Awareness cum learning track · Free · Certificate on completion

DPDPA 2023 — From Awareness to Compliance

India's Digital Personal Data Protection Act explained for CISOs, auditors, HR, legal and product teams — what it says, what it costs to get wrong, and a 90-day plan.

Start module 1 →Take the readiness assessment
9
modules
58 min
total reading
All levels
CXO to analyst
₹250 Cr
max penalty
This track walks through the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025 in the order a compliance programme actually needs them: scope and definitions first, then the legal bases and notice/consent mechanics, the rights you must operationalise, security and breach duties, penalties and enforcement, and finally a practical 90-day plan and audit checklist. Each module is 5–10 minutes. Finish with the readiness assessment.

Curriculum

01What the DPDP Act is — and why the clock is running
Scope, timeline, who it applies to, and what changed when the Rules were notified.
6 min02Key definitions that change how you design systems
Personal data, processing, consent, harm, and the words auditors will test you on.
5 min03Lawful basis, notice and consent — the mechanics
When you need consent, what the notice must contain, and the 'legitimate uses' you can rely on.
8 min04Rights of Data Principals — and the SLAs behind them
Access, correction, erasure, grievance and nomination — how to operationalise each.
6 min05Security safeguards and breach notification (72 hours)
The minimum controls the Rules expect, and the two-track breach reporting duty.
7 min06Significant Data Fiduciaries, children's data and cross-border transfers
Extra duties for high-risk organisations, the under-18 rules, and where data may go.
7 min07Penalties, the Board and how enforcement actually works
The penalty schedule, the Board's process, appeals to TDSAT, and voluntary undertakings.
5 min08The 90-day plan — what to do first
A sequenced programme for a mid-size Indian organisation, by function.
8 min09Auditor's checklist — what evidence to keep
A control-by-control checklist you can hand to internal audit or an ISO auditor.
6 min
🇮🇳
DPDPA Readiness Check

12 questions on obligations, rights, breach reporting, penalties and the Rules timeline. Pass at 70% to earn 100 XP.

GRC & Compliance12 questions
For decision makers

Modules 1, 6 and 8 are the board-level summary: what the Act is, what it costs to get wrong, and the 90-day plan.

Write about DPDPA

Practitioners' posts tagged #dpdpa appear here. Publish yours →