DPDP Act 2023
Consent Manager & Data Utility protection
SEC@R by Infinicue is a Data Utility protection solution — not a generic data protection product. Under India's Digital Personal Data Protection Act, 2023, it operates as a registered-style Consent Manager that safeguards purpose-bound data utility flows between fiduciaries while giving data principals control over consent and sharing.
Utility-first architecture
SEC@R protects data utility exchanges — trust signals and permitted summaries — not bulk personal data. No PAN, passwords, Aadhaar, or account numbers; only opaque UUIDs and security signals under DPDP.
Consent Manager ID
secar-cm-v1
Cryptographic proof hashes for every grant and withdrawal; channel and notice version recorded.
Consent purposes
- Trust verificationCore (notice)
- Device enrollmentCore (notice)
- Fraud analyticsOpt-in
- Geo intelligenceOpt-in
- Data utility sharingOpt-in
Data principal rights
- Right to access personal data
- Right to correction and erasure
- Right to withdraw consent
- Right to grievance redressal
- Right to nominate another individual
Data Utility protection
SEC@R secures data utility sharing — not raw personal data stores. Users explicitly authorize permitted categories (e.g. trust score summaries) with another fiduciary; each grant is time-bound, revocable, cryptographically auditable, and tied to the active privacy notice.