← GlossaryConcepts
Consent
A free, specific, informed, unambiguous and withdrawable agreement to process personal data for stated purposes.
Consent is the most common legal basis for processing under the DPDPA. Valid consent must be free, specific, informed, unambiguous and as easy to withdraw as to give. When consent is withdrawn, processing for that purpose must stop. Operationalising consent at scale requires granular purposes, versioned notices and an audit trail — see consent management.