Build a DPDP Act compliance programme
Data Protection Practice under the DPDP Act and Rules
Live cohort 36 teaching hours Up to 15 learners per cohort Not yet scheduled Fee not yet set
Build a DPDP compliance timeline for a named organisation against the Act’s and Rules’ actual dates.
- Format
- Live cohort
- Teaching hours
- 36 teaching hours
- Next cohort
- Not yet scheduled
- Fee
- Not yet set — published here as one GST-inclusive figure with a per-teaching-hour rate.
- Refund
- Full refund until your second class
- Cohort size
- Up to 15 learners per cohort · every draft reviewed
How a cohort on this course is planned to run
- Sessions a week
- Not yet decided. We will publish it before this cohort opens.
- Day and time
- Not yet decided. We will publish it before this cohort opens.
- Reviewed-draft turnaround
- 3 working days for a full draft, 2 working days for a short one, counted from the day after your draft arrives; the review is due by 11:59 pm India time on the last of them.
- Redraft
- One redraft of every reviewed document is included.
- Who marks your draft
- A faculty reviewer marks every submitted draft. Planned: up to 3 reviewers per cohort.
- Free sit-in session
- One free session, to watch only, once this course’s cohorts are scheduled. A guest does not submit a draft for review.
- Recordings
- Every class is recorded; you watch it in the site’s own player, with resume-where-you-left-off and playback speed up to 2x — on your phone and your laptop at once. How many classes a week, and on which days, is not yet decided.
Who this is for
For
- In-house counsel or a compliance officer standing up a DPDP compliance programme for their employer ahead of the enforcement dates.
- A privacy consultant or DPO-in-training advising multiple clients who needs a working command of the Rules, not only the Act.
- A corporate lawyer whose existing contracts, M&A or employment practice increasingly requires a DPDP-compliant clause or process.
Not for
- Anyone whose need is data-breach litigation or regulatory-enforcement defence strategy — this is a compliance-build course, not a disputes course.
- Anyone looking for a general cybersecurity or IT-security certification — this is legal and compliance practice, not technical security engineering.
- Anyone whose interest is contract drafting generally rather than DPDP specifically — see “Commercial Contract Drafting and Negotiation” for that.
What you leave with
- Build a DPDP compliance timeline for a named organisation against the Act’s and Rules’ actual dates.
- Draft an itemised consent notice compliant with the Rules’ notice requirements.
- Draft a breach-notification procedure with the correct notification windows.
- Determine whether a given entity meets Significant Data Fiduciary criteria and list the resulting obligations.
- Draft a DPIA for a sample data-processing activity.
How a cohort runs
Live session
You join a live class, in a browser, and work through that session's material with the rest of the cohort.
You draft
You produce a real document from the session, such as a clause, a notice or a checklist, not a summary of what was said.
By using our app, you consent to our collection and use of your data for any purpose.
Reviewed in green
The faculty marks up your draft the way a senior marks a junior's work: insertions in green, deletions struck through, with a note against anything that needs one.
By using our app, you consent to our collection and use of your data for any purpose.We will use your name, mobile number and e-mail address only to create your account and to send you updates about your orders. Tick the box to agree.You draft it again
You revise against the markup and produce the next draft. That is the loop, session by session, for the length of the course.
We will use your name, mobile number and e-mail address only to create your account and to send you updates about your orders. Tick the box to agree.
How this cohort runs
Delivered live, cohort by cohort, working through the actual text of the Act and Rules and drafting the artefacts session by session — not a recorded lecture series.
Who teaches it
Named here before enrolment opens, with the modules each person teaches.
Data protection
Lead faculty, Data protection — named before enrolment opens.
Teaches and reviews
- Module 1: DPDP Act & Rules — Structure, Definitions & Applicability6 hours
- Module 2: The Compliance Calendar6 hours
- Module 3: Consent Architecture & Notice Drafting6 hours
- Module 4: Data Fiduciary Obligations — Security Safeguards, Breach Notification & DPIA6 hours
- Module 5: Significant Data Fiduciaries, Data Auditors & Cross-Border Transfer6 hours
- Module 6: Grievance Redressal, Data Protection Board Practice & Drafting Clinic6 hours
You will see who teaches you before you can pay.
Syllabus
Module 1: DPDP Act & Rules — Structure, Definitions & Applicability6 hours
- Data Fiduciary, Data Processor and Data Principal under the Act.
- Personal data under the Act’s single-tier model; territorial and material applicability.
- Exemptions and their limits.
Module 2: The Compliance Calendar6 hours
- The Rules were notified on 14 November 2025.
- Holders of pre-existing personal data have until 13–14 November 2026 to revalidate consent or purge historical data collected before the Act.
- Significant Data Fiduciaries face a Q1 2027 deadline to appoint a Data Auditor and complete a Data Protection Impact Assessment.
- Full enforcement, including penalties of up to Rs 250 crore, begins 13–14 May 2027.
- Building a working compliance timeline around each of these dates.
Module 3: Consent Architecture & Notice Drafting6 hours
- Drafting an itemised consent notice under the Rules.
- Consent-manager mechanics and withdrawal, and its downstream effects.
- Drafting for children’s data and verifiable parental consent.
Module 4: Data Fiduciary Obligations — Security Safeguards, Breach Notification & DPIA6 hours
- Reasonable security safeguards under the Rules.
- The breach-notification timeline to the Board and affected Data Principals.
- Drafting a Data Protection Impact Assessment.
Module 5: Significant Data Fiduciaries, Data Auditors & Cross-Border Transfer6 hours
- Significant Data Fiduciary criteria and the resulting obligations.
- The Data Auditor’s role and independence requirements.
- Drafting for permitted cross-border data-transfer restrictions.
Module 6: Grievance Redressal, Data Protection Board Practice & Drafting Clinic6 hours
- The Data Principal’s right to grievance redressal.
- Data Protection Board procedure.
- Clinic: drafting a full notice-plus-consent-plus-breach-policy set for a fact pattern.
Total: 36 teaching hours. That is the figure the per-hour price will be calculated from.
Prerequisites
No law degree required, and no prior privacy-law background. You will read the Act and the Rules closely — this is not a plain-English introduction to “what is data protection”; it moves quickly into drafting.
What we have not settled yet
Published because you would find out anyway, and because a course page that only lists what is decided is not telling you what you are buying.
- Cohort dates
- Not yet scheduled. Everyone on the notify list gets the dates and the price at the same time. There is no early-bird price and no pre-booking.
- Faculty
- Lead faculty, Data protection — named before enrolment opens. We name the person teaching each module before you are asked to pay, not after.
- Price
- Not yet set. When it is set it appears here as one GST-inclusive figure, with the tax broken out and the price per teaching hour beside it. We do not quote prices on a call.
- Certificate
- Whether this course issues a completion certificate, and exactly what such a certificate would and would not say, is not yet settled. It will be answered on this page before a price appears on it. Whatever we decide, we will not describe any certificate as a qualification, a recognition or an accreditation, because it would not be one.
Three things you can hold us to
We have taught nobody yet, so we have no testimonials and will not manufacture any. These are the substitute: three promises you can check, each published in full and each enforceable against us.
Priced in the open
When a price is set it appears on the course page as one GST-inclusive figure, with the tax broken out and the price per teaching hour printed beside it. We do not quote prices on a call, and there is no price you get only by asking. We print a per-teaching-hour rate so you can compare us with anyone.
A refund with a clock on it
Cancel before your cohort starts, or after only its first class if you tell us before the second begins, and you are refunded everything you paid, including the tax, with no administration fee and no reason required. The clock stops the moment you tell us. After that, you get a full refund if we cancel, change or misdescribe what you bought.
You may criticise us in public
A written undertaking never to sue, threaten, send a takedown notice about, or gag anyone who criticises us — including criticism that is unfair or simply wrong. And the other half of it: we do not buy, write, solicit selectively, or delete reviews.
Questions we would ask
Do I need a law degree?
No. Every course is open to anyone who wants to learn the law it covers — lawyers, law students, and people who use the law at work.
Are the classes live, or recorded?
Live. A cohort meets on a schedule and works through the syllabus together. A recording is made available to the cohort afterwards through the site’s own player, which remembers where you left off and plays back at up to 2x speed.
What happens if I miss a session?
You watch the recording. Your right to a full refund runs on which class has happened, not on which classes you personally watched: ask before your cohort’s second live class begins and you still get everything back, whether or not you watched the first one live.
Will somebody telephone me?
No. There is no counsellor and no callback. If you join the notify list you get one e-mail when the dates and the price are published, and every e-mail carries a one-click way off the list.
Do I get a certificate?
Whether this course issues a completion certificate, and exactly what such a certificate would and would not say, is not yet settled. It will be answered on this page before a price appears on it. Whatever we decide, we will not describe any certificate as a qualification, a recognition or an accreditation, because it would not be one.
What if I want my money back?
Before your cohort starts: everything you paid, including the tax, with no administration fee and no reason required. The same is true after only the first class, if you ask before the second class begins. After that, a refund only in the cases the refund page lists. The whole policy is on the refund page, and no part of the detail takes the first sentence away.
When does the first cohort start, and what will it cost?
Neither is scheduled yet, and we will not pretend otherwise. Everyone on the notify list gets the dates and the price at the same time. There is no early-bird price and no pre-booking — being on the list buys you nothing except being told.