What is Consent management platform?
A consent management platform is software that collects, records and updates people’s consent to use their personal data, for each purpose and channel, and keeps proof of it. For Indian hospitals it supports compliance with the Digital Personal Data Protection Act by showing notices, capturing choices, honouring withdrawals and passing consent status to the CRM and messaging tools.
Why it matters for hospitals
Hospitals collect personal data in many places: website forms, call centres, WhatsApp, camps and the front desk. Without one consent record, a patient who opts out on one channel can still get messages on another. A central record also makes it practical to respond to data requests and audits.
How to put it into practice
- Map every point where you collect personal data and the purposes each one serves.
- Separate consent for care communication from consent for marketing, with different defaults.
- Make withdrawal as easy as giving consent, and sync it to SMS, WhatsApp, email and ad audiences.
- Keep a time-stamped record of the notice version each person saw.
- Review the DPDP rules as they are notified and phased in, and update flows accordingly.
The common mistake
Treating a cookie banner as a consent management platform. Most hospital data arrives through forms, calls and chats, not cookies.
An illustrative example
A hospital group connected website, call centre and WhatsApp opt-ins into one consent record. When patients withdrew marketing consent, campaigns stopped within a day across all channels, and complaints to the data protection officer fell. (Composite example, not a specific hospital.)
Related terms
Further reading
Part of the healthcare growth and digital glossary. Last reviewed 7 October 2026.