Readiness assessment
The Act
The DPDP Act, explainedThe DPDP Rules 2025

Ch IPreliminary

S.1 Short title and commencementS.2 DefinitionsS.3 Application and scope

Ch IIObligations of Data Fiduciary

S.4 Grounds for processingS.5 NoticeS.6 ConsentS.7 Certain legitimate usesS.8 Data Fiduciary obligationsS.9 Children’s dataS.10 Significant Data Fiduciary

Ch IIIRights and duties of Data Principal

S.11 Right to accessS.12 Correction and erasureS.13 Grievance redressalS.14 Right to nominateS.15 Duties of the Data Principal

Ch IVSpecial provisions

S.16 Transfer outside IndiaS.17 Exemptions

Ch VData Protection Board of India

S.18 Establishment of the BoardS.19 Composition of the BoardS.20 Salary and term of officeS.21 DisqualificationsS.22 Resignation and vacanciesS.23 Proceedings of the BoardS.24 Officers and employeesS.25 Members as public servantsS.26 Powers of the Chairperson

Ch VIBoard powers and procedure

S.27 Powers and functions of the BoardS.28 Procedure followed by the Board

Ch VIIAppeal and dispute resolution

S.29 Appeal to the Appellate TribunalS.30 Tribunal orders as a decreeS.31 Alternate dispute resolutionS.32 Voluntary undertaking

Ch VIIIPenalties

S.33 Penalties and the ScheduleS.34 Penalties to Consolidated Fund

Ch IXMiscellaneous

S.35 Good-faith protectionS.36 Power to call for informationS.37 Blocking of accessS.38 Consistency with other lawsS.39 Bar of jurisdictionS.40 Power to make rulesS.41 Laying of rules before ParliamentS.42 Power to amend the ScheduleS.43 Power to remove difficultiesS.44 Amendments to other Acts
Industries
Fintech & BFSIPayments & UPIUPIWalletsLendingBNPLLSPsKYCVideo-KYCAadhaar eKYCWealthtechInsurTechHealth insuranceDebt collectionsBanksNBFCsNGOsHealthcare & PharmaHospitalsDiagnostic labsGenetic testingPharmaClinical trialsTelemedicineE-commerce & RetailD2CMarketplacesLogisticsLoyalty & CRMGCCsSaaS & TechnologyAI & MLFoundation modelsB2B SaaSCloudDeveloper toolsEdTech & EducationSchoolsCoachingLMSProctoringChildren-directed appsGovernment & PSUe-GovernancePublic servicesUtilitiesManufacturingAutomotiveDealersIndustrialIoTMedia & EntertainmentAdTechGamingOTTPublishingSocial mediaBrowse all sectors
Implementation
All 17 DPDP servicesFintech & digital lendingGCC & global centresDPDP Compliance AssessmentFind where you stand and your gapsDPDP ImplementationTurn the rules into daily practiceData MappingKnow what data you hold, and whereRoPAYour record of processing activitiesPrivacy AuditIndependent check of your controlsDPO ServicesOutsourced or part-time DPOSDF ReadinessCheck for extra SDF dutiesConsent ManagementCapture, track and withdraw consentNotice & Consent RemediationFix notices and consent flowsData Principal RightsHandle access, correction, erasureRetention & DeletionWhat to keep, how long, how to deleteVendor & Processor ManagementControl third parties handling dataChildren's DataRules for handling minors' dataSecurity SafeguardsTechnical and organisational controlsBreach ResponseWhat to do when a breach happensPrivacy Operations SupportKeep the programme runningDPDP TrainingTrain staff, legal and leaders
Training
All DPDP Act trainingEmployee awarenessCorporate trainingLeadership briefingDPO and certification
Resources
Readiness assessmentGuidesBy roleGlossaryCompareNews
About
AboutEditorial policyContactFAQ
Readiness assessment
Training track

DPDP Act certification and DPO training in India

For people building a privacy career, and for organisations that want a trained person to lead DPDP Act work.

Request a matchBack to all tracks

In short

There is no government-issued DPO or DPDP Act certification in India. The assessed practitioner courses we have seen run two to three days, and the two that publish a price charge Rs 15,000 to Rs 16,500 plus GST. A certificate shows what a person has learned. It is not a licence, and it does not make an organisation compliant.

Independent guide by DPDP Act India. Reviewed .

Status as of . The DPDP Rules were notified on 13 November 2025. The Act and Rules are being brought into force in stages: consent manager registration is scheduled for 13 November 2026 and the main duties on organisations for 13 May 2027. Training now is about getting ready, not about a penalty that has already started. Check dates against the official notifications on MeitY and India Code, and see our Rules explainer.

Building a privacy career? Choose with your eyes open.

We tell you plainly what a certificate of completion is worth. We call you first, and nothing is shared until you agree.

Plan my DPO course path →

Read this before you pay

There is no government-issued DPO or DPDP Act certification in India, and the Act does not set a qualification for a DPO. Employers look for demonstrated knowledge of the Act and Rules and practical skill. A certificate is a useful signal of that, but it is not a licence, and it does not make your organisation compliant.

A DPO who is based in India and answerable to the board is required only for a Significant Data Fiduciary, which the government has to notify. Every data fiduciary must still publish contact details of a DPO or another person who can answer questions, and must run a grievance process. So many organisations need a trained owner for DPDP Act work without needing a statutory DPO.

How to choose a course

  • Hands-on or theory only: prefer courses where you rewrite a notice, design a rights flow or run a breach exercise.
  • Assessed: a graded exam and assignment means more than attendance.
  • Current: the syllabus should cover the 2025 Rules, not only the Act, and should not lean on GDPR.
  • Trainer: look for practitioners who have implemented DPDP Act programmes.
  • Issuer: check who issues the certificate and whether employers can verify it.
  • After the course: templates, a toolkit or a community are worth having.

What published courses look like

What published courses look like
FormatLengthPrice as publishedWorth knowing
Lead-implementer course, live online, with a multiple-choice exam and a written assignment2 days (16 hours)Rs 16,500 plus GSTThe provider describes the certificate as accredited by an international body and includes a template toolkit. It also sells consulting and DPO services
Certified-DPO cohort, online, with a case-study lab2 daysRs 15,000 plus GSTThe last published cohort (April 2026) is closed. Ask for the next date
Practitioner programme with an online exam3 daysSee providerSome providers are authorised training partners of industry bodies for other courses
Instructor-led specialist programmeSee providerSee providerSome providers are official partners for international privacy courses, which are not DPDP Act designations
Industry-body certificationsSee the bodySee the bodyWell known with employers. Broad privacy certifications may not cover DPDP Act in depth, so check current coverage and fees

Free options exist. Free courses are good for background knowledge and for testing your interest, but they are not a substitute for training on your own processes.

We have not yet partnered with any training provider, so we do not name any here. If that changes, we will name them and say whether we earn a fee.

Tell us what you need

Two minutes. We will suggest the right format and a short list of providers, and we will tell you if training is not what you need yet.

Asking whether your organisation needs a DPO, or whether to outsource one? That is a decision question, not a training one. dpoindia.in helps you decide and compare options.

Questions people ask

Is there an official DPDP Act or DPO certification in India?
No. There is no government-issued DPDP Act certification, and the Act does not prescribe a qualification for a DPO. Provider certificates show what a person has learned. They do not show that an organisation complies.
How much do DPDP Act certification courses cost in India?
Two providers publish prices: one lists Rs 16,500 plus GST for a two-day course, and another lists Rs 15,000 plus GST (its April 2026 cohort is closed). Other providers ask you to check with them. Prices are as published on 30 September 2026.
Does my organisation need a certified DPO?
Only a Significant Data Fiduciary must appoint a DPO based in India, and no particular certificate is prescribed. Every data fiduciary must publish a contact person and run a grievance process.
How do I choose between courses?
Prefer assessed, hands-on courses written for the DPDP Act and the 2025 Rules, taught by practitioners, with a certificate issuer that employers can verify.

Other training tracks

Employee awareness

A short course for everyone who touches personal data.

See this track

Corporate team training

Hands-on sessions for legal, HR, IT, product and support teams.

See this track

Leadership briefing

A short session for the board and senior management.

See this track

How we describe providers

We do not name or rank training providers on this page, and we have no commercial agreement with any of them. If that changes and we earn a fee on a link, we will say so. Prices, dates and certificate claims describe what providers have published as of 30 September 2026 and can change, so confirm them before you enrol. Training helps your people understand the law. It is not legal advice, not government approval and not a compliance certificate. Are you a training provider? Talk to us about listing your programme.