Digital Personal Data Protection Act · India
See consent the way people actually meet it.
Six fictional organisations, each a different kind of Data Fiduciary, all asking for permission through ConsentHub. Choose one, use its site as a customer would, and watch the decision become a signed, verifiable record.
Choose a use case
Each one is a separate organisation on ConsentHub, with its own notice, its own purposes and its own look.
Private sector
Mid-size companies that collect personal data to run a service.
Mid-size private fiduciary
Fintech and e-commerce lending
A digital lender asks three questions: may we assess you, may we verify you, may we market to you. Refusing marketing must not stop the loan.
MerchantPay · Digital lender
- 3 purposes
- Marketing is optional
- Optional PAN and income
Private fiduciary · health data
Healthcare and diagnostics
A lab holds some of the most sensitive records a person has. Sharing a report with your doctor is your choice, separate from the test itself.
Arogya Diagnostics · Diagnostics and health-check chain
- Reports and prescriptions
- Doctor sharing is separate
- Research is opt-in
Private fiduciary · adult learners
Education technology
A learning platform wants progress tracking, recommendations, placement sharing and exam proctoring. Each is a separate yes or no.
LearnLoop · Online learning platform
- Six separate purposes
- Webcam proctoring is optional
- Placement sharing is opt-in
Significant Data Fiduciary
Very large organisations with extra duties under the Act.
Significant Data Fiduciary
A very large consumer platform
Tens of millions of users, profiling, precise location, an in-app wallet and analytics abroad. Eight granular purposes, and extra duties the Act puts on a Significant Data Fiduciary.
Bharat Bazaar · National marketplace and wallet · Significant Data Fiduciary
- 8 granular purposes
- Location, ads and overseas analytics
- Audit, DPIA and an India-based DPO
Government
Departments whose core services rest on law, with consent only for the optional extras.
Government
e-District citizen services
Issuing a certificate rests on law, so it needs no consent. Fetching records from other departments, alerts and scheme matching are optional extras you choose.
e-District Services · District e-governance portal
- Service rests on law
- Optional record fetch
- Scheme matching is opt-in
Government
Labour department welfare
Registering a worker and paying benefits rests on law. Sharing details with training partners, employers and health schemes is separate and optional.
Shramik Seva · Worker registration and welfare portal
- Registration under law
- Bank details for benefits
- Partner sharing is opt-in
How a demo works
Four steps, the same for every use case
- 1
Choose a use case
Pick the kind of organisation you want to see: a lender, a clinic, a very large platform or a government department.
- 2
Use their site
Fill in a realistic form on that organisation's own website, in its own colours.
- 3
Decide on ConsentHub
You are handed to ConsentHub, a different company, to confirm it is you and allow or refuse each purpose.
- 4
See the record
Back on the organisation's site, you see exactly what it learned, with a signed receipt you can verify.
Why a different site? Consent given on a page the organisation itself controls proves less. On ConsentHub's own address, the record shows that you acted.