National
Consent Manager registration opens under India’s digital personal data framework
Nyaya Prep • Published • 2 min read

The registration framework for Consent Managers under the Digital Personal Data Protection Act, 2023 took effect on 13 November 2026. The announcement issued on 14 November 2026 confirmed the launch of an online registration portal by S. Krishnan, Secretary in the Ministry of Electronics and Information Technology. Eligible companies can use the portal to apply to the Data Protection Board of India.
The registration conditions require an applicant to be a company incorporated in India with a net worth of at least ₹2 crore. The Rules also require sufficient technical, operational and financial capacity. A Consent Manager provides a single contact point through which an individual can give, manage, review or withdraw consent using an accessible and interoperable platform. The registration milestone is part of phased implementation. It should therefore be read as the opening of this specific regulatory mechanism, rather than an announcement that all substantive obligations under the wider framework began on the same date.
Facts to remember
- Effective date of registration framework: 13 November 2026; announcement issued on 14 November 2026.
- Portal launched by S. Krishnan, Secretary, Ministry of Electronics and Information Technology.
- Eligible applicant: company incorporated in India; minimum net worth: ₹2 crore.
- Key provisions: Section 6(9) of the 2023 Act and Rule 4 of the 2025 Rules; registration authority: Data Protection Board of India.
Background
Section 6(9) requires Consent Managers to register with the Board subject to prescribed conditions. Rule 4 supplies the registration mechanism, while the First Schedule sets conditions and obligations. A Data Principal is the individual whose personal data is involved; a Data Fiduciary determines the purpose and means of processing. Distinguishing these roles helps explain the intermediary’s function.
Why it matters for exams
For Judiciary, AIBE and UGC-NET Law, connect the statutory section with the corresponding Rule and institutional roles. For CLAT, remember the commencement date, applicant threshold and phased implementation.
- DPDP Act
- Consent Manager
- Data Protection Board
- Privacy
- Rule 4