Is it mandatory to digitally authenticate all consents acquired from subscriber? What are the available modes for digital authentication?

Is it mandatory to digitally authenticate all consents acquired from subscriber? What are the available modes for digital authentication?

Yes, it is mandatory for Principal Entity(s) to get subscriber's consent digitally authenticated via OTP.




However, at inception, the Principal Entities can migrate existing consents for existing entities, processes and data. Migrated consent recorded under existing regulations is valid for a maximum of six months, after this time period consent to remain valid only after renewing it for the next 12 months.