For people who gave consent
Your consent stays your choice.
An organisation that uses Sehmat asked for your consent. You can see what you agreed to, change your mind, and use your rights under the DPDP Act at any time.
Your rights under the DPDP Act
What the law gives you.
The Digital Personal Data Protection Act, 2023 gives you these rights over your personal data. Organisations must honour them; most of their duties take effect on 13 May 2027.
Read the DPDP Act guide →Know what and why
Section 5What it meansA clear notice before you agree: what data is collected, for each purpose, and how to withdraw or complain, in English or one of the 22 scheduled languages.
How to use itYour notice and receipt are in My consents.
Withdraw your consent
Section 6What it meansAt any time, as easily as you gave it. The organisation must then stop using your data for that purpose.
How to use itWithdraw one purpose or all of them in My consents.
Access your data
Section 11What it meansA summary of your personal data, how it is used, and who it was shared with.
How to use itMake an access request in My consents.
Correct, complete or erase
Section 12What it meansFix wrong data, fill in missing data, update it, or have it erased when it is no longer needed.
How to use itMake a correction or erasure request in My consents.
Have a grievance answered
Section 13What it meansThe organisation must answer your complaint within 90 days. If you are not satisfied, you can complain to the Data Protection Board of India.
How to use itRaise a grievance and track it on the My request page.
Nominate someone
Section 14What it meansName a person who can use your rights if you die or cannot act yourself.
How to use itName a nominee in My consents.
Use a Consent Manager
Section 6What it meansManage your consents through a Consent Manager registered with the Board.
How to use itAppoint one from My consents, once Consent Managers are registered from 13 November 2026.
What you can do
Do it all from My consents.
See your consents
What you agreed to, with which organisation, and when. Download your receipts.
Withdraw
For one purpose or all of them, as easily as you agreed. It is recorded at once, and the organisation must then stop using your data for that purpose.
Get your data
Ask for a summary of your data and who it was shared with, in your language.
Correct or erase
Ask the organisation to fix, complete or delete your data.
Complain
Raise a grievance with the organisation. If it is not resolved, you can go to the Data Protection Board.
Name a nominee
Choose someone you trust to act for you if you die or cannot act yourself.
Your part
The Act asks a few things of you too.
Section 15 sets out your duties. Breaking them can lead to a penalty of up to ₹10,000.
Give true information
Do not hide or change facts when you give your details, or when you ask to correct them.
Be yourself
Do not pretend to be someone else when you give consent or make a request.
Complain honestly
Do not make false or frivolous complaints to an organisation or to the Board.
How to sign in
No password. Just a one-time code.
- 01
Find your organisation
Use the link in your message or receipt, which opens your organisation directly. Or enter the organisation code printed on your notice or receipt.
- 02
Say who you are
Enter your mobile number, email, your ID with the organisation, or the consent reference on your receipt. It starts with CNT-.
- 03
Get a code
We send a one-time code to the mobile number or email the organisation has on file for you.
- 04
Enter the code
Type the code in to see your consents, withdraw them, download receipts or make a request.
Questions
Common questions.
Why did I get a message from Sehmat?
An organisation you deal with, such as a hospital, school, bank or program, uses Sehmat to ask for your consent and keep a record of it. The message names that organisation.
Who should I contact about my data?
The organisation that asked for your consent. Its Grievance Officer is named on the notice and on your receipt. Sehmat keeps the record for the organisation and passes your requests to it.
My family uses one mobile number. How do I see only my consents?
After you enter the number, you are asked which person you are. Enter your ID, a consent number from your receipt, or your first name.
Where do I find the organisation code?
It is printed on your notice and receipt, and it is part of the link in your message. If you open the link, you do not need to type it.
I have a request number. Where do I check it?
Open Track a request, enter the number from your message or receipt, and confirm with the one-time code.
I gave consent on a paper form. Can I still see it?
Yes, if the organisation recorded it in Sehmat. Paper consents are kept the same way as online ones, and you can withdraw them in the same way.
What happens when I withdraw?
The organisation must stop using your data for that purpose. If the purpose was needed for a service, such as an account or a program, that service may stop too. Anything done before you withdrew stays valid.
I do not use a phone or email. Can I still withdraw or complain?
Yes. Tell the organisation in person, by phone or in writing, for example at the counter where you signed. It must act on your withdrawal or request in the same way.
I am a parent. How do I manage my child's consent?
If you gave consent for your child, you can see and withdraw it in My consents with your own mobile number or email. When your child turns 18, the organisation asks them for their own consent.
What if my complaint is not resolved?
The organisation must answer a grievance within 90 days. If you are not satisfied, you can complain to the Data Protection Board of India. The Board works online as a digital office. Keep your grievance number, because the Board expects you to have tried the organisation first.
What if the organisation no longer uses Sehmat?
Contact the organisation directly. It remains responsible for your rights. When an organisation stops using Sehmat, its personal data here is erased, and stored evidence is made unreadable.
How do I stay safe?
Never share your one-time code with anyone who calls or messages you. Sehmat will never ask for it, or for a password, by phone.
Ready to check your consent?
Sign in with a one-time code. It takes a minute.