Readiness assessment
The Act
The DPDP Act, explainedThe DPDP Rules 2025

Ch IPreliminary

S.1 Short title and commencementS.2 DefinitionsS.3 Application and scope

Ch IIObligations of Data Fiduciary

S.4 Grounds for processingS.5 NoticeS.6 ConsentS.7 Certain legitimate usesS.8 Data Fiduciary obligationsS.9 Children’s dataS.10 Significant Data Fiduciary

Ch IIIRights and duties of Data Principal

S.11 Right to accessS.12 Correction and erasureS.13 Grievance redressalS.14 Right to nominateS.15 Duties of the Data Principal

Ch IVSpecial provisions

S.16 Transfer outside IndiaS.17 Exemptions

Ch VData Protection Board of India

S.18 Establishment of the BoardS.19 Composition of the BoardS.20 Salary and term of officeS.21 DisqualificationsS.22 Resignation and vacanciesS.23 Proceedings of the BoardS.24 Officers and employeesS.25 Members as public servantsS.26 Powers of the Chairperson

Ch VIBoard powers and procedure

S.27 Powers and functions of the BoardS.28 Procedure followed by the Board

Ch VIIAppeal and dispute resolution

S.29 Appeal to the Appellate TribunalS.30 Tribunal orders as a decreeS.31 Alternate dispute resolutionS.32 Voluntary undertaking

Ch VIIIPenalties

S.33 Penalties and the ScheduleS.34 Penalties to Consolidated Fund

Ch IXMiscellaneous

S.35 Good-faith protectionS.36 Power to call for informationS.37 Blocking of accessS.38 Consistency with other lawsS.39 Bar of jurisdictionS.40 Power to make rulesS.41 Laying of rules before ParliamentS.42 Power to amend the ScheduleS.43 Power to remove difficultiesS.44 Amendments to other Acts
Industries
Fintech & BFSIPayments & UPIUPIWalletsLendingBNPLLSPsKYCVideo-KYCAadhaar eKYCWealthtechInsurTechHealth insuranceDebt collectionsBanksNBFCsNGOsHealthcare & PharmaHospitalsDiagnostic labsGenetic testingPharmaClinical trialsTelemedicineE-commerce & RetailD2CMarketplacesLogisticsLoyalty & CRMGCCsSaaS & TechnologyAI & MLFoundation modelsB2B SaaSCloudDeveloper toolsEdTech & EducationSchoolsCoachingLMSProctoringChildren-directed appsGovernment & PSUe-GovernancePublic servicesUtilitiesManufacturingAutomotiveDealersIndustrialIoTMedia & EntertainmentAdTechGamingOTTPublishingSocial mediaBrowse all sectors
Implementation
All 17 DPDP servicesFintech & digital lendingGCC & global centresDPDP Compliance AssessmentFind where you stand and your gapsDPDP ImplementationTurn the rules into daily practiceData MappingKnow what data you hold, and whereRoPAYour record of processing activitiesPrivacy AuditIndependent check of your controlsDPO ServicesOutsourced or part-time DPOSDF ReadinessCheck for extra SDF dutiesConsent ManagementCapture, track and withdraw consentNotice & Consent RemediationFix notices and consent flowsData Principal RightsHandle access, correction, erasureRetention & DeletionWhat to keep, how long, how to deleteVendor & Processor ManagementControl third parties handling dataChildren's DataRules for handling minors' dataSecurity SafeguardsTechnical and organisational controlsBreach ResponseWhat to do when a breach happensPrivacy Operations SupportKeep the programme runningDPDP TrainingTrain staff, legal and leaders
Training
All DPDP Act trainingEmployee awarenessCorporate trainingLeadership briefingDPO and certification
Resources
Readiness assessmentGuidesBy roleGlossaryCompareNews
About
AboutEditorial policyContactFAQ
Readiness assessment
DPDP Act training guide

DPDP Act training for the people who must put it into practice

Tell us who needs training and what they need to be able to do. We help you choose the right format and provider, without a hard sell.

Find training for my teamCompare professional courses

In short

The Act does not require a specific DPDP Act training course, and there is no official DPDP Act certificate. Most organisations need three things: a short awareness course for all staff, corporate team training for the teams that change processes, and a leadership briefing. People building a privacy career can take an assessed certification. The two-day assessed courses that publish a price charge Rs 15,000 to Rs 16,500 plus GST.

Independent guide by DPDP Act India. Reviewed .

Status as of . The DPDP Rules were notified on 13 November 2025. The Act and Rules are being brought into force in stages: consent manager registration is scheduled for 13 November 2026 and the main duties on organisations for 13 May 2027. Training now is about getting ready, not about a penalty that has already started. Check dates against the official notifications on MeitY and India Code, and see our Rules explainer.

Not sure which track? Get a plan in one call.

Tell us who you are training. A person from our team calls you first, and nothing is shared with anyone until you agree.

Get my team's training plan →

Two ways to start

Train my organisation

Awareness for all staff, workshops for the teams that do the work, and a briefing for leaders.

Choose a track

Build my privacy career

Assessed courses and credentials for DPO, privacy and compliance roles.

Compare courses

Pick the track that fits

Employee awareness

A short, scenario-based course for everyone who handles personal data.

About 1 hourSelf-paced
See this track

Corporate team training

Live, hands-on sessions for legal, HR, IT, product and support teams.

Half day to 3 daysLive
See this track

Leadership briefing

A short session that helps the board decide what to fund, own and sequence.

60 to 90 minutesLive
See this track

DPO and professional certification

Assessed courses for people who want to work in privacy.

2 to 3 daysAssessed
See this track

The four tracks at a glance

The four tracks at a glance
TrackBest forTypical lengthPrice as published
Employee awarenessEveryone who handles personal data45 to 90 minutes, self-pacedQuote. One provider sells corporate rollouts from 50 learners
Corporate team trainingLegal, HR, IT, product and support teamsHalf a day to 3 days, liveQuote or packages
Leadership briefingBoard, founders and senior management60 to 90 minutes, liveQuote
DPO and certificationPrivacy and compliance professionals2 to 3 days, assessedRs 15,000 to Rs 16,500 plus GST where published

Who needs what

Who needs what
Who you areWhat you need to doTraining that fits
CEO, board, ownerDecide budget, ownership and prioritiesLeadership briefing
Legal, compliance, privacy leadTurn the Act and Rules into working processesCorporate team training, or a practitioner course
HR, L&DRoll out consistent learning and keep recordsEmployee awareness
IT, securityBuild safeguards and an incident escalation pathCorporate team training
Product, marketing, supportHandle consent, notices and customer requestsCorporate team training
Privacy professional or career changerShow deeper knowledge with an assessed credentialProfessional certification

How matching works

Tell us your need

Your role, how many people, and what they must be able to do.

We suggest a format

Awareness, workshop, briefing or certification, with a short list of providers that publish a fit.

You choose and confirm

You talk to the provider directly. We tell you what to ask before you pay.

What good DPDP Act training covers

Whatever you choose, check that the syllabus is written for the DPDP Act and the 2025 Rules, and not only for GDPR with India swapped in.

  • Scope and roles: who is a data fiduciary, a data principal and a processor in your business.
  • Notice and consent: what to tell people, when consent is needed and what counts as a legitimate use.
  • Rights and grievances: how requests reach the right person and how complaints are handled.
  • Children's data: the under-18 rules and verifiable parental consent.
  • Security and incidents: reasonable safeguards, and what every employee must do the moment they suspect a breach.
  • Retention and vendors: when to delete data and what to put in processor contracts.
Training does not make an organisation compliant. Compliance comes from changing notices, consent flows, vendor contracts and incident processes. Use training to give your people the skills to do that. Our readiness assessment shows where to start.

What published options look like

This is what providers publish, not an endorsement. Confirm every detail with the provider you choose.

What published options look like
TrackFormatPrice or dates as publishedWorth knowing
Employee awarenessAbout 60 minutes, self-paced e-learning, or an online course on the provider's LMS or yoursQuote. Corporate rollouts from 50 learnersCompletion tracking and dashboards. Check whether it is a dedicated DPDP Act course or a broader security awareness course
Team workshops and leadershipInstructor-led, virtual, onsite or offsite, 12 to 24 hours, with awareness, corporate team and leadership formatsQuote or packagesAsk for a syllabus updated for the 2025 Rules. Some providers also sell readiness assessments or consulting
Professional certification2 to 3 days, live online, with an examRs 15,000 to Rs 16,500 plus GST where published, otherwise see providerCheck who issues the certificate. The last published cohort at one provider is closed

Free options exist. Free courses are good for background knowledge and for testing your interest, but they are not a substitute for training on your own processes.

We have not yet partnered with any training provider, so we do not name any here. If that changes, we will name them and say whether we earn a fee.

Tell us what you need

Two minutes. We will suggest the right format and a short list of providers, and we will tell you if training is not what you need yet.

Questions people ask

Do we have to train our employees under the DPDP Act?
The Act does not name a mandatory training course. It does make your organisation responsible for the personal data it handles, including reasonable security safeguards, and trained people are a practical way to meet that. Ask your lawyer how this applies to you.
How much does DPDP Act training cost in India?
Prices vary by format. The two-day assessed certification courses that publish a price charge Rs 15,000 to Rs 16,500 plus GST per person, as published on 30 September 2026. Awareness and workshop providers mostly quote on request, and one awareness provider sells corporate rollouts from 50 learners.
Is there an official DPDP Act certificate or auditor certification?
No. There is no government-issued DPDP Act certification, and the Act does not prescribe a qualification for a DPO. Provider certificates show what a person has learned. They do not show that an organisation complies.
Does every company need a DPO?
A DPO based in India and answerable to the board is required only for a Significant Data Fiduciary, which the government has to notify. Every data fiduciary must publish contact details of a DPO or another person who can answer questions, and must run a grievance process. If you are weighing this up, dpoindia.in helps you decide.
Should we train now or wait until 13 May 2027?
Start with awareness and a leadership briefing now, because changing notices, consent flows, vendor contracts and incident processes takes months. Schedule corporate team training once you know which systems and processes you need to change.
Can you deliver training yourselves?
Not today. We help you choose a format and a provider. If enough organisations ask for the same thing, we may work with a named expert to offer it.

How we describe providers

We do not name or rank training providers on this page, and we have no commercial agreement with any of them. If that changes and we earn a fee on a link, we will say so. Prices, dates and certificate claims describe what providers have published as of 30 September 2026 and can change, so confirm them before you enrol. Training helps your people understand the law. It is not legal advice, not government approval and not a compliance certificate. Are you a training provider? Talk to us about listing your programme.