Implementing Consent Management Under DPDP
Step 1: Define Data Types & Purposes
- What data do you collect?
- Why are you collecting it?
- Is the data sensitive?
- How long will you retain it?
Step 2: Create Consent Forms
Required elements:
- Plain-language explanation of data collection
- Explicit purpose of each data type
- Retention duration
- How users can withdraw consent
- Right to access, correct, delete data
- Contact info for grievances
NOT acceptable:
- Pre-ticked checkboxes
- Generic "agree to terms"
- Conflated purposes
