How it works
The Digital Personal Data Protection Act, 2023 lets people handle their consent to businesses through a consent manager registered with the Data Protection Board (section 6(7) to 6(9)). Through it, a person can give consent, review what they've agreed to, and withdraw it.
The dates come from the DPDP Rules, 2025 (G.S.R. 846(E)), notified on 13 November 2025:
- About 13 November 2026: consent managers can register with the Board (rule 1(3) and rule 4). The gazette went online a day after its date, so plan for the earlier reading.
- 13 May 2027: the core duties for businesses, including notice, consent and erasure, apply.
The government's release of 14 November 2025 (PIB) says consent managers must be Indian companies.
Why it matters for AI calling
Withdrawing consent has to be about as easy as giving it (section 6(4)). Once it's withdrawn, you stop processing that person's data within a reasonable time and have your processor stop too. If a customer withdraws through a consent manager, your calling lists need to reflect it.
DPDP consent isn't the same as TRAI consent. A consent manager deals with consent to use personal data. Whether you may place a promotional call to a number at all is decided by TRAI's rules: DND preferences and consent registered on the operators' DLT platform. A promotional AI call may need both.
How Kallix handles it
Each Kallix contact can carry its consent source and date. When a person asks the agent to stop calling, it records "do not call" as the outcome and that contact is left out of every campaign. You can send those outcomes to your CRM through webhooks and the API, and ask Kallix support to erase a person's data when they ask you to. Kallix is DPDP Act compliant and stores and processes call data in India.