A practical consent and withdrawal worksheet

Complete one row for one purpose

Choose a real business activity and describe it without legal shorthand. Establish whether it relies on consent before using this worksheet.

• Activity and purpose; people affected; internal owner.
• Where the explanation appears and which version is used.
• Choices offered, including what happens if the person declines.
• Record retained, location, access and review owner.

Trace a changed choice

Use fictional test details. Ask the owner to demonstrate how a changed choice reaches the relevant systems, teams and providers.

• How the request is received and matched to the relevant activity.
• Which downstream handovers occur and who checks completion.
• How delayed or failed handovers are recorded and followed up.
• What the person is told and what evidence remains.

Example: optional updates

Keep a service enquiry separate from an optional update list. Test a person who requests help but declines updates, then a person who later withdraws the update choice. The service request should follow its stated purpose.

Review before reuse

This is a working checklist, not a ready-made legal notice or proof of valid consent. A statutory Consent Manager is a separate registered concept under DPDP.

MeitY: Digital Personal Data Protection Act, 2023 · MeitY: Digital Personal Data Protection Rules, 2025