Only 9 out of 100 surveyed company websites seek clear consent: PwC report

A report has shed light on the compliance of Indian enterprises with the Digital Personal Data Protection (DPDP) Act, 2023. After analysing 100 websites, the study found that 41 per cent of the websites reviewed specified data principal rights, such as correction, access, and erasure, in their online privacy policies.

The report, titled “Readiness of India Inc. for the Digital Personal Data Protection Act, 2023: A PwC Analysis,” revealed that a mere 9 per cent of organisations obtained consent in a manner that was free, specific, and informed. While 48 per cent of the organisations gave an option to retract consent, the procedure to do so was not as straightforward as giving it.