Citing flaws in the current consent mechanism in the digital world, the Justice Srikrishna panel on data protection has recommended sweeping changes to this framework to make data collectors liable for harm caused to an individual "as if the consent form were a product".

The panel has suggested a revamp in the consent mechanism under the new data protection framework, asserting that consent has to be free, informed, specific, clear and capable of being withdrawn, for it to be valid.