LIVE | Registrations Open

Online Certificate Course on

Data Privacy Law, DPDP Implementation & AI

Enrollment Closing In

  • 00Days
  • 00Hrs
  • 00Mins
  • 00Sec

Why Every Lawyer Must Learn This Now

The DPDP Act is law and the Rules are notified. Every organisation in India must be compliant by 13 May 2027, and there are not enough trained privacy professionals to meet the demand. This course turns you into one, with the law, the implementation skills and the AI workflows to build a privacy practice.

₹250 crore is maximum penalty per breach category under the DPDP Act

13 May 2027 is the compliance deadline every organisation is working toward

DPO & Privacy Counsel are among the fastest-growing legal roles in India

8 Modules from the framework to a live client-ready workflow

Core Areas Covered

DPDP Act & Rules

Data Mapping

Consent Architecture

Privacy Documentation

Breach Response

Data Principal Rights

AI for Privacy Work

DPO Roadmap

Learn With AI Tools

Get Certified

Gain an Advanced QR-Verifiable Certificate in Data Privacy, DPDP Implementation & AI from IALA

Course Eligibility

This course is open to anyone building a career in data privacy, DPDP compliance or technology law, including:

Law Students (UG & PG)

Young Lawyers & Litigators

Compliance & Privacy Professionals

Company Secretaries & CAs moving into privacy

In-house Counsels

No prior technical background required.

Esteemed Mentors

Learn from practitioners at leading law firms and arbitral institutions

Shagun Badhwar

Partner,
AZB & Partners

Archana Iyer

Counsel,
AZB & Partners

Gauhar Mirza

Partner,
Saraf and Partners

Shreya Gupta

Partner,
Chandhiok & Mahajan

Arrpita K Bhatt

Data Privacy and
Media Lawyer

Sana Banyal

Senior Associate, Shardul Amarchand Mangaldas & Co.

Prasidhi Agrawal

Associate, Shardul Amarchand Mangaldas & Co.

Nitya Nath

Associate, Shardul Amarchand Mangaldas & Co.

Dipanjan Dey

Data Protection Officer,
HBD Financial Services

Agastya Shukla

Legal Operations &
AI Consultant

Course Structure

  • Act 2023 + Rules 2025 read together: architecture and commencement dates
  • Roles: Data Fiduciary, Processor, Principal, Consent Manager, Significant Data Fiduciary
  • The seven principles translated into operational obligations
  • Where DPDP diverges from GDPR: no legitimate interest basis, blacklist model for transfers
  • Penalty exposure and how the Data Protection Board actually functions
  • Discovery: systems, vendors, shadow data, marketing stacks
  • Building the data inventory and processing register
  • Data flow diagrams and per-flow role determination
  • Tagging lawful basis: consent vs legitimate uses under Section 7
  • AI systems as a data flow: training data, inference and profiling as processing
  • SDF designation triggers
  • Standalone notice requirements under Rule 3: what breaks a notice
  • Consent lifecycle: capture, log, prove, withdraw, re-consent
  • Consent Managers: registration opening November 2026 and what it means for clients
  • Children’s data and verifiable parental consent
  • Retrofitting consent onto legacy databases
  • Privacy policy, internal SOP, retention schedule
  • Data Processing Agreements and vendor clause library
  • AI and cloud vendor terms: what your DPA must say when the processor is an LLM provider
  • Data sharing agreements and cross-border addenda
  • Employee and HR privacy notices
  • Access, correction, erasure, nomination: scope and limits
  • Rights request workflow with internal SLAs against the 90-day ceiling
  • Identity verification without over-collection
  • Consent withdrawal and downstream deletion across processors
  • Rule 6 safeguards: encryption, access control, logging obligations
  • Breach response: intimation to Principals, DPB reporting, the detailed report
  • Retention limits and erasure, including Schedule 3 classes
  • Live tabletop: a breach at 11pm on a Friday
  • Setting up the workspace and guardrails across Claude, ChatGPT and Gemini: anonymisation before prompting, what never goes into a prompt, verification against the Bare Act
  • Building a grounded DPDP knowledge base in NotebookLM: Act, Rules, MeitY notifications, DPB orders, queried with citations
  • Compliance gap assessment with ChatGPT and Gemini: auditing a client policy stack against Rule 3, locating personal data across Drive and Gmail, readiness scorecard against May 2027
  • Document review and drafting in Claude: redlining a vendor DPA, converting interview notes into a data map, simplifying consent notices, building a reusable clause bank
  • Operational workflows in Claude and ChatGPT: rights-request triage, breach intimation under time pressure, retention schedules from a data inventory, and where AI fails
  • Scoping a DPDP readiness audit as a paid engagement
  • Building a client roadmap backwards from 13 May 2027
  • The DPO / Privacy Counsel role: scope, appointment, liability
  • Capstone: full readiness assessment for a mock fintech client

Perks and Bonuses

Bonus 1

Bonus 2

Bonus 3

Bonus 4

Bonus 5

Bonus 6

Bonus 7

Bonus 8

Bonus 9

Testimonials

Feedback from Learners of the Previous Batch

Course Details

Duration

8 Live Sessions across 3 weekends

Dates

27 September to 11 October 2026

Mode

Online, Live Sessions

Session Duration

1.5 to 2 hours each

Choose the Plan

that Fits You Best

Frequently Asked Questions

Law students, young lawyers, in-house counsel, and compliance, company-secretary and finance professionals who want to build a career in data privacy and DPDP compliance. No prior technical background is required.

The course runs across 8 live sessions over 3 weekends, on 27 September and 3, 4, 10 & 11 October 2026.

All sessions are conducted online via live interactive classes, with the opportunity to ask questions directly to the experts.

Yes. Recording access is provided after every session, and Advanced Plan participants receive lifetime access to all recordings.

Module 7 is dedicated to AI workflows for privacy practice, using Claude, ChatGPT, NotebookLM and Gemini for gap assessments, drafting, data mapping and breach response, with a focus on accuracy, anonymisation and verification. AI is applied across other modules too.

Yes. On successful completion you receive an Advanced QR-Verifiable Certificate in Data Privacy, DPDP Implementation & AI from IALA.

No. Every concept is explained from a legal and practical standpoint.

The Basic Plan (₹1,999) includes the live sessions, live Q&A and the certificate. The Advanced Plan (₹2,999) adds lifetime recordings and the full resource bundle: the Prompt Library, Implementation Guide, Template Pack, Curated Notes, Recruiter List and Career Roadmap.

No. The course does not guarantee placement, but its practical resources and career roadmap are designed to meaningfully strengthen your profile.

Have Questions?

Get in touch with our team for any queries or support

Email Us

contact@iala.in

Student Helpline

+91 92325 93090