6-Week Course on Digital Personal Data Protection Law
logo
Courses Login

Understand India's Data Protection Law - From the Lawyer Who's Litigated Its Defining Cases

This 6-week live course on the Digital Personal Data Protection Act (DPDP Act), 2023 from privacy jurisprudence to AI governance is taught by Advocate Vrinda Bhandari, Rhodes Scholar, and offered by LiveLaw Academy, starting 11 July 2026.

• Read the DPDP Act in context — constitution, IT Act, SPDI Rules and BNS

• Understand obligations, exemptions, and rights frameworks under the Act

• Reason about AI governance and where Indian law is headed next


Enroll Now - ₹4,999 (incl. Taxes)
6,000+ learners trained across LiveLaw Academy courses
|
Trusted by law students and professionals across India
|
From the team behind LiveLaw

Why This Course Matters

India's data protection landscape isn't contained in a single statute. It runs from the constitutional foundations of privacy, through the existing patchwork of the IT Act and SPDI Rules, into the DPDP Act itself, and now into open questions about how this entire framework holds up against AI systems and global standards like the GDPR.

This course is built to cover that full arc — not just the DPDP Act in isolation, but the legal terrain around it: where it came from, how it compares globally, and where it's headed next.

The DPDP Act is being implemented in real time — and shaped further with every court ruling.

Course Overview

A doctrinal deep-dive into the DPDP Act, 2023 — not an operational compliance toolkit.

Course Dates

11 July 2026 – 22 August 2026*

*Final session is 15 or 22 August — to be confirmed

Duration & Format

6 Weeks | 12 Teaching Hours

2 hours per session

Saturdays: 11:00 AM – 1:00 PM

Delivery Mode

Live Online Classes

Real-time Q&A sessions

Recording and makeup session details to be shared closer to the start date


Who This Course Is For

Lawyers & Litigators

In-house Counsel

Policy Professionals & Researchers

Law Students

Founders, Business Leaders & Compliance Teams

Skills You Will Build

Reading the DPDP Act in context — constitution, IT Act, SPDI Rules and BNS

Advising on notice, consent and obligations of data fiduciaries

Navigating exemptions, Section 36 powers and data localisation

Applying rights frameworks for children, principals and the Data Protection Board

Comparing the DPDP Act with the GDPR — and where Indian law diverges

Reasoning about AI, algorithmic accountability and emerging governance frameworks

Key Questions Answered

How does India's privacy jurisprudence shape the way the DPDP Act will be read?

What does consent actually look like in practice under the Act?

How far do the Central Government's exemption and surveillance powers reach?

What recourse do data principals — and children — really have?

Where does the DPDP Act fall short of the GDPR, and why?

How does data protection law apply to AI agents and AI-generated content?

Your Instructor

Vrinda Bhandari, Advocate

Vrinda is a litigating lawyer in Delhi specialising in digital rights, technology, and privacy law. She graduated from NLSIU Bangalore and holds a double Masters in Law and Public Policy from the University of Oxford as a Rhodes Scholar.

She has litigated on the constitutionality of the Aadhaar Act and the Intermediary Rules 2021 & 2023, challenged India's surveillance framework and the procedure for search and seizure of digital devices, and litigated against government blocking powers and for restoration of internet access in Jammu & Kashmir.

This course draws directly on that litigation experience — not just what the Act says, but how it's likely to be tested, interpreted, and argued.

What You'll Learn — Week by Week

6 Weeks · 12 Live Hours · Saturdays, 11 AM – 1 PM.

Course Modules
#
Week
Topics Covered
1
Introduction to Privacy: Background and Existing Legal Framework 11 July 2026
i. Understanding privacy and data protection
ii. History: (a) Justice Srikrishna Committee; (b) Personal Data Protection Rules, 2019; (c) Joint Parliamentary Committee Report
iii. Overview of the existing legal framework: IT Act and the SPDI Rules, as well as the BNS
iv. Privacy Principles — notice and consent, collection limitation, storage limitation, use limitation, security, openness, accountability; and the role they play in practice
2
DPDP Act: Obligations on Data Fiduciaries (Notice & Consent) 18 July 2026
i. Understanding the structure of the DPDP Act, 2023:
  a. Applicability
  b. Timelines
  c. Dramatis Personae — data fiduciaries, significant data fiduciaries, data processors, data principal, data protection officer, consent manager etc.
ii. Obligations on data fiduciaries and data processors
iii. Additional obligations on significant data fiduciaries
iv. Application of the Act: Exclusion of personal data that is caused to be made publicly available
v. Foundational rules of data collection: Notice and Consent
vi. Form of notice to be given and consent taken
vii. Where should an organisation/company start?
  a. Operationalising the rules on notice and consent
  b. Role of consent managers
3
Exemptions from the DPDP Act, Powers of Central Government, and the Amendment to the RTI Act 25 July 2026
i. Exceptions from taking consent: Certain "legitimate uses," including for employment purposes (Section 7)
ii. General exemptions from different provisions of the Act (Section 16)
iii. Exemptions for (a) various purposes for the Central Government and (b) research, archiving, statistical purposes (Section 17)
iv. Powers of Central Government under (a) Section 36: surveillance powers, and (b) data localisation
v. DPDP Act's amendment to the RTI Act
4
Rights, Children's Data, and the Data Protection Board 1 August 2026
i. Data of children and persons with disabilities, and verifiable parental consent
ii. Rights and duties of data principals under the DPDP Act
iii. Data Protection Board: Constitution and powers
iv. Penalties
v. Appeals process
5
Comparison with International Statutes & Application of Data Protection Principles Across Technology: Intermediary Rules, Blocking of Content, and Surveillance 8 August 2026
i. Comparison of the DPDP Act with the GDPR
ii. Absence of rights such as the right to be forgotten and the right not to be subject to automated decision-making
iii. Section 79A of the IT Act and the IT Rules, 2021 — including the various challenges to the IT Rules, 2021
iv. Blocking of content under Section 69A of the IT Act
v. Surveillance and privacy
6
AI and the Law 15 or 22 August 2026 (TBC)
i. How will the DPDP Act work in an age of AI and AI agents
ii. AI and issues with intellectual property
iii. Algorithmic bias and accountability
iv. AI-generated content and misinformation
v. AI Governance Framework

Common Questions

Is this course only for litigators?
No. While the doctrinal depth will particularly benefit lawyers and litigators, in-house counsel, policy professionals, and serious students will find the same rigor essential for advising on or researching this law properly.
Will this help me with compliance implementation?
This course builds the legal foundation — how to read the Act, interpret its exemptions, and understand its likely judicial treatment. It is a doctrinal deep-dive rather than an operational compliance toolkit.
What if I miss a live session?
Recording and makeup session details will be shared by the LiveLaw Academy team closer to the course start date.
Is there a certificate?
Certification details will be confirmed by the LiveLaw Academy team. Please reach out to us for the latest information.
Does the DPDP Act cover all my personal data?
Not necessarily. The Act has specific exemptions — for example, personal data that you've voluntarily made publicly available yourself (such as a public social media post) generally falls outside its scope. Understanding exactly where these lines sit — what's covered, what isn't, and why — is part of what this course covers in depth.
Not sure if you or your company are covered under the Act?
That's a common starting question, and exactly what Week 2 and Week 3 are built to answer — covering the Act's applicability, exemptions, and where organisations actually start with compliance.

Understand the DPDP Act the way it will actually be argued.

The law is being shaped in real time. Learn it from a lawyer shaping it.

📅 6 weeks · live · Saturdays 11 AM

🖊️ Taught by the advocate behind India's defining digital rights litigation

✨ From privacy roots to AI governance

Enroll Now — Starts July 11

Includes GST • Limited seats available

Questions? Contact us at academy@livelaw.in

₹4,999 (Including Taxes)
Enroll Now