Consent records: the six fields you must be able to produce
A boolean column in your CRM is not a consent record. The minimum schema that survives a Board query.
Category Data Privacy & DPDP Act
Writing a consent notice that actually holds up
Most Indian consent notices fail on the same three points. Here is the structure that does not.
Are you a Significant Data Fiduciary? The test, and why it matters
A higher DPDP obligation tier applies to designated organisations. The criteria are broader than volume alone.
What actually changed when the DPDP Rules were notified
The Act passed in 2023 and then did almost nothing for two years. November 2025 is what turned it into an obligation.
What actually triggers a DPDP penalty
The 250 crore figure is a ceiling for one specific failure, not a standard fine. How the tiers work and which marketing habits create real exposure.
Data fiduciary or data processor: which one is your agency?
The test is control, not custody. Why most Indian agencies are Data Fiduciaries on work they assume makes them processors.
Are your WhatsApp opt-ins DPDP compliant? A practical audit
Meeting Meta opt-in policy does not mean meeting DPDP. Six opt-in patterns, which hold up, and a twenty-number audit you can run today.
What the Consent Manager framework means for your marketing stack
Consent Manager registration opens 13 November 2026. It sits between your forms and your CRM, and most Indian stacks cannot yet honour an external withdrawal signal.
DPDP Act compliance checklist for Indian marketers
Almost every DPDP obligation lands on work marketing owns. The dates, the classification question, and nine things to fix before May 2027.