India has taken a significant step toward strengthening data protection and user privacy with the Digital Personal Data Protection (DPDP) Act, which sets out new compliance standards for organizations managing digital personal data. In a landmark move, the Ministry of Electronics and Information Technology (MeitY) has shortlisted six companies to participate in the “Code for Consent: DPDP Innovation Challenge,” designed to create the foundational consent management infrastructure the Act demands. The initiative underscores the government’s commitment to ensuring lawful, transparent, and user-controlled data handling in the country’s digital ecosystem.
Jio Platforms, a major telecom and technology player, leads the group of shortlisted companies. Other participants in this challenge include IDfy (Baldor Technologies Pvt. Ltd., Mumbai), VertexTech Labs Pvt. Ltd. (Redacto, Bengaluru), Zoop (Quagga Tech Pvt. Ltd., Pune), Concur – Consent Manager (Mumbai), and Aurelion Future Forge Pvt. Ltd. (Chennai). These companies were chosen from a competitive pool of 46 applicants, with selection overseen by the National e-Governance Division (NeGD) and the MeitY Startup Hub. Their diversity reflects a mix of established enterprises and promising startups with experience in privacy, digital services, and secure data handling.
These six firms now enter a three-month coding phase, during which they must develop and present scalable and effective consent management solutions. Progress will be closely monitored by authorities through sprints and regular reviews focused on technological compliance, data security, ease of use, and ability to adhere to the DPDP architecture. Core requirements include ensuring that user consent is specific, revocable, and traceable, supported by multilingual dashboards, secure recordkeeping, audit trails, and strong API integration.
The broader impact of this project is substantial. Robust consent management systems will become a critical component for BFSI, fintech, healthcare, and digital service providers subject to the DPDP Act, establishing new industry standards for transparency and user control. As the enforcement of the DPDP Act draws nearer, the solutions developed by these companies will set benchmarks for user agency and privacy, helping redefine data practices and restoring consumer trust in digital platforms across India.
