Shopify privacy law · India
Shopify cookie consent in India
India's DPDP Act came into force in 2023 with rules being phased in through 2025–2026. Mandatory opt-in for personal data processing and explicit consent for any cross-border transfer.
Governing law: Digital Personal Data Protection Act, 2023 (DPDP Act)
Enforcement reality
The Data Protection Board of India (DPBI) is the enforcement body. The DPDP Act introduces 'Significant Data Fiduciaries' (SDFs) — high-volume processors who face additional obligations including impact assessments and a Data Protection Officer. For most Shopify stores under SDF thresholds, the headline obligations are clear, time-bound consent and a verifiable parental consent flow for under-18s. Maximum fine: ₹250 crore (~$30M).
Regulator: Data Protection Board of India (DPBI)
What Shopify merchants must do in India
- Clear, plain-language consent notice in English plus 22 scheduled Indian languages
- Opt-in consent for processing — no bundled or implied consent
- Verifiable parental consent for users under 18
- Right of correction, erasure, and grievance redressal (within 30 days)
- Data breach notification to DPBI within 72 hours
- Cross-border transfer requires consent or government-approved jurisdiction
How Consentico handles India
Consentico's geo-targeting detects India visitors at the edge and applies the right banner — opt-in posture for the local jurisdiction rules, with Google Consent Mode v2 signals and a per-decision audit log. The banner survives Shopify theme switches and uninstalls cleanly.
Related concepts
- Consent (GDPR)Freely given, specific, informed, and unambiguous indication of agreement. No pre-checked boxes, no implied consent from continued browsing.
- Lawful basisUnder GDPR, you must have one of six legal grounds to process personal data. For ecommerce: contract, legitimate interest, or consent.
- DSARData Subject Access Request — when an EU/UK resident asks you for a copy of, or deletion of, their personal data.
Compliant in India — in five minutes.
Free for stores under 5,000 banner views per month. No code, no theme edits.