The first adjudication opened; the regime is real. Your rights, practically:
1. Informed consent — purpose-specific, not bundled: a loan app cannot condition disbursal on your contact list. The first enforcement notices target exactly this "consent theatre."
2. Withdrawal as easily as grant — the licensed consent managers now stood up give you one dashboard across every fiduciary.
3. Erasure once the purpose is served. 4. Correction of wrong data. 5. Grievance with statutory response clocks, then escalation to the Board.
6. Breach notification — 72 hours; the hospital chain that took 43 days is defending the statute's highest penalty band. 7. Children's protections — verifiable parental consent, no behavioural ads on minors: the gaming case now being heard.
The teeth: up to ₹250 crore per violation category. The gaps critics track: state exemptions, and cross-border rules pending a country list.
Two years of paperwork just became rights you can quote at an app. Quote them. Full guide on our tech desk.
