> ## Content Index > Fetch the complete content index at: https://thecyberstories.com/llms.txt > Use this file to discover other available public pages before exploring further. # Consent managers arrive November 13: a new way to control who gets your data - URL: https://thecyberstories.com/dpdp-consent-managers-explained/ - Published: 2026-11-03T04:33:10.000Z - Updated: 2026-11-03T04:33:10.000Z - Description: From November 13, 2026, companies can register with India's Data Protection Board as consent managers: platforms where you give, review and withdraw consent to share your data. What they are, the rules they must follow, and what to watch for. - Author: Raja Sekhar Thota - Tags: Privacy, #csv-6ae9612ebb92540f93998ef6, #Import 2026-11-03 21:46 ## In brief India's data protection law gives you the right to decide who uses your personal data. Exercising that right, across dozens of apps, banks and services, is the hard part. Consent managers are meant to help: registered platforms where you can see and control your consents in one place. Their rules take effect on November 13, 2026. ## What happens on November 13? The Digital Personal Data Protection Rules were [published in the Gazette on November 13, 2025](https://www.meity.gov.in/static/uploads/2025/11/53450e6e5dc0bfa85ebd78686cadad39.pdf?ref=thecyberstories.com). Rule 4, which sets up consent managers, [comes into force one year after](https://www.meity.gov.in/static/uploads/2025/11/53450e6e5dc0bfa85ebd78686cadad39.pdf?ref=thecyberstories.com). From then, a company can [apply to the Data Protection Board](https://www.meity.gov.in/static/uploads/2025/11/53450e6e5dc0bfa85ebd78686cadad39.pdf?ref=thecyberstories.com) to register as one, and the Board will [publish the registered ones on its website](https://www.meity.gov.in/static/uploads/2025/11/53450e6e5dc0bfa85ebd78686cadad39.pdf?ref=thecyberstories.com). Most of the other duties on companies, such as notices, security and breach reporting, start [eighteen months after publication](https://www.meity.gov.in/static/uploads/2025/11/53450e6e5dc0bfa85ebd78686cadad39.pdf?ref=thecyberstories.com), in May 2027\. Consent managers come first so the plumbing is ready. ## What is a consent manager? Think of it as a control panel for your consent. The platform must let you [give, manage, review and withdraw your consent](https://www.meity.gov.in/static/uploads/2025/11/53450e6e5dc0bfa85ebd78686cadad39.pdf?ref=thecyberstories.com) to companies that have joined it. The Rules give an example: a bank asks, through the platform, for your account statement. You approve it there, and the platform routes it, either from your digital locker or straight from your other bank. Later, you can see that consent in one list, and pull it back. ## The rules they must follow The Rules set a high bar, in writing: - **Indian and solid.** A consent manager must be a company incorporated in India, with [net worth of at least two crore rupees](https://www.meity.gov.in/static/uploads/2025/11/53450e6e5dc0bfa85ebd78686cadad39.pdf?ref=thecyberstories.com). - **On your side.** It must [act in a fiduciary capacity](https://www.meity.gov.in/static/uploads/2025/11/53450e6e5dc0bfa85ebd78686cadad39.pdf?ref=thecyberstories.com) towards you, the legal language for a duty of loyalty, and [avoid conflicts of interest](https://www.meity.gov.in/static/uploads/2025/11/53450e6e5dc0bfa85ebd78686cadad39.pdf?ref=thecyberstories.com) with the companies using it. - **Can't peek.** Data must pass through in a way where [the contents are not readable by it](https://www.meity.gov.in/static/uploads/2025/11/53450e6e5dc0bfa85ebd78686cadad39.pdf?ref=thecyberstories.com). - **Keeps the receipts.** Records of your consents must be kept for [at least seven years](https://www.meity.gov.in/static/uploads/2025/11/53450e6e5dc0bfa85ebd78686cadad39.pdf?ref=thecyberstories.com), and you can see them. - **Can be shut down.** The Board can [suspend or cancel its registration](https://www.meity.gov.in/static/uploads/2025/11/53450e6e5dc0bfa85ebd78686cadad39.pdf?ref=thecyberstories.com) if it breaks the rules. ## What remains unknown? Which companies will register, how fast, and which apps will join them. The Rules don't force anyone to use a consent manager; you can still deal with companies directly. ## What readers should do - **Check the Board's website** before trusting any app that claims to be a registered consent manager. Scammers may borrow the name. - **Read what you're approving.** One tap on a central platform can share a lot. Look at what data, to whom, and for how long. - **Use withdraw.** The point of a consent manager is that saying no later is as easy as saying yes. ## Sources - [Digital Personal Data Protection Rules, 2025 (Ministry of Electronics and IT, notified November 13, 2025)](https://www.meity.gov.in/static/uploads/2025/11/53450e6e5dc0bfa85ebd78686cadad39.pdf?ref=thecyberstories.com)