Rule 4 — the Consent Manager framework is operative from 13 November 2026. Full DPDP obligations follow on 13 May 2027.

The Enterprise DPDP Compliance Platform

Consent. Compliance. Confidence.

The date is fixed. The work is not.

Notice, consent, security safeguards, breach intimation, retention and erasure, and Data Principal rights all become enforceable on 13 May 2027, with penalties reaching ₹250 crore. Consent capture cannot be retrofitted the month before the record has to exist from the moment the first notice is served. Organisations starting now are configuring. Organisations starting late will be remediating.
Book a Live Demo

Capabilities

Multi-Channel Consent

Web, Mobile, WhatsApp, Email

API-First Integration

Seamless Integration With Enterprise Systems

Privacy By Design

Built-In Controls, Data Minimisation

Enterprise Grade Security

Encryption, RBAC, SSO, India Data Residency

Cloud & On-Premises

Flexible Deployment With Executive Dashboards

Benefits

01
Built For Indian Enterprises

BFSI, PSU & Government Grade Governance

02
Go Live In Weeks

Pre-Built DPDP Notice & Consent Templates

03
Audit-Ready From Day One

Immutable Logs, Pre-Built Reports

04
Centralized Consent Repository

Aligned to Data Principal And Fiduciary Obligations

05
Future-Ready

Adapts as DPDP Rules & guidance evolve.

§ Clause 1 — Platform Capabilities

Everything the Act requires you to control

Five capability areas, mapped directly to how Data Fiduciaries are expected to operate under the DPDP Act.
1.1

Multi-Channel Consent

Web, Mobile, WhatsApp, Email — one consent record regardless of channel.
1.2

API-First Integration

Seamless integration with your existing enterprise systems and workflows.
1.3

Privacy By Design

Built-in controls and data minimisation from the ground up, not bolted on.
1.4

Enterprise Grade Security

Encryption, RBAC, SSO, and India data residency as standard.
1.5

Cloud & On-Premises

Flexible deployment with executive dashboards, wherever your data must live.
§ Clause 2 — Consent Lifecycle

Eight stages. One continuous record.

From first notice to final withdrawal and archive, every stage of a consent’s life is logged, timestamped, and available for audit — the way a regulator would expect it documented.
This is not a workflow diagram. It is the record itself.

1

2

3

4

5

6

7

8

Notice

Clear, plain-language notice served before any data is processed.

Collect Consent

Consent captured across every channel, with full context preserved.

Manage Consent

Consent state tracked centrally against every purpose and processor.

Use Responsibly

Data use enforced strictly within the bounds of what was consented.

Review & Modify

Data Principals can review and update their consent at any time.

Withdraw Consent

Withdrawal is as simple as granting — no dark patterns, no friction.

Renew & Re-Grant

Expired or lapsed consent is re-solicited on a compliant schedule.

History & Archive

An immutable, timestamped record retained for audit and evidence.

§ Clause 3 — Statute of Duties & Rights

Fiduciary obligations, Principal rights — read side by side

The DPDP Act creates matching duties and entitlements. iConsent360 operationalises both halves in a single system.
Data Fiduciary Obligations

What you must do

i.

Notice & Consent Management

Plain-language notices, multi-purpose consent handling.

ii.

Security & Privacy Controls

RBAC, encryption, access control by design.

iii.

Data Retention

Configurable data retention policies.

iv.

Audit Trails & Reporting

Immutable logs, ready-made reports.

v.

Data & Grievance Management

Track and address data requests and grievances.

vi.

Child & Persons with Disability Consent

Supports lawful guardian consent for minors and persons with disabilities.

Data Principal Rights

What they can exercise

i.

Right to Notice

Clear notice before data is processed.

ii.

Right to Access

View personal data & processing details.

iii.

Right to Manage Consent

Self-service portal to grant, deny, withdraw, regrant consent.

iv.

Data Right

Raise & track requests to correct, complete, update & erase data.

v.

Right to Grievance Redressal

Raise & track grievances to resolution.

vi.

Right to Nominate

Nominate another to exercise rights on their behalf.

§ Clause 4 — Why ESS

Why enterprises choose this platform

Built by a 28-year enterprise IT delivery house — not a point-solution startup.
§ 4.1
Built For Indian Enterprises

BFSI, PSU & Government grade governance.

§ 4.2
Go Live In Weeks

Pre-built DPDP notice & consent templates.

§ 4.3
Audit-Ready From Day One

Immutable logs, pre-built reports.

§ 4.4
Centralized Consent Repository

Aligned to Data Principal and Fiduciary obligations.

§ 4.5
Future-Ready

Adapts as DPDP Rules & guidance evolve.

§ 4.6
Speak To Us

See the full platform in a live, guided walkthrough.

Consent. Compliance. Confidence.

Manage the complete consent lifecycle and meet your DPDP obligations — talk to our team
Book a Live Demo

See The Record, Not The Pitch.

Thirty minutes, screen-shared, using your consent scenarios not a canned demo. Bring your hardest case: multi-purpose consent, guardian consent for minors, or a withdrawal that has to propagate across four systems.