What exactly counts as valid consent under DPDP for my checkout and signup forms?
A single 'I agree to Terms & Privacy Policy' checkbox at checkout doesn't cut it anymore, DPDP Section 6 requires consent to be granular and purpose-specific, so a customer who agrees to order-fulfilment data use hasn't automatically agreed to being added to your WhatsApp marketing list or having their data shared with an ad network. Consent has to be clear, in plain language rather than buried legalese, and just as easy to withdraw as it was to give, build a 'manage my data' option somewhere a customer can actually find, not just a footer link nobody clicks. Bundled all-or-nothing consent checkboxes are exactly the pattern regulators have flagged as non-compliant.
Go deeper
3 resources, 3 India-specific, 3 link-checked.
📄 Article
✓ Link checkedIndiaFreeBeginner
A dedicated, regularly-updated reference site tracking the DPDP Rules 2025 notification in plain language, a faster read than the Gazette text before you need the primary source.
The primary government notification of the DPDP Rules 2025, worth having as the source of record when a consultant or vendor cites a specific obligation, so you can check the actual text.
A concise video walkthrough of the Act, the 2025 Rules, and the May 2027 enforcement deadline, the fastest way to get the full timeline straight in your head in one sitting.
