How can users withdraw consent under DPDP?
Data principals may withdraw consent at any time; the Data Fiduciary must cease processing for that purpose unless another legal basis applies and inform the principal of consequences.
Provide a visible preference center, email workflow, or in-app control—not a buried legal page.
After withdrawal, stop marketing and non-essential processing promptly and document the timestamp for Board inquiries.