Key Facts

  • Phase-1 (13 November 2025): MeitY notified the DPDP Rules, 2025 and established the Data Protection Board of India (DPBI).
  • Phase-2 (13 November 2026): Mandatory registration protocols for designated Consent Managers begin.
  • Phase-3 (13 May 2027): Full substantive compliance duties for Data Fiduciaries (consent notices, data security, breach reporting) take effect.
  • Appellate Authority: Telecom Disputes Settlement and Appellate Tribunal (TDSAT) is designated as the appellate authority under the DPDP Act, 2023.

GK Context

  • A 'Consent Manager' under: Section 2(g) of the DPDP Act, 2023 is a person registered with the Data Protection Board who acts as a single point of contact to enable a Data Principal to give, manage, review, and withdraw consent through an accessible, transparent, and interoperable platform.
  • Right to Privacy was: affirmed as a Fundamental Right under Article 21 in the 9-judge bench judgment *Justice K.S. Puttaswamy (Retd.) vs. Union of India* (2017).

Static GK

  • DPDP Act, 2023 received: Presidential assent on 11 August 2023.
  • TDSAT (Telecom Disputes Settlement: and Appellate Tribunal): Established in 2000 under the TRAI Act, 1997.

Mains Analytical Framework

  • Digital Public Infrastructure & Privacy: Consent Managers operationalise user-centric data empowerment while balancing innovation and compliance.