While the DPDP Act relies on consent as the primary mechanism for user control, meaningful control is often elusive when it comes to health data. Health data is increasingly relational and often implicates multiple members of a family or group, making individual consent-based frameworks inadequate to fully protect privacy.
