DPDP, operational tool
Consent and Rights
Consent management, preference centre and data principal rights portal for the DPDP Act 2023. Withdrawal ends in deletion, legal holds are honoured, guardians are verified the way the Rules recognise, and every notice is recorded whether or not it arrived.
The demo is a data principal's portal on synthetic data. Sign in as asha@demo.co with the password demo1234, or create your own account and walk the notice, the preferences and a rights request. It resets each night.
What it does
- Records consent per purpose with the notice version, timestamp, channel and source on every record, in a versioned history that is never edited.
- Shows the notice inline at the point of collection: what is collected, why, required or optional, and that declining an optional purpose never affects the service.
- Ties withdrawal to a deletion decision for each purpose: automatic purge, or a task for an operator, with legal holds that block a purge where another law requires retention.
- Performs deletion inside the application by clearing every identifying field once no purpose justifies retention, and pushes propagation to processors with acknowledgements stored as evidence.
- Rights portal for access, correction, erasure, grievance and nomination, each with a reference, due date and resolution, and erasure wired into the deletion engine.
- Guardian verification for children and persons with disability by Aadhaar Secure QR (UIDAI signature validated), existing adult record, DigiLocker, or guardianship order. Tracking and advertising purposes are suppressed on a child account.
- Retention on the Third Schedule with a 48 hour pre erasure notice and a lapse sweep; the 90 day ceiling on rights and grievance responses.
- Tamper evident artefacts: every consent, withdrawal and notice hashed and chained, with a one click evidence pack per person or per period.
- A runtime consent validation API and signed webhooks, so your CRM or core system checks consent before it processes and hears about every change.
- Sign in by password or mobile code; operator sign in with SSO and MFA; owner, analyst and viewer roles; paper and kiosk intake for branches.
How it maps to the law
| Obligation | Where | What the product does | Status |
|---|---|---|---|
| Notice in the scheduled languages | Rule 3 | Notice and consent in English and the Eighth Schedule languages, chosen before sign in. | Built |
| Free, specific, informed consent per purpose | Section 6(1) | Purposes shown separately, nothing pre selected, optional purposes never gate the service. | Built |
| Withdrawal as easy as consent | Section 6(4) | One action in the preference centre, mirrored to the channel consent was given in. | Built |
| Cease processing and erase on withdrawal | Section 6(6), 8(7) | Per purpose deletion policy, legal holds, genuine in app deletion, processor propagation. | Built |
| Verifiable parental consent | Section 9, Rule 10 | Aadhaar Secure QR, existing record, DigiLocker, guardianship order. | Built |
| Rights of access, correction, erasure, grievance, nomination | Sections 11 to 14, Rule 14 | Self service portal with references, due dates and resolution. | Built |
| Retention and erasure notice | Rule 8, Third Schedule | Retention class per purpose, 48 hour notice, lapse sweep. | Built |
| Demonstrable consent | Section 6(10) | Hash chained artefacts and the evidence pack. | In build, September 2026 |
| Downstream enforcement | Section 6(6) | Runtime consent validation API and signed webhooks. | In build, September 2026 |
| Notices for legacy data | Section 5(2) | Re-consent campaigns tracked to response. | In build, October 2026 |
Honest limits
- DigiLocker verification awaits MeitY partner registration; until then the DigiLocker route is a demonstration that always goes to an operator.
- The Hindi and Marathi notice texts are drafts pending legal review; the other scheduled languages are machine assisted and need the same review before a regulated deployment.
- Deletion is complete inside the platform. In your downstream systems it is as complete as the propagation you wire; the platform records what each processor acknowledged.
Deployment
FastAPI and PostgreSQL with a React front end. Self hosted in your India region cloud, or hosted by us on an India region provider. REST API with OpenAPI docs, signed webhooks, integration keys per system. The public demo runs in Singapore with synthetic data.
See withdrawal end in deletion
Give consent, withdraw it, and watch the record clear. Then try the purpose under legal hold.