The DPDP Consent Deadline Is Closing In on India's Adtech Stack
India's Digital Personal Data Protection framework is moving from notified rules to hard deadlines. The Consent Manager registration window opens in November 2026, with full enforcement expected by 13 May 2027 and penalties running up to Rs 250 crore, leaving the advertising technology chain a finite runway to rebuild how consent is collected and proven.
- DPDP Rules notified: November 2025
- Consent Manager registration window opens: November 2026
- Full enforcement expected: 13 May 2027
- Maximum penalty: Rs 250 crore
- Consent standard: free, specific, informed, unambiguous, and withdrawable
- Consent Manager: a platform through which people grant, review and withdraw consent across Data Fiduciaries
Why Intermediaries Are More Exposed Than Platforms
The asymmetry in this regime is structural rather than incidental. Most adtech intermediaries are not user-facing, so they cannot collect consent directly and must depend on third parties to obtain it on their behalf, while remaining exposed to liability for how those third parties behave. Platforms sitting on deep, consent-linked purchase histories are advantaged by exactly the same rule, which is why the practical effect of DPDP is likely to be a further shift of leverage toward large first-party environments and away from businesses whose value rests on third-party signals.
Pre-Ticked Boxes and Bundled Permissions Will Not Survive
Requiring consent to be free, specific, informed and unambiguous, and withdrawable with a tap, rules out much of the current consent furniture across Indian apps and websites, where bundled permissions and pre-checked boxes remain common. The GDPR precedent is the one the industry keeps returning to: targeting volumes shrank, a large share of consent strings turned out to be invalid, and programmatic demand fell before settling into a cleaner ecosystem. Brands already piloting privacy-enhancing approaches such as data clean rooms and federated learning are positioning for the post-enforcement state rather than the current one.
More on Ad Tribe Ad Tech.
Advertisement
