Consently Blog
Expert insights on DPDPA 2023 compliance, data protection, and privacy best practices
DPDP Consent Manager Registration: Eligibility, the ₹2 Crore Net Worth Bar, and the Application Checklist
The Consent Manager framework goes live on 13 November 2026. Registration requires incorporation in India, a minimum net worth of ₹2 crore, and demonstrated technical capability to run consent across fiduciaries. Here is who qualifies, what the application needs, and — importantly — why most businesses should not apply.
Employee Data Under the DPDP Act: What Indian HR Teams Must Fix Before 2027
HR holds more sensitive personal data than marketing ever will — Aadhaar, bank details, medical records, background checks, CCTV, and now productivity monitoring. The DPDP Act covers all of it. The good news: much of it does not need consent. The bad news: most HR teams have no idea which parts do.
Significant Data Fiduciary Under DPDP: Obligations, DPO Requirements, Audits and Cross-Border Rules
Being designated a Significant Data Fiduciary adds four obligations no ordinary Data Fiduciary has: a resident DPO, an independent data auditor, annual Data Protection Impact Assessments, and algorithmic due diligence. MeitY has also signalled cross-border restrictions for SDFs. Here is what the designation means and how to prepare.
Can You Train AI on Indian Customer Data? What the DPDP Act Says About AI Training Data
India's DPDP Act has no research exemption for commercial AI, no legitimate-interests basis, and no concept of anonymised-enough. If you are fine-tuning a model on customer support transcripts or building a RAG index over user records, here is what the law actually requires — and what breaks.
The DPDP Act Deadline Calendar: Every Date Between Now and 13 May 2027
The DPDP Rules 2025 set two hard dates: 13 November 2026 for the Consent Manager framework and 13 May 2027 for every core obligation. MeitY has proposed compressing that further. Here is the month-by-month readiness calendar Indian businesses should be working to — with what to finish in each quarter.
What Is the Data Protection Board of India (DPBI)? Powers, Penalties, and How to Be Ready for It
The Data Protection Board of India is the body that will actually fine you under the DPDP Act — up to ₹250 crore per instance. Yet most Indian businesses can't say what it is, how it works, or what it will ask for. A plain-language explainer on the DPBI: composition, powers, penalty schedule, appeals, and the evidence you should be able to produce.
Rule 3 Decoded: How to Write a DPDP-Compliant Consent Notice (That Users Actually Understand)
Rule 3 of the DPDP Rules 2025 sets out exactly what a consent notice must contain. Most existing cookie banners and privacy pop-ups fail it. Here is how to build one that passes.
DPDPA vs GDPR: Key Differences Every Indian Business Must Know (2026)
DPDPA vs GDPR — how are India's data protection law and Europe's GDPR different? This authoritative side-by-side comparison covers legal basis, consent standards, penalties, enforcement, cross-border transfers, and what Indian businesses with EU customers must do.
Cookie Consent Laws in India 2026: DPDPA Requirements Explained
Do Indian websites need cookie consent? Yes — under DPDPA 2023 and DPDP Rules 2025. This guide explains exactly what cookie consent you need, which cookies require consent, what the consent notice must say, and the penalties for non-compliance.