India’s DPDP Act gives users the right to withdraw consent as easily as they give it. In digital lending, that promise clashes with underwriting, monitoring and regulatory obligations, and the industry is seeking leeway.