Consent Manager
A distinct statutory, Board-registration concept under the DPDP framework; not a generic name for an ordinary internal workflow.
PRIVACY GLOSSARY
Keep the business example in mind when reading a technical term.
A distinct statutory, Board-registration concept under the DPDP framework; not a generic name for an ordinary internal workflow.
The party that determines the purpose and means of processing personal data, alone or jointly. Responsibilities need to be considered for each activity.
The individual the personal data relates to. For example, a customer whose delivery address you hold. Special representation provisions may apply.
A person who processes personal data on behalf of a Data Fiduciary.
A structured examination of a proposed use of personal data, its possible effects on people and the measures considered to address concerns.
A specific appointment or human advisory service, whose mandate and scope should be made clear. These descriptions are not interchangeable automatically.
A free review of your answers about current arrangements and open questions. It does not independently verify your practices.
Information about an individual who is identifiable by or in relation to that information.
A person asking about their information, a correction, removal or a concern. The applicable rights and identity checks depend on the situation.
A paid, scoped review of records and stakeholder discussions, producing a gap register and prioritised action plan. It is not a compliance certification.
A structured record of how personal data is used: activities, purposes, systems, owners, recipients and retention. The relevant legal recordkeeping requirements need their own review.
A Data Fiduciary or class notified by the Central Government under the Act. This site does not verify notification status.
Guidance reviewed 18 September 2026. General information; actual scope and requirements need review. DPDP Act · Final Rules · Commencement · Corrigendum