Privacy Resource

Consent Audit Checklist for DPDP Readiness

A practical checklist to review consent collection, withdrawal, evidence, and downstream data usage across digital journeys.

Last Updated: May 2026

Purpose

Why Consent Audits Matter

Consent is not only a website checkbox. It becomes an operational workflow across notices, forms, user journeys, withdrawal handling, analytics, CRM, marketing tools, and records.

This checklist helps teams review whether their consent journeys are clear, traceable, and practical to maintain.

Checklist

Consent Audit Checklist

Identify all consent collection points
Review clarity of privacy notices
Check whether consent is purpose-specific
Verify withdrawal mechanism exists
Check consent records and evidence
Review website forms and onboarding journeys
Review marketing preferences
Check cookie and analytics tracking behavior
Map consent status into downstream systems

Common gaps

Consent Gaps Businesses Often Miss

Disconnected Systems

Consent captured in one system may not reflect in CRM, marketing, analytics, or support tools.

No Withdrawal Workflow

Users may be able to submit consent, but businesses may not know how to stop downstream usage.

Over-Broad Consent

Consent statements may be vague, bundled, or unclear for specific processing purposes.