In the year 2023, when India's Digital Personal Data Protection Act was passed, it was welcomed as a long overdue development in India's data protection framework. After nearly a decade of failed legislative efforts, a comprehensive data protection statute had finally materialized. The act begins with a language suggesting consent centric model of data governance: personal data may only be processed with the free, specific, informed, unconditional, and unambiguous consent of the data principal. Consent, accordingly, is presented as the Act's primary source of legitimacy...