Live 20 practitioner certifications live · Free preview lessons on most courses Back to main site →
Data Protection

DPDP Act 2023: Professional Certification

India's Digital Personal Data Protection Act 2023 and DPDP Rules 2025

₹2,999 incl. 18% GST All-levels 6.2 hours 8 modules
Pricing update · Effective 6 October 2026
The founding cohort has closed. DPDP Act 2023 certification is now ₹2,999 (inclusive of 18% GST).
Already enrolled? Nothing changes for you — you keep full access through to certificate issue. Ready to go deeper? Follow this with DPDP Rules 2025 Deep Dive or the 90-day Implementation Practitioner.
8
Modules
38
Lessons
60
Exam questions
75%
Pass mark

A structured, citation-backed course covering the full Digital Personal Data Protection Act 2023 and the operational DPDP Rules 2025 notified by MeitY in November 2025. Lessons are written from the statutory text and triple-verified for accuracy.

What you will learn in this DPDP Act course

  • Understand the constitutional and policy origins of the DPDP Act
  • Identify the five roles defined by the Act and your organisation's position
  • Operationalise the rights of data principals across access, correction, erasure, grievance, and nomination
  • Implement notice, consent, security, retention, and children's data obligations
  • Build a RoPA, DPIA, consent register, and breach response runbook
  • Apply DPDP principles to AI systems, including the algorithmic due diligence duty in Rule 13
  • Navigate the Data Protection Board, penalty matrix, and appeals process

Prerequisites

  • No prior legal background required
  • Basic familiarity with how organisations collect and use personal data is helpful

Who should take this DPDP Act course

  • Compliance and privacy professionals
  • In-house counsel and DPOs
  • Founders, product managers, engineering leads
  • Auditors, consultants, and policy researchers

DPDP Act course fee, exam and certificate

  • Fee: ₹2,999 (inclusive of 18% GST). Lifetime access. One-time payment, future updates included. Module 1 is free to read before you pay.
  • Format: online and self-paced. 8 modules, 38 lessons. Start, pause and resume on any device.
  • Final exam: questions drawn from a 60-question bank, 75% to pass. 2 attempts per round, the next 2 unlock after 7 days.
  • Certificate: issued when you pass, with a public verify page that employers can check by certificate ID.
How this fits your compliance stack

The DPDP Act 2023 is the enabling statute, but the operational obligations sit in the DPDP Rules 2025 notified by MeitY in November 2025. Most Data Protection Officers pair this course with the deeper DPDP Rules 2025 / DPO Practitioner Certification for the consent-manager registration, breach reporting mechanics and Significant Data Fiduciary triggers. Teams selling to European customers additionally take the GDPR + DPDP Crosswalk to run one privacy programme across both regimes.

About the author
AJ
Adv. Joginder Poswal
Course Author. Advocate and author of "DPDP Compliance for Indian Businesses".

Adv. Joginder Poswal is the founder of Poswal Law Office and the author of "DPDP Compliance for Indian Businesses: A Practical Guide for SMEs, Startups, and Founders". He brings 18 years of IT operations experience to legal practice, which gives the course a perspective most DPDP material lacks: it does not just explain what the law says, it explains what it means for how your systems actually work. This course is based on the published book and the Government of India statutory text. It is intended as awareness material and does not constitute legal advice or solicitation.

inclusive of 18% GST
No account to create. We email you a one-click link.
How we use your personal data DPDP notice
  • What we collect: name, email, IP address (for security logging), and course progress.
  • Why: to email you the one-click access link, deliver lessons, issue your certificate, and (with your consent) send course updates plus a Day-7 follow-up about dcomply.
  • How long: kept until you unsubscribe or request erasure.
  • Your rights under the DPDP Act 2023: access, correction, erasure, and grievance redressal. Write to [email protected] to exercise any of them.
  • Unsubscribe any time using the link in every email we send you.
Certificate on completion. Pass mark 75%.
Curriculum

DPDP Act course syllabus

8 modules, 38 lessons. Click any module to expand.

Where India's data protection law came from, why it took six years, and how to read it.

  1. 1. Why this law, why now 8 min
  2. 2. How to read the law 7 min
  3. 3. Key definitions you must know 10 min
  4. 4. When does the Act apply to you? 8 min

Who is who, and why the role you sit in changes everything.

  1. 1. The Data Principal 7 min
  2. 2. The Data Fiduciary 9 min
  3. 3. The Data Processor 7 min
  4. 4. Significant Data Fiduciary and Consent Manager 9 min

Access, correction, erasure, grievance redressal, nomination, and the duties of a Data Principal.

  1. 1. Right to access information about personal data (Section 11) 7 min
  2. 2. Right to correction and erasure (Section 12) 8 min
  3. 3. Right of grievance redressal (Section 13) 6 min
  4. 4. Right to nominate (Section 14) 5 min
  5. 5. Duties of Data Principal (Section 15) 5 min

Notice, consent, security, retention, and the special rules for children's data and SDFs.

  1. 1. Lawful grounds for processing (Section 4) 6 min
  2. 2. Notice (Section 5 and Rule 3) 8 min
  3. 3. Certain legitimate uses (Section 7) 7 min
  4. 4. General obligations: security, breach, erasure, DPO contact (Section 8) 9 min
  5. 5. Children's data (Section 9 and Rule 10) 7 min

The practical artefacts every compliance program needs, with templates and worked examples.

  1. 1. Data mapping 8 min
  2. 2. Record of Processing Activities (RoPA) 7 min
  3. 3. Consent architecture 8 min
  4. 4. Breach response runbook 9 min
  5. 5. Retention design 7 min

When you become a Significant Data Fiduciary, how to scope and run a DPIA, and how to structure the DPO function.

  1. 1. Becoming a Significant Data Fiduciary 6 min
  2. 2. The Data Protection Officer 6 min
  3. 3. Data Protection Impact Assessment 8 min
  4. 4. Independent audit and algorithmic diligence 6 min

How the Board works, how investigations unfold, the penalty matrix, and the appeals path.

  1. 1. The Data Protection Board of India 6 min
  2. 2. The Schedule penalty matrix 6 min
  3. 3. Handling a Board inquiry 6 min
  4. 4. Voluntary undertakings, ADR, and the appeals path 5 min

How DPDPA principles apply to machine learning and generative AI, and how the RBI July 2026 draft Data Governance Guidance operationalises DPDPA for banks, NBFCs and other Regulated Entities.

  1. 1. The AI lifecycle under DPDPA 8 min
  2. 2. Data minimisation for AI systems 8 min
  3. 3. Notice and consent design for AI 7 min
  4. 4. Fairness, bias, and explainability 8 min
  5. 5. EU AI Act risk tiers mapped to DPDPA 10 min
  6. 6. Machine unlearning and the right to erasure 9 min
  7. 7. RBI Data Governance Framework for BFSI (July 2026 draft) 12 min
Sister Academy · VakeelSaathi Academy
Litigation angle on this? Our sister academy covers it.

VakeelSaathi Academy is our sister site for practice training aimed at corporate advocates and litigators. Separate login. Same group. You will sign in there with a fresh account.

Hosted on academy.vakeelsaathi.com
Opens in new tab ↗
DPDP Litigation and Enforcement Practice
The advocate-side course. Data Protection Board pleadings, Section 33 penalty defence, Section 29 appeals to TDSAT, Article 226 writ strategy, cross-examination on breach evidence.
Why pair with this: You know the Act cold. Now learn to pleadings, cross-examine the DPO, argue Section 33(2) mitigation, and take the writ against a bad Board order. Litigation is a different muscle from compliance.
Rs. 4,499 Rs. 6,999 Open on academy.vakeelsaathi.com →
Hosted on academy.vakeelsaathi.com
Opens in new tab ↗
IP + Personality Rights Bootcamp
Trademarks, copyright, patents, and the personality-rights doctrine (Amitabh 2022 / Anil Kapoor 2023 / Arijit Singh 2024) that now sits over every AI voice-cloning matter.
Why pair with this: When a client asks whether their AI product needs a DPDP consent-manager AND a personality-rights licence, you need both statutes on the same desk.
Rs. 4,499 Rs. 6,999 Open on academy.vakeelsaathi.com →
Frequently Asked

DPDP Act course: frequently asked questions

Who is this course for?
Compliance and privacy professionals Full audience list is on the course page below.
Is there a free preview?
Yes. Module 1 is a free preview: read every lesson in it without payment and without an account.
What do I get when I enrol?
Access to all 8 modules covering 38 lessons, the full citation register, the final exam (60 question bank, 75% pass mark, 2 attempts per round with the next 2 unlocking after 7 days), and a verifiable certificate with a public verify URL on completion.
Is there a certificate on completion?
Yes. Pass the final exam and you receive a certificate with a public verify URL that recruiters can validate in one click. LinkedIn-shareable.
How much does the course cost?
₹2,999 (inclusive of 18% GST). Lifetime access. One-time payment. Lifetime access including future updates.
How long do I have to complete the course?
Lifetime access. Self-paced. You can start, pause, and resume any time from any device.
Can I retake the final exam?
Yes. You get 2 attempts per round. If you need more, the next 2 unlock after 7 days. Options are shuffled per attempt and questions are drawn from a larger question bank, so each attempt is a fresh test of judgement.
How do you keep the course current when the law changes?
Every course carries a Legal Basis Version listing the exact instruments it teaches to. When a material instrument is amended or superseded, we update the affected lessons and email all enrolled learners.
Is this course legal advice?
No. This is an educational and awareness training programme. Nothing in the course creates a lawyer-client relationship. For specific compliance decisions, consult a qualified advocate or a regulator-empanelled auditor.
Educational content, not legal advice.

This course is for educational and awareness purposes only. It does not constitute legal advice. The content is based on the Digital Personal Data Protection Act 2023 and DPDP Rules 2025 as published by the Government of India. For specific compliance decisions, organisations and individuals should consult a qualified data protection lawyer.

Legal basis:

DPDP Act 2023 (No. 22 of 2023) + DPDP Rules 2025 (G.S.R. 846(E), notified 13 November 2025)