Readiness assessment
The Act
The DPDP Act, explainedThe DPDP Rules 2025

Ch IPreliminary

S.1 Short title and commencementS.2 DefinitionsS.3 Application and scope

Ch IIObligations of Data Fiduciary

S.4 Grounds for processingS.5 NoticeS.6 ConsentS.7 Certain legitimate usesS.8 Data Fiduciary obligationsS.9 Children’s dataS.10 Significant Data Fiduciary

Ch IIIRights and duties of Data Principal

S.11 Right to accessS.12 Correction and erasureS.13 Grievance redressalS.14 Right to nominateS.15 Duties of the Data Principal

Ch IVSpecial provisions

S.16 Transfer outside IndiaS.17 Exemptions

Ch VData Protection Board of India

S.18 Establishment of the BoardS.19 Composition of the BoardS.20 Salary and term of officeS.21 DisqualificationsS.22 Resignation and vacanciesS.23 Proceedings of the BoardS.24 Officers and employeesS.25 Members as public servantsS.26 Powers of the Chairperson

Ch VIBoard powers and procedure

S.27 Powers and functions of the BoardS.28 Procedure followed by the Board

Ch VIIAppeal and dispute resolution

S.29 Appeal to the Appellate TribunalS.30 Tribunal orders as a decreeS.31 Alternate dispute resolutionS.32 Voluntary undertaking

Ch VIIIPenalties

S.33 Penalties and the ScheduleS.34 Penalties to Consolidated Fund

Ch IXMiscellaneous

S.35 Good-faith protectionS.36 Power to call for informationS.37 Blocking of accessS.38 Consistency with other lawsS.39 Bar of jurisdictionS.40 Power to make rulesS.41 Laying of rules before ParliamentS.42 Power to amend the ScheduleS.43 Power to remove difficultiesS.44 Amendments to other Acts
Industries
Implementation
Training
Resources
About
Readiness assessment
Training track

Corporate DPDP Act training for your teams

Live, hands-on corporate training built around what each team actually does with personal data.

Request a matchBack to all tracks

In short

Corporate DPDP Act training is a live, hands-on programme, from half a day to three days, where each team works on its own notices, contracts and data flows. Legal, HR, IT, product and support teams leave with a work plan for their own processes. It works best after a readiness check, so the session targets real gaps.

Independent guide by DPDP Act India. Reviewed .

Status as of . The DPDP Rules were notified on 13 November 2025. The Act and Rules are being brought into force in stages: consent manager registration is scheduled for 13 November 2026 and the main duties on organisations for 13 May 2027. Training now is about getting ready, not about a penalty that has already started. Check dates against the official notifications on MeitY and India Code, and see our Rules explainer.

Want training built around your own teams?

We match scenario-based sessions to the teams that handle customer data. We call you first, and nothing is shared until you agree.

Plan training for my data-handling teams →

Who it is for

The people who will change how your business collects, stores and shares personal data. Awareness training tells people what the law says. Corporate team training helps them change their own process.

Typical length

Half a day to three days, depending on depth.

Typical output

A work plan for each team: notice changes, a rights-request flow, vendor clauses and a retention schedule.

Best timing

After a readiness check, so the session works on your real gaps.

What each team should practise

What each team should practise
TeamFocusA good hands-on exercise
Legal and complianceRoles, lawful grounds, notices, rights, vendor termsReview one real privacy notice and one vendor contract against the Act
HREmployee data, candidate data, retentionMap the hiring and payroll data flow and set retention periods
IT and securitySafeguards, access, logging, incident escalationRun a tabletop exercise for a suspected breach
Product and marketingConsent design, children's data, trackingRedesign one sign-up or consent screen
Customer supportRights requests, identity checks, escalationHandle five sample access and deletion requests

Questions to ask any provider

  • Who teaches it, and have they worked on real DPDP Act implementation, not only delivered slides?
  • Will the exercises use our own notices, contracts and data flows?
  • What do we take away at the end: templates, a work plan, a recording?
  • Is there follow-up support, and what does it cost?
  • Can the session be split by team so each group sees only its own material?

What published options look like

What published options look like
FormatWorth knowing
Instructor-led group training, 12 to 24 hours, virtual, onsite or offsiteOften customisable. Ask for content updated for the 2025 Rules
Implementation and corporate team trainingSome providers also sell readiness assessments, so ask what is training and what is a sales step
In-house batches, team-based or sector-based, on requestSome providers also sell consulting

We have not yet partnered with any training provider, so we do not name any here. If that changes, we will name them and say whether we earn a fee.

Tell us what you need

Two minutes. We will suggest the right format and a short list of providers, and we will tell you if training is not what you need yet.

Not sure what your teams need to change? Start with our readiness assessment or read how implementation works, then come back to pick corporate training.

Questions people ask

What is the difference between awareness training and corporate team training?
Awareness training tells everyone what the law says and what to do. Corporate team training is hands-on: each team works on its own notices, contracts, data flows or request handling and leaves with a work plan.
How long is corporate DPDP Act training for teams?
Typically half a day to three days, depending on depth. Some providers, for example, describe instructor-led group training of 12 to 24 hours.
When is the best time to run one?
After a readiness check, so the workshop works on your real gaps, and early enough to change systems before the main duties apply on 13 May 2027.
Which teams should attend?
Legal and compliance, HR, IT and security, product and marketing, and customer support. Splitting the session by team keeps each group on its own material.

How we describe providers

We do not name or rank training providers on this page, and we have no commercial agreement with any of them. If that changes and we earn a fee on a link, we will say so. Prices, dates and certificate claims describe what providers have published as of 30 September 2026 and can change, so confirm them before you enrol. Training helps your people understand the law. It is not legal advice, not government approval and not a compliance certificate. Are you a training provider? Talk to us about listing your programme.