If the Board investigates, a Data Fiduciary must be able to demonstrate that it had valid consent and met its obligations. That is why tamper-evident, time-stamped consent records matter: they are the evidence you present. ConsentX binds every consent into a verifiable SHA-256 hash chain for exactly this purpose.
In ConsentX
Related terms
The DPDPA (DPDP Act 2023) is India's national data-protection law, requiring clear notice and free, specific, informed consent before processing personal data, with the DPDP Rules notified on 13 November 2025.
A consent receipt is a tamper-evident, time-stamped record of exactly what a user agreed to, including the purposes, the policy version and a verifiable hash, used as proof of valid consent.
Under India's DPDPA, a Data Fiduciary is the entity that decides why and how personal data is processed, equivalent to a 'controller' under the GDPR.