dpdpcourse.indpdpcourse.in
All courses

University programme

Certificate Programme in Data Protection & Privacy Officer (DPPO)

Submitted to the university for approval

Admissions open once the programme is approved.

A ten-unit online certificate programme on the DPDP Act, privacy governance, breach response and AI privacy.

About this course

The DPPO programme starts with the constitutional right to privacy and ends with running a privacy programme inside an organisation. Volume I covers the law and day-to-day compliance: the DPDP Act, consent, data governance, retention and breach response. Volume II covers enforcement and governance: the Data Protection Board, the Data Protection Officer’s role, vendor management, cross-border transfers, programme maturity and the privacy risks of AI.

Each volume has five self-contained units, a glossary, a revision checklist and a model question paper. Worked examples draw on hospital and banking records.

What you’ll be able to do

  • Explain the constitutional and legal basis of privacy in India and the core obligations of the DPDP Act, 2023, including the rights and duties of Data Principals.
  • Apply data governance, minimisation and retention principles to healthcare and financial-sector data, through to deletion and destruction.
  • Manage a privacy incident across its full lifecycle, from detection to regulatory notification, inquiry, appeal and settlement.
  • Build privacy-governance structures, including the Data Protection Officer role, privacy culture and vendor governance.
  • Evaluate cross-border data-transfer mechanisms under the DPDP Act and global compliance requirements.
  • Assess a privacy programme against frameworks and maturity models, including ISO/IEC 27701:2025 and GDPR-style accountability.
  • Apply Privacy by Design, risk assessment and governance to AI and Generative AI use cases.

Syllabus

10 units

Volume I · Foundations & Operational Compliance

  1. 01

    Foundations of Data Privacy & the Right to Privacy

    Privacy, confidentiality and security; the Puttaswamy proportionality test; Data Principal, Fiduciary and Processor; pseudonymisation and anonymisation

  2. 02

    DPDP Act, Consent, Rights & Duties

    The four pillars of valid consent; rights and duties of the Data Principal; ISO/IEC 27001 and 27701; GDPR, HIPAA and the DPDP Act compared

  3. 03

    Data Governance, Minimisation & Purpose Limitation

    Purpose, collection, use and storage limits; privacy by design; purpose creep

  4. 04

    Data Retention, Deletion & Destruction

    Deletion protocols and legal-hold checks; sector retention laws; data inventories and classification

  5. 05

    Privacy Incident Management & Breach Response

    Data discovery and mapping; incident tiers and notification triggers; parallel regulatory notification clocks

Volume II · Governance, Global Compliance & Emerging Technology

  1. 06

    Data Protection Board, Enforcement & Regulatory Compliance

    The Board’s powers, settlement routes and appeal path; penalty ceilings for Fiduciaries and Principals

  2. 07

    Privacy Governance, DPO & Organisational Culture

    Levels of a governance framework; when a DPO is required and who they report to; Significant Data Fiduciary obligations

  3. 08

    Third-Party, Vendor & Processor Governance

    The four-stage vendor-governance lifecycle; the ADKAR model for programme adoption

  4. 09

    International Data Transfers & Privacy Programme Maturity

    Whitelist and blacklist transfer models; Transfer Impact Assessments; maturity levels and assessment approaches

  5. 10

    Artificial Intelligence, Generative AI & Emerging Technology Privacy

    Training-data risk; prompt exposure, memorisation and Shadow AI; privacy-preserving techniques; AI privacy impact assessments

Who it’s for

Professionals who handle personal data in compliance, legal, IT, security, HR, healthcare or banking roles, and anyone preparing for a Data Protection Officer role.

Course content is for education and is not legal advice.