The government is likely to direct data fiduciaries, such as social media platforms and internet intermediaries, to obtain separate user consent for optional and mandatory services, doing away with the “bundled” consent mechanism, according to people in the know.
The move, expected as part of the administrative rules under the Digital Personal Data Protection (DPDP) Act, would mean that consent management systems must not include options that allow users to agree to all purposes simultaneously. “The idea here is that both the data principal (users) and data fiduciaries are clear about the limitations. A user must know what they are