verifiable consent

The Digital Personal Data Protection Rules, 2025 define the term "verifiable consent" simply by referencing other specific rules. According to the text, verifiable consent means a consent that is specified in either rule 10 or rule 11. The definition does not list any independent conditions, methods, or technical standards on its own.

Instead, this definition acts as a direct pointer. To understand exactly what steps must be taken or what standards must be met for consent to be considered verifiable, a reader must look directly at the text of rule 10 and rule 11.

This means that for a Data Fiduciary (the person or entity determining the purpose and means of processing personal data) to obtain verifiable consent from a Data Principal (the individual to whom the data relates), they must follow the exact specifications laid out in those two specific rules.

Key points

• The term "verifiable consent" is defined strictly by reference to rule 10 or rule 11. (Rule 2(1)(d))
• The definition does not contain its own separate requirements or methods for how consent is verified. (Rule 2(1)(d))

Common misreadings

• A reader might expect the definitions section to explain how to verify consent, but the text only points to rule 10 and rule 11 for those details.