Capped At What The Purpose Needs
Consent is limited to the data necessary for the specified purpose — the Act’s own telemedicine contact-list illustration.
Read the full guide: Section 6(1) — DPDP Act compliance guide
Watch in English
Summary
Saying yes once does not open everything.
Consent is limited to the data necessary for the specified purpose — the Act’s own telemedicine contact-list illustration.
Full transcript
Saying yes once does not open everything.
Consent is limited to the data
necessary for the specified purpose.
The Act gives its own example.
Pause. A telemedicine app wants your contacts.
You tap yes to both.
Consent still covers only the telemedicine.
The contact list was never necessary,
so agreeing did not bring it inside consent.
Necessity is the cap, not your tap.
s.6(1) and its illustration — Digital Personal Data Protection Act, 2023 + Rules, 2025
In force from 13 May 2027