Consent Management in India: A DPDP Buying Checklist
Compare consent software by the records it keeps, the systems it connects and how it handles withdrawal. Check the supplier’s legal role.
Check what the supplier is offering
- Consent software helps your business record a person’s choice and pass changes to connected systems.
- The DPDP Act also defines a registered Consent Manager. Ask the supplier which service it provides and for evidence of any registration claim.
What to test before buying
| Check | Ask the supplier to show |
|---|---|
| Notice | The purpose shown to the person and the saved version of that notice. |
| Choice record | What the person chose, when they chose it and how to find the record. |
| Withdrawal | A changed choice reaching the app, customer database and messaging service. |
| Failed update | An alert, a retry and the owner who resolves the failure. |
| Access | Which staff can read, edit or download the records. |
| Download | A readable history that your team can use outside the tool. |
Try one marketing opt-out
- Create a fictional account and agree to receive promotional messages.
- Withdraw that choice through the normal customer route. Check the app, customer database, messaging tool and scheduled campaigns.
- Pause a system connection and repeat the test. Check whether the failure reaches someone who can fix it.
- Save the original choice, the change and the final result from every system.
Agree who does the surrounding work
- Name who writes the notice, approves data-use decisions and connects each system. Ask which of these services are included.
- Check where the supplier stores your records, who can access them and how they are deleted or returned when the contract ends.
- Compare fees using the same record volumes, websites and connections. Include setup, training, support and extra usage.
Check the legal role
- Read the DPDP Act and commencement schedule for the Consent Manager definition.
- The DPDP Rules 2025 set out the registration framework and phased start dates. Verify the current Board record for any supplier registration claim.
Sources and related guides
Frequently Asked Questions
What is the difference between the tool and the legal role?
The tool performs software tasks. The Consent Manager role requires registration with the Board under the DPDP framework. Check which one the supplier offers.
Which costs should the quote show?
Ask for setup, connections to your systems, record volumes, training, support and charges for moving your records when you leave.
Who should check the trial results?
Include the people responsible for customer requests, systems and legal review. Ask them to check the trial results, notices and decisions about data use.
Related Guides
Unified DPDP Compliance: Platform or Programme? (2026)
Vendors sell unified DPDP compliance platforms. What "unified" covers in a dashboard, what it leaves out, and how a unified programme differs.
DPDP Platforms in India: Types and Buying Checklist
Compare consent tools, privacy suites and data discovery tools. See which job each does and what to ask suppliers to show.
DPDP Platform vs Programme: What to Buy in 2026
Software platform, consultant, or all-in-one programme: what each gives you for DPDP compliance, what each leaves with you, and how to decide.
Connect the tool to the wider work
Review the MBS programme for coordinated assessment and implementation across your teams.
Review the MBS programme