Consent Manager in Bangalore | Registration DPDP Rules India
Buried in the DPDP framework is a genuinely new kind of regulated entity: the Consent Manager. It is a registered intermediary that gives individuals a single, interoperable platform to grant, manage, review, and withdraw consent across every business that holds their data. For most companies, the Consent Manager is something to integrate with. For a few, it is a business opportunity worth registering for. Either way, the Consent Manager in Bangalore and across India sits at the centre of how consent will flow under the Act, and understanding it is no longer optional for anyone building consent-dependent products.
What Is a Consent Manager and Why Does It Exist?
A Consent Manager is an entity registered with the Data Protection Board that acts as a single point of contact through which a data principal can give, manage, review, and withdraw consent, in an interoperable and transparent way. The concept is modelled on the account aggregator framework in financial services: a neutral plumbing layer that puts the individual, not the business, at the centre of consent.
It exists to solve a real problem. Without it, an individual would have to manage consent separately with every fiduciary they deal with, an impossible task at scale. The Consent Manager in India consolidates that into one dashboard, and is required to act in a fiduciary capacity towards the data principal.
Who Can Register, and What Are the Conditions?
Registration is demanding. A Consent Manager must be a company incorporated in India with a minimum net worth of 2 crore, with that figure adjusted for inflation. It must operate a secure, interoperable platform meeting the data-protection and assurance standards the Board publishes, maintain proper governance and conflict-of-interest controls, and have directors and management of sound integrity.
There is a hard conflict rule: a Consent Manager cannot simultaneously act as a data fiduciary or processor for the same data principal whose consent it manages. It must keep consent records, reportedly for a period of years, and is subject to ongoing audit and Board oversight. Registration is expected to open around November 2026, twelve months after the Rules were notified.
Businesses considering consent manager registration DPDP Rules India should assess the eligibility criteria, financial requirements, platform standards and governance obligations before deciding whether to apply.
Should You Become One, or Just Integrate?
For the overwhelming majority of businesses, the answer is integrate. Your job is to design your consent flows so they can interoperate with registered Consent Managers, not to take on the capital, governance, and audit burden of becoming one.
Becoming a Consent Manager is a deliberate B2B play for entities that want to operate the consent infrastructure itself, fintech-adjacent platforms, identity providers, and specialist privacy-tech companies. It requires meeting the net-worth and platform standards and committing to a regulated, audited existence. The Consent Manager in India is a real opportunity, but only for those willing to run a regulated intermediary, not a side feature to bolt onto an existing product.
Frequently Asked Questions
Q1. What does a Consent Manager actually do?
It provides individuals with a single interoperable platform to give, manage, review, and withdraw consent across multiple data fiduciaries, acting in a fiduciary capacity towards the data principal and registered with the Data Protection Board.
Q2. What is required to register as a Consent Manager?
Among other conditions, the entity must be a company incorporated in India with a minimum net worth of 2 crore, operate a secure interoperable platform meeting the Board’s standards, maintain governance and conflict-of-interest controls, and cannot act as fiduciary or processor for the same data principal whose consent it manages.
Q3. When does Consent Manager registration open?
Registration is expected to open around November 2026, roughly twelve months after the DPDP Rules were notified, as part of the phased rollout. The exact timing depends on the Board operationalising the registration process.
Q4. Do we have to use a Consent Manager?
Not necessarily. The framework is interoperable, and businesses can run compliant in-house consent flows. Many will choose to integrate with Consent Managers, but using one is a mechanism, not a standalone mandate for every fiduciary.
Conclusion
The Consent Manager framework introduces a new way for individuals to manage consent across different organisations. Businesses should understand how interoperability may affect their consent systems, while potential applicants should carefully assess the financial, technical and governance requirements involved in registration.
For organisations exploring Consent Manager in Bangalore and across India, understanding consent manager registration DPDP Rules India is an important first step towards deciding whether to integrate with a registered intermediary or build a business around providing this service.
Disclaimer: This article is intended for general informational and educational purposes only and does not constitute legal advice. The applicability and interpretation of the Digital Personal Data Protection Act, 2023, and the DPDP Rules, 2025, depend on the relevant legal provisions and notifications. Registration timelines, eligibility requirements and operational standards should be verified against the latest official notifications and directions. Businesses considering registration or integration should consult a qualified legal professional.