Consent manager framework: A key Big Tech concern

CONSENT MANAGERS MUST meet stringent registration criteria, including being based in India with a minimum net worth of ₹2 crore and implementing robust security measures to prevent data breaches.

Big Tech companies are also wary of the proposed guidelines for significant data fiduciaries – entities collecting and processing data. The draft rules prohibit the transfer of specific personal or traffic data outside India if identified by the government based on recommendations from a newly-constituted committee.

“This committee-based approach conflicts with the DPDPAct, which does not mention such a body. It introduces unnecessary bureaucracy and regulatory overreach,” an executive noted.