

India's data protection regime is no longer a draft. The Digital Personal Data Protection (DPDP) Act, 2023 is in force in phases, the DPDP Rules were notified on November 13, 2025, and the full set of obligations on Data Fiduciaries applies from May 13, 2027. Consent Manager registration opens in November 2026. Penalties under the Act go up to ₹250 crore, and organisations across banking, fintech, e-commerce, healthcare and SaaS are now hiring for privacy roles faster than the market can train people for them.
To meet this demand, the Integrated Academy for Law & AI (IALA) has launched an Online Certificate Course on Data Privacy Law, DPDP Implementation & AI. The course is built to take participants through DPDP compliance the way it is actually done inside law firms and in-house privacy teams: mapping the data, fixing the consent layer, drafting the document stack, handling rights requests and breaches, and using AI tools to do this work faster and more accurately.
The course runs from September 27 to October 11, 2026, with live weekend sessions.
Why This Course?
Practitioner-led faculty. Partners and senior practitioners from AZB & Partners, Shardul Amarchand Mangaldas & Co, Saraf and Partners and Chandhiok & Mahajan, along with a working Data Protection Officer from HDB Financial Services.
Implementation, not just theory. Participants move from the Act and Rules to data mapping, consent architecture, privacy documentation, breach response and a DPO roadmap, in the order a real compliance engagement unfolds.
AI workflows for privacy practice. A dedicated module on using Claude, ChatGPT, Gemini and NotebookLM for gap assessments, DPA redlining, rights request triage and breach intimation, with guardrails on what should never go into a prompt.
Flexible format. Weekend-only live sessions with lifetime access to recorded lectures, built for law students and working professionals alike.
What Will You Learn?
Module 1: The DPDP Framework. The Act and Rules read together, key roles including Significant Data Fiduciaries and Consent Managers, where DPDP departs from the GDPR, and how the Data Protection Board functions.
Module 2: Data Mapping and the Processing Register. Discovering systems and vendors, building the data inventory, tagging lawful basis under Section 7, and treating AI systems as data flows.
Module 3: Consent Architecture. Notice requirements under Rule 3, the consent lifecycle, Consent Managers, children's data and retrofitting consent onto legacy databases.
Module 4: The Privacy Document Stack. Privacy policies, SOPs, retention schedules, DPAs, AI and cloud vendor terms, data sharing agreements and employee notices.
Module 5: Data Principal Rights and Grievance Redressal. Access, correction, erasure and nomination, rights request workflows against the 90 day ceiling, and downstream deletion across processors.
Module 6: Security Safeguards, Breach Response and Retention. Rule 6 safeguards, intimation to Principals and the Board, retention limits, and a live breach tabletop.
Module 7: AI Workflows for Privacy Practice. Building a grounded DPDP knowledge base, AI assisted gap assessments, contract review, clause banks, and where AI fails.
Module 8: The Privacy Practice. Scoping a DPDP readiness audit as a paid engagement, building a client roadmap to May 2027, the DPO and Privacy Counsel role, and a capstone assessment.
Course Faculty
The faculty includes Shagun Badhwar (Partner, AZB & Partners), Archana Iyer (Counsel, AZB & Partners), Gauhar Mirza (Partner, Saraf and Partners), Shreya Gupta (Partner, Chandhiok & Mahajan), Arrpita K Bhatt (Data Privacy and Media Lawyer), Dipanjay Dey (Data Protection Officer, HDB Financial Services), Agastya Shukla (Legal Operations & AI Consultant), Sana Banyal (Senior Associate, Shardul Amarchand Mangaldas & Co), Prasidhi Agrawal (Associate, Shardul Amarchand Mangaldas & Co) and Nitya Nath (Associate, Shardul Amarchand Mangaldas & Co).
Programme Details
Duration: 8 live online sessions across 3 weekends, September to October 2026
Dates: September 27 to October 11, 2026 (weekends only)
Session length: 1.5 to 2 hours each
Mode: Online, Live (with lifetime access to recorded lectures)
Eligibility: Law students (UG and PG), young lawyers and litigators, in-house counsel, compliance and privacy professionals, and Company Secretaries and CAs moving into privacy. No prior technical background required.
Fee: ₹1,999 (Basic) and ₹2,999 (Advanced, recommended). The Advanced plan adds Lifetime Access to Recorded Lectures, curated course notes (100+ pages), the DPDP Prompt Library (200+ prompts), the DPDP Implementation Guide, the Privacy Document & Template Pack, the Recruiter & Employer Contact List and a 1 to 5 year career roadmap to DPO and Privacy Counsel.
Certification: Advanced QR-Verifiable Certificate in Data Privacy, DPDP Implementation & AI from IALA
Register: https://iala.in/data-privacy-law-bb/
About IALA
The Integrated Academy for Law & AI (IALA) is a legal education academy focused on Law & AI programmes, teaching core areas of law alongside practical AI integration. Founded by NLU graduates, IALA builds industry-oriented courses with law firms, legal practitioners and technology experts.
Contact Information
Email: contact@iala.in
Phone: +91 92325 93090