Consent, in practice.
Notes from building a consent platform for India's DPDP framework — what the Rules actually require, what is harder than it looks, and what we got wrong on the way.
The Biggest Gap in DPDP Implementation Isn't Technology. It's the Data Processing Agreement
Recurring gaps in Data Processing Agreements reviewed across a year of DPDP engagements — and why the agreement, not technology alone, allocates responsibility between fiduciary and processor.
Being a Consent Manager vs using one: what actually starts on 13 November 2026
A DPDP Consent Manager is a registered intermediary with a ₹2 crore net worth floor, not a CMP. What starts in November 2026, and what liability never moves.
Consent in 22 Languages Is a Versioning Problem
The DPDP Act's language duty sits in Sections 5(3) and 6(3), not the 2025 Rules — and 22 scheduled languages means 11 scripts and a notice-version ledger.
Nine and a Half Months: The DPDP Engineering Critical Path to 13 May 2027
Only three provisions commence in November 2026. The rest land on 13 May 2027 — and discovery, consent evidence and retention code eat three of four quarters.
Ready to make it real?
Every post here comes out of building the platform. If you want to see it working against your own data, that takes 30 minutes.