Lesson 4.2: What valid consent looks like
Consent that is not valid is the same as no consent. Learn the tests. This DPDPA 2023 course page explains what valid consent looks like in plain language.
What you will learn about what valid consent looks like
- Recall the elements of valid consent
- Spot invalid consent designs
- Apply language rules
Section 6 (what valid consent looks like)
Consent must be free, specific, informed, unconditional and unambiguous, with a clear affirmative action. It must signify agreement to processing for the specified purpose and be limited to the personal data necessary for it. The request must be in clear and plain language, in English or any language in the Eighth Schedule, with the contact details of the Data Protection Officer or other contact person.
Consent checklist: click each word
Select a numbered box to read more.
Valid versus invalid (what valid consent looks like)
| Design | Valid? |
|---|---|
| Unticked box with a plain statement | Valid |
| Pre-ticked box | Invalid |
| One tick for ads, analytics and sharing | Invalid, not specific |
| Silence or continued use | Invalid |
| Notice in small print | Weak, not informed |
Worked example
A fitness app says: By ticking you agree to us using your location for tracking runs. A separate untick box asks about marketing. Each purpose has its own choice.
Activity (5 minutes) (what valid consent looks like)
Open one of your consent forms. Mark each of the five tests as pass or fail.
Check your understanding of what valid consent looks like
Q1. A pre-ticked box is:
Q2. Consent must be limited to data that is:
Q3. Consent request language:
Educational material for learning purposes, not legal advice. Check the official text of the DPDP Act, 2023, the DPDP Rules, 2025 and MeitY notifications for the latest position.
