DPDP Act: Consent Manager registration opens on 13 November 2026; Rs 2 crore minimum net worth
TaxByKK · Compliance News · taxbykk.com14 Nov 2026
In short
The Ministry of Electronics and IT says the registration framework for Consent Managers under the Digital Personal Data Protection Act, 2023 came into effect on 13 November 2026, and its Secretary has launched the online portal dpbi.gov.in for eligible companies to apply to the Data Protection Board. A Consent Manager lets a person give, manage, review and withdraw consent over their personal data through one accessible platform. The release adds that the other main provisions, on the rights of Data Principals, the duties of Data Fiduciaries and the Board's inquiry and penalty processes, are scheduled to start on 13 May 2027.
- Authority
- Ministry of Electronics and Information Technology (release by PIB Delhi)
- Document
- PIB press release, Release ID 2336151, posted 14 November 2026
- Framework in force from
- 13 November 2026
- Portal
- https://dpbi.gov.in
- Who may apply
- Companies incorporated in India with adequate technical, operational and financial capacity
- Net worth
- Not less than Rs 2 crore
- Registering body
- Data Protection Board of India
- Remaining provisions
- Scheduled to come into effect on 13 May 2027
What changed
| Item | Before | Now |
|---|---|---|
| Consent Manager registration | - | Open from 13 November 2026; applications go to the Board through dpbi.gov.in and the Board may register qualifying companies |
| Eligibility | - | Indian company with adequate technical, operational and financial capacity and a net worth of at least Rs 2 crore |
| Public list | - | The list of registered Consent Managers will be published on the Board's website |
| Other DPDP provisions | - | Data Principal rights, Data Fiduciary obligations, and Board inquiry and penalty processes are scheduled from 13 May 2027 |
This is a press release, not the rules themselves. It does not give the application fee, the application form, the documents required or the processing time, and it does not list what the Rules require beyond the Rs 2 crore net worth. For the exact conditions, see the DPDP Rules, 2025 and the portal.
Who it applies to
- Companies that want to act as Consent Managers
- Businesses that handle personal data (Data Fiduciaries) planning for 13 May 2027
- Lawyers, CSs and CAs advising on data protection
- Individuals whose consent is managed through these platforms
What to do
- Interested companies: check the Rs 2 crore net worth test and the DPDP Rules, 2025 before applying on dpbi.gov.in.
- Data Fiduciaries: note 13 May 2027 for the main obligations and start gap analysis of consent, notice and breach procedures.
- Advisers: watch the Board's public list of registered Consent Managers.
Reference
Ministry of Electronics and IT, PIB press release ID 2336151, Consent Manager Registration Framework Comes into Effect; MeitY Secretary Launches Online Registration Portal, 14 November 2026.
Issued by MeitY
Read the official PDF: PIB release 2336151Written by TaxByKK from the official notification. Check the official text before you act on it.
Frequently asked questions
When did the Consent Manager framework start?
On 13 November 2026, according to the PIB release.
Who can register?
Indian-incorporated companies with adequate technical, operational and financial capacity and a net worth of at least Rs 2 crore.
Where do they apply?
To the Data Protection Board of India through the portal https://dpbi.gov.in.
When do the other DPDP provisions start?
The release says they are scheduled for 13 May 2027.