What does the DPDP Act ask of a website?
The Act expects consent to be free, specific, informed, unconditional and unambiguous, given by a clear affirmative action (Section 6). In practice, that means non-essential cookies and trackers should not run before a visitor says yes, and a visitor should be able to say no and withdraw later.
When does this apply?
The Act is being brought into force in phases. We have seen 13 May 2027 given as the date its main consent and security duties start to apply. Confirm the timeline that applies to you with counsel; do not rely on this page for dates.
Does Consentea make me compliant?
No tool does by itself. Consentea gives you an opt-in consent banner and an auditable consent record, which cover the website part of consent. Notices, data-principal rights handling, breach reporting and vendor contracts are separate work. This page is not legal advice.
What about the 30-day rights-request timeline?
Consentea's request tracker uses 30 days as a default. That is our working default, not a statutory figure. The Rules were still being finalised when we built it, so check the current requirement with counsel.
What does it cost?
The scan is free. Consentea has a free tier; paid plans are on the pricing page.