Login
Why This Training Matters
DPDPA is not simply a legal or compliance requirement. It is gradually changing the way organizations collect, use, store, share, retain and dispose of personal data.
For professionals across IT, Cybersecurity, HR, Finance, Sales & Marketing, Operations, Procurement and Business Management, understanding DPDPA is becoming an important part of their professional responsibility.
The objective of this training is therefore not merely to explain the Act, but to help participants understand:
- What DPDPA means for their organization and their specific role
- How personal data moves through an organization and where privacy risks arise
- What changes may be required in existing business processes
- How consent, notices, data retention, deletion and Data Principal rights affect day-to-day operations
- How employees and vendors can create privacy and compliance risks
- How cybersecurity and data protection work together
- How organizations can prepare for data breaches and privacy incidents
- How to contribute to their organization’s DPDPA readiness rather than treating it as only a legal department’s responsibility
What Participants Will Take Back
At the end of the two-day program, participants should be able to:
- Identify personal-data exposure
Understand where personal data exists within their function and how it is collected, processed, shared and retained. - Recognize privacy risks in everyday work
Identify common practices that may create DPDPA risks, including excessive data collection, inappropriate sharing, uncontrolled retention and inadequate security. - Understand their professional responsibility
Clearly understand how DPDPA impacts different functions and what is expected from them in their respective roles. - Participate effectively in compliance initiatives
Be better prepared to work with their organization’s IT, Security, Legal, HR, Compliance and Business teams during DPDPA implementation. - Make better business decisions involving personal data
Understand the privacy implications before introducing new applications, processes, vendors, marketing initiatives or data-driven services. - Contribute to organizational readiness
Take away practical checklists and implementation guidance that can be applied within their own organization.
In short, the objective is that participants should not leave the session simply knowing “what DPDPA says,” but should understand “what I need to do differently in my professional role because of DPDPA.”
Contents:
Day 1 – Understanding DPDPA & Its Business Impact
- Introduction to Data Privacy & Protection in India
- DPDPA 2023 – regulatory landscape and business context
- Key terminology – Data Principal, Data Fiduciary, Data Processor, Consent Manager, etc.
- Applicability of DPDPA to organizations
- Understanding Personal Data and Processing Activities
- Lawful Processing, Notice and Consent
- Rights of Data Principals
- Obligations of Data Fiduciaries
- Children’s Personal Data
- Data Retention, Erasure and Purpose Limitation
- Data Breach Management and Incident Response
- Cross-border transfer and third-party/vendor considerations
- Significant Data Fiduciaries and additional obligations
- Penalties, risks and business implications
- Practical case studies and interactive discussion
Day 2 – From Compliance Understanding to Implementation
- Building a DPDPA Compliance Framework
- Data Discovery, Inventory & Classification
- Data Flow Mapping and Records of Processing
- Data Protection Impact Assessment
- Consent Management Framework
- Data Principal Request & Grievance Management
- Data Retention & Secure Disposal
- Vendor & Third-Party Data Protection
- Privacy Policies, Notices, SOPs and Governance
- Technical & Organizational Security Measures
- Data Breach Response & Regulatory Readiness
- Employee Awareness & Privacy Culture
- DPDPA Compliance Roadmap – 30/60/90-day approach
- Practical DPDPA Readiness Checklist
- Interactive Q&A and participant-specific scenarios
Training Approach
The program will be designed as a business-oriented and practical learning session, rather than a purely legal or theoretical training.
The sessions will use:
- Real-world business scenarios
- Industry examples
- Practical exercises
- Data-flow and processing examples
- Role-based discussions
- Compliance checklists
- Implementation guidance
- Interactive Q&A
This approach will help participants connect the regulatory requirements with their actual professional responsibilities and day-to-day business decisions.
Speaker Profile:
Adv. Rajas Pingle is the Managing Partner at RP Law Chambers and has over 15 years of experience in technology law, cybercrime, digital forensics, data protection, banking technology, and complex technology- related disputes.
He regularly advises corporates, financial institutions, technology companies, and individuals on matters involving cyber fraud, electronic evidence, data breaches, privacy, regulatory compliance, technology contracts, and digital investigations. His practice also involves working closely with law enforcement agencies, forensic experts, and investigation teams in matters concerning cybercrime and electronic evidence.
He holds an LL.M. in Data Protection and Cyber Laws and has a particular interest in the evolving legal and regulatory challenges surrounding artificial intelligence, cybersecurity, digital privacy, and India’s Digital Personal Data Protection framework.
RP Law Chambers has a presence in India, the UAE, and the United States, with its India practice headquartered in Pune, UAE operations through RPLC FZ LLC, and a presence in Delaware, USA. The firm advises clients on domestic as well as cross-border technology, regulatory, dispute, and compliance matters.
Through his practice, Adv. Pingle works at the intersection of law, technology, cybersecurity, investigations, and emerging digital risks, helping organisations respond to an increasingly complex digital and regulatory environment.
Sharon Matharu Legal Professional | Data Protection, Cyber & Technology Law | PhD Researcher, Rane Pingle Law Chambers (RPLC), Pune
Sharon works with businesses every day on a simple question: “What do we actually need to do to stay on the right side of data protection law?” As a legal professional at Rane Pingle Law Chambers, a Pune-based full- service firm with offices in Mumbai, Dubai and Delaware, she works across technology, cyber law, data protection and corporate law. Her background in M&A, governance and data privacy compliance means she knows how these rules play out in real boardrooms and real teams, not just on paper.
Alongside her practice, Sharon is pursuing her PhD at Symbiosis Law School, Pune, researching how agentic AI systems should be governed in India, with comparisons to the EU, US and China. She holds a BBA.LL.B. and an LL.M. and has published work on comparative AI regulatory frameworks. That research keeps her close to where the law is heading, which is exactly what businesses need to understand as the DPDP Act settles in.
