DPDP Act 2023 · Obligations

Section 6: Consent

What Section 6 says, in plain English

Consent must be free, specific, informed, unconditional, unambiguous, and given by clear affirmative action. Limited to data necessary for the specified purpose. Can be withdrawn as easily as it was given.

What it means for you

The Section 6(1) illustration on the telemedicine app is the key example. Bundle consents fail. Withdrawal must propagate to processors within a reasonable window.

How this is operationalised in dcomply

The Consent Management module captures granular consent per purpose, records withdrawal, and propagates the withdrawal signal to processors via the connector layer.

Other sections in Obligations

Section 4: Grounds for processing Section 5: Notice Section 7: Certain legitimate uses Section 8: General obligations of Data Fiduciary Section 9: Children's data Section 10: Additional obligations for Significant Data Fiduciaries

Also useful

All 44 sections DPDP vs GDPR Scan your site Ask a DPO (free)

← Section 5: Notice All sections Section 7: Certain legitimate uses →