India DPDP Rule 4 Deadline in November 2026 and What CTOs and Engineers Must Build for Consent Manager APIs

DPDP ACT RULE 4 INTEROPERABILITY ARCHITECTURE
┌────────────────────────────────────────────────────────┐
│ Data Principal (Consumer / User)                      │
└──────────────────────────┬─────────────────────────────┘
                           │ 1. Manages all consents via single app
                           ▼
┌────────────────────────────────────────────────────────┐
│ Registered Consent Manager (MeitY Registered Entity)   │
│ - Interoperable Consent Dashboard                      │
│ - Cryptographically Signed Consent Artifacts (JWT)     │
└────────────┬─────────────────────────────┬─────────────┘
             │                             │
             │ 2. Issues Consent Artifact  │ 3. Issues Revocation Webhook
             ▼                             ▼
┌────────────────────────────────────────────────────────┐
│ Data Fiduciary Backend (Your Application API Gateway)  │
├────────────────────────────────────────────────────────┤
│ - Consent Ingestion & Verification Endpoint            │
│ - Purpose-Bound Database Access Layer (Row-Level Sec) │
│ - Downstream Processor Revocation Dispatcher           │
└────────────────────────────────────────────────────────┘

1
2sql
3-- 1. Enum defining statutory consent states
4CREATE TYPE consent_status AS ENUM (active, withdrawn, expired, suspended);
5
6-- 2. Master table tracking verified processing purposes
7CREATE TABLE processing_purposes (
8    id VARCHAR(64) PRIMARY KEY, -- e.g., PURPOSE_ORDER_DELIVERY
9    name VARCHAR(255) NOT NULL,
10    description TEXT NOT NULL,
11    data_retention_days INT NOT NULL,
12    is_essential BOOLEAN DEFAULT FALSE,
13    created_at TIMESTAMPTZ DEFAULT NOW()
14);
15
16-- 3. Consent Artifact Ledger (Immutable Audit Trail)
17CREATE TABLE consent_artifacts (
18    id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
19    data_principal_id VARCHAR(128) NOT NULL, -- User identifier (salted hash)
20    consent_manager_id VARCHAR(64) NOT NULL, -- Registered Consent Manager ID
21    notice_version VARCHAR(32) NOT NULL,     -- e.g., v2.1_hi (Hindi Notice v2.1)
22    purpose_id VARCHAR(64) REFERENCES processing_purposes(id),
23    status consent_status DEFAULT active,
24    consent_token_jwt TEXT NOT NULL,         -- Cryptographically signed JWT artifact
25    granted_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
26    expires_at TIMESTAMPTZ NOT NULL,
27    withdrawn_at TIMESTAMPTZ,
28    withdrawal_reason TEXT
29);
30
31-- Index for high-throughput query verification during API requests
32CREATE INDEX idx_consent_lookup 
33ON consent_artifacts(data_principal_id, purpose_id, status)
34WHERE status = active;
35

1
2sql
3-- Enable RLS on the customer profile table
4ALTER TABLE customer_profiles ENABLE ROW LEVEL SECURITY;
5
6-- Allow application workers to read customer data ONLY IF active consent exists
7CREATE POLICY enforce_dpdp_consent ON customer_profiles
8FOR SELECT
9USING (
10    EXISTS (
11        SELECT 1 FROM consent_artifacts ca
12        WHERE ca.data_principal_id = customer_profiles.user_id
13          AND ca.purpose_id = PURPOSE_PROFILE_DISPLAY
14          AND ca.status = active
15          AND ca.expires_at > NOW()
16    )
17);
18

1
2json
3{
4  "consentArtifactId": "cm-art-89234190-2026",
5  "dataPrincipal": {
6    "identifierType": "phone_sha256",
7    "identifierValue": "7f83b1657ff1fc53b92dc18148a1d65dfc2d4b1fa3d677284addd200126d9069"
8  },
9  "purposes": [
10    {
11      "purposeId": "PURPOSE_KYC_VERIFICATION",
12      "validUntil": "2027-11-13T23:59:59Z"
13    },
14    {
15      "purposeId": "PURPOSE_ACCOUNT_MAINTENANCE",
16      "validUntil": "2029-11-13T23:59:59Z"
17    }
18  ],
19  "noticeLanguage": "mr", // Marathi
20  "signature": "MEQCID3k8...[Base64 ECDSA Signature]..."
21}
22

REVOCATION EVENT PIPELINE
┌──────────────────────────┐
│ Consent Revocation API   │
└────────────┬─────────────┘
             │ 1. Produce event (DPDP_CONSENT_REVOKED)
             ▼
┌────────────────────────────────────────────────────────┐
│ Durable Message Bus (Kafka / RabbitMQ / AWS SQS)       │
└────────────┬─────────────────────────────┬─────────────┘
             │                             │
             ▼                             ▼
┌──────────────────────────┐  ┌──────────────────────────┐
│ Consumer A: Core DB      │  │ Consumer B: Processor    │
│ Updates status='withdrawn'│ │ Webhook Dispatcher       │
│ Evicts cached Redis keys │  │ Informs CRM, AdTech, ESP │
└──────────────────────────┘  └──────────────────────────┘

1
2typescript
3import { Kafka } from "kafkajs";
4import { db } from "./database";
5import { redisClient } from "./cache";
6
7const kafka = new Kafka({ clientId: "dpdp-worker", brokers: ["kafka:9092"] });
8const consumer = kafka.consumer({ groupId: "dpdp-revocation-group" });
9
10export async function runRevocationPipeline() {
11  await consumer.connect();
12  await consumer.subscribe({ topic: "dpdp-consent-revocations", fromBeginning: true });
13
14  await consumer.run({
15    eachMessage: async ({ message }) => {
16      const event = JSON.parse(message.value!.toString());
17      const { dataPrincipalId, revokedPurposes } = event;
18
19      console.log(`Processing DPDP Revocation for user: \${dataPrincipalId}`);
20
21      // 1. Invalidate cached consent status in Redis immediately (Sub-millisecond)
22      const cacheKeys = revokedPurposes.map(
23        (p: string) => `consent:\${dataPrincipalId}:\${p}`
24      );
25      await redisClient.del(cacheKeys);
26
27      // 2. Mark database record as withdrawn
28      await db.query(
29        `UPDATE consent_artifacts 
30         SET status = withdrawn, withdrawn_at = NOW() 
31         WHERE data_principal_id = $1 AND purpose_id = ANY($2)`,
32        [dataPrincipalId, revokedPurposes]
33      );
34    },
35  });
36}
37