Somewhere in a dispute a few years from now, a company will tell the Data Protection Board: "The user consented." And the Board will ask the only question that matters: "Show me." Not the terms of service, not proof the account exists — this person's free, specific, informed, unconditional, unambiguous consent, given by a clear affirmative action, for this specified purpose. In that moment, every pre-ticked box and bundled agreement will either stand as evidence or collapse as theatre.

This episode dissects the centrepiece of the entire statute, adjective by adjective. Free — why the pressure the law cares about is structural, the service-held-hostage test, and why employee consent is inherently suspect. Specific — the death certificate of bundled consent, the unbundling design consequence, and the necessity limit: consent operates only over data the purpose actually needs, with the Act's own telemedicine illustration showing that over-collection is collection without a basis. Informed — how notice defects corrode every consent built on them. Unconditional — no consent-as-toll-booth. Unambiguous, with clear affirmative action — why silence, inactivity, pre-ticked boxes and "continuing means agreeing" are all dead, and what lives.

Then the provision that turns five adjectives into an engineering requirement: the burden of proving valid consent sits on the Data Fiduciary — a logging specification demanding who consented, to what purpose-version, through which notice-version, when and how, producible years later. The audit test that exposes most systems: "show me the record for a random user from eighteen months ago." Plus severability, the Consent Manager integration seam every architecture should design for today, and the closing reframe for product teams: the five adjectives as a description of a respectful product — honest, unbundled, reversible consent earning better data and fewer complaints than the dark patterns it replaces.

DPDP Daily takes India's Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025 out of the statute book and into real life — for compliance officers, lawyers, founders, small business owners and citizens. One practical episode every day, no jargon.

I'm Harmeet Singh Kapoor, author of the DPDP Act Compliance Handbook: From Law to Ground Reality.

Keywords: Section 6 DPDP, valid consent, consent requirements India, affirmative action consent, bundled consent, dark patterns, consent logging, burden of proof consent, consent manager, DPDP compliance.

Connect with me:
💼 LinkedIn: https://www.linkedin.com/in/hskapoor/
📄 Facebook: https://www.facebook.com/satarkintelligence
▶️ YouTube: https://www.youtube.com/@DPDPdaily
🎙️ Apple Podcasts: https://podcasts.apple.com/us/podcast/dpdp-daily/id6793257111
𝕏 X: https://x.com/TheOtherKapoor

One practical DPDP insight every morning on LinkedIn, Facebook and X — and the DPDP Act Compliance Handbook: From Law to Ground Reality coming soon.

This episode is educational commentary, not legal advice. The DPDP framework is in phased implementation and positions described may evolve through notifications, Board publications and judicial interpretation. For decisions affecting your organisation or your rights, consult a qualified professional with your specific facts.