TagConsent maps every feature to specific regulation sections. Here's how we address DPDP, GDPR, ePrivacy, and EDPB guidelines.
Digital Personal Data Protection Act — India's primary data privacy legislation
| Section | Requirement | Status | How TagConsent addresses it |
|---|---|---|---|
| §6(1) | Consent must be free, specific, informed, unconditional, unambiguous, with clear affirmative action | ✓ | Explicit Accept/Decline buttons with equal prominence. Anti-dark-pattern engine enforces fair consent UX. |
| §6(2) | Consent request in clear, plain language with itemized purposes | ✓ | Banner displays each cookie category with its purpose. Multi-language support for India's linguistic diversity. |
| §6(4) | Withdrawal of consent must be as easy as giving it | ✓ | Persistent "Manage Consent" button always visible. One-click withdrawal via preferences modal. |
| §7(b) | Legitimate use exemption for service performance | ✓ | Strictly necessary cookies (session, CSRF, consent) exempt from consent requirement. |
| §8 | Purpose limitation — data used only for stated purpose | ✓ | Each cookie category tied to specific purpose. Scripts blocked until matching category consented. |
| §11 | Data Principal rights | ✓ | Full consent record access. Export consent artifacts for data subject requests. |
| §12 | Data Fiduciary obligations | ✓ | Audit trail of all consent actions. Compliance reporting dashboard for fiduciaries. |
| §30 | Penalties up to ₹250 crore for non-compliance | ✓ | Complete compliance coverage reduces penalty risk. Dark-pattern validation scores your setup. |
General Data Protection Regulation — the global gold standard for data privacy
| Article | Requirement | Status | How TagConsent addresses it |
|---|---|---|---|
| Art. 6 | Lawful basis for processing | ✓ | Consent captured per category with specific purpose. Necessary cookies mapped to legitimate interest. |
| Art. 7 | Conditions for consent | ✓ | No pre-checked boxes. Consent as easy to withdraw as to give. Clear separation of purposes. |
| Art. 7(3) | Right to withdraw consent at any time | ✓ | Persistent preferences button. One-click category toggle. Immediate script deactivation on withdrawal. |
| Art. 12-14 | Transparent information and communication | ✓ | Clear banner text. Each category described with purpose. No confusing language (anti-dark-pattern engine validates). |
| Art. 25 | Data protection by design and by default | ✓ | All non-essential cookies blocked by default. Opt-in model. Script blocking enforced before consent. |
The "Cookie Law" — EU rules on electronic communications privacy
| Article | Requirement | Status | How TagConsent addresses it |
|---|---|---|---|
| Art. 5(3) | Consent before storing/accessing information on user's device | ✓ | Script blocking ensures no cookies set before consent. Automatic categorization classifies each cookie. |
| Art. 5(3) exemption | Strictly necessary cookies exempt from consent | ✓ | Cookie categorization engine identifies necessary cookies (session, CSRF, consent) and exempts them. |
European Data Protection Board guidelines and Court of Justice rulings
| Reference | Requirement | Status | How TagConsent addresses it |
|---|---|---|---|
| Guidelines 05/2020 | No forced action — declining must not require excessive steps | ✓ | Accept and Decline are both one click. No "decline via preferences" dark pattern. |
| CJEU Planet49 | Pre-ticked boxes do not constitute valid consent | ✓ | Non-essential categories unchecked by default. Anti-dark-pattern engine validates this rule. |
| CJEU Planet49 | Scrolling is not consent | ✓ | Widget enforces: scrolling and dismissing the banner never counts as acceptance. |
Regulations covered
Requirements mapped
Dark pattern rules
Pass rate
DPDP penalties can reach ₹250 crore. Get compliant today.
Start free trial