What are DPDP consent requirements?
Consent must be free, specific, informed, unconditional, and unambiguous, obtained through a clear notice that lists the personal data and purposes being processed.
Bundled consent, dark patterns, and pre-ticked boxes are inconsistent with the Act. Each purpose should be separable where practical.
Withdrawal must be as easy as giving consent. Maintain verifiable consent records with version history for audits.