Description
Phase 2 of India's Digital Personal Data Protection Act enforcement begins. Provisions related to consent managers take effect, including registration of consent managers with the Data Protection Board of India (DPBI), obligations of consent managers, and DPBI powers to investigate breaches and impose penalties.
Requirements
- Register consent managers with DPBI if applicable
- Implement consent management frameworks
- Prepare for Phase 3 (May 2027) substantive provisions
- Document data processing practices for Indian data principals
- Review obligations as data fiduciary under DPDP Act
Applicable To
Data fiduciaries processing Indian personal dataConsent manager service providersSignificant data fiduciaries in India
Penalty Information
âš Penalties up to INR 250 crore (approximately USD 30 million) per violation.