP Act come into effect?

On 13 May 2027. These cover the rights of Data Principals, the obligations of Data Fiduciaries and the inquiry and penalty processes of the Data Protection Board of India. The Consent Manager registration framework itself came into effect on 13 November 2026.

Sources

Useful for:SSCSSC CGLIBPS