Learning Outcomes
- Identify digital personal data, apply the Act’s scope tests, and explain the phased commencement timeline.
- Distinguish Data Principal, Data Fiduciary, Data Processor, Consent Manager, child, guardian, and Significant Data Fiduciary roles.
- Evaluate consent, notice, withdrawal, specified purpose, necessity, and certain legitimate uses.
- Explain access-related information, correction, completion, updating, erasure, grievance, nomination, and Data Principal duties.
- Recognize core Data Fiduciary obligations for accountability, accuracy, safeguards, breach response, contact, retention, and erasure.
- Apply child, parental-consent, lawful-guardian, well-being, tracking, advertising, and exemption requirements at awareness level.
- Explain SDF governance, transfers, exemptions, Data Protection Board functions, complaint pathways, and penalty context.
- Use a practical DPDP decision workflow and create a phased readiness plan without offering legal advice.
Certificate : DTF AI Academy
Course Features
- Lectures 48
- Quizzes 8
- Duration Lifetime access
- Skill level All levels
- Language English
- Students 7
- Certificate Yes
- Assessments Self
- 9 Sections
- 48 Lessons
- Lifetime
- Why the DPDP Act Matters and When It Applies7 Items
Outcome: Recognize digital personal data, explain the Act's purpose and scope, and distinguish current provisions from future commencement dates.
Case: A local service collects paper forms, scans them into a cloud system, and assumes the DPDP Act cannot apply because collection began on paper.
Tools: Scope decision tree, Personal-data spotting exercise, Commencement timeline
- People, Roles, and the Personal-Data Lifecycle7 Items
Outcome: Distinguish Data Principal, Data Fiduciary, Data Processor, Consent Manager, child, and Significant Data Fiduciary roles.
Case: A company uses a cloud payroll platform and assumes the vendor becomes solely responsible because it stores and processes employee records.
Tools: Role-mapping canvas, Lifecycle map, Responsibility matrix
- 2.1The Data Principal is the individual
- 2.2The Data Fiduciary decides purpose and means
- 2.3A Data Processor acts for a Data Fiduciary
- 2.4Consent Managers are a distinct registered role
- 2.5Children and lawful guardians need special handling
- 2.6Map the lifecycle before choosing controls
- 2.7Module 2 Assessment — People, Roles, and the Personal-Data Lifecycle5 Minutes5 Questions
- Consent, Notice, and Certain Legitimate Uses7 Items
Outcome: Evaluate consent and notice quality, recognize withdrawal requirements, and distinguish consent from the Act's certain legitimate uses.
Case: A mobile app requests contacts, precise location, microphone access, and advertising consent in one pre-ticked acceptance screen for a basic calculator service.
Tools: Notice quality checklist, Consent decision lab, Legitimate-use scenario cards
- Rights and Duties of Data Principals7 Items
Outcome: Explain access-related information, correction, completion, updating, erasure, grievance, nomination, and Data Principal duties.
Case: A learner wants to correct an incorrect address, remove an obsolete document, and understand which processors received their account information.
Tools: Rights request simulator, Identity verification checklist, Grievance pathway
- Core Obligations of Data Fiduciaries7 Items
Outcome: Recognize accountability, processor contracting, accuracy, security, breach, contact, retention, and erasure obligations.
Case: A service collects accurate application data, shares it with three vendors, keeps every copy indefinitely, and has no published privacy contact or breach playbook.
Tools: Obligation map, Processor-control checklist, Retention trigger worksheet
- 5.1The Data Fiduciary remains accountable
- 5.2Accuracy matters when decisions or disclosure follow
- 5.3Reasonable safeguards are layered
- 5.4Breach response serves people and the Board
- 5.5Retention needs a purpose or legal reason
- 5.6Publish a usable privacy contact
- 5.7Module 5 Assessment — Core Obligations of Data Fiduciaries5 Minutes5 Questions
- Children, Guardians, and Inclusive Consent7 Items
Outcome: Apply the child threshold, verifiable parental consent, lawful-guardian verification, prohibited practices, and specified exemptions.
Case: An education app profiles a fifteen-year-old for targeted advertising while relying on a self-declared age box and an unverified adult email address.
Tools: Age-assurance decision tree, Parental-consent journey, Child-safety exemption matrix
- 6.1A child is under eighteen
- 6.2Verify parental consent
- 6.3Verify lawful guardianship where applicable
- 6.4Avoid detrimental processing
- 6.5Tracking and targeted advertising face restrictions
- 6.6Use the exemption matrix carefully
- 6.7Module 6 Assessment — Children, Guardians, and Inclusive Consent5 Minutes5 Questions
- Accountability, Transfers, Board, and Penalties7 Items
Outcome: Explain Significant Data Fiduciary controls, transfer rules, exemptions, Board functions, complaint flow, and penalty context.
Case: A high-volume platform assumes that overseas processing is prohibited, algorithms require no review, and the Board can award compensation like a civil court.
Tools: SDF readiness checklist, Transfer decision record, Board pathway map
- 7.1Significant Data Fiduciaries have added duties
- 7.2Algorithms enter the risk review
- 7.3Transfers use a restriction model
- 7.4Exemptions are conditional
- 7.5The Board is digital by design
- 7.6Penalties are significant but contextual
- 7.7Module 7 Assessment — Accountability, Transfers, Board, and Penalties5 Minutes5 Questions
- Everyday DPDP Practice and Readiness7 Items
Outcome: Apply DPDP awareness to common work decisions, identify escalation points, and build a phased personal or organizational readiness plan.
Case: A team launches a new form tomorrow, cannot explain why every field is needed, uses a vendor without a data clause, and has no rights or incident route.
Tools: Data-handling decision card, Privacy notice review, Thirty-day readiness plan
- 8.1Pause before collecting
- 8.2Share only through an accountable route
- 8.3Recognize a rights request
- 8.4Recognize and escalate a personal data breach
- 8.5Build readiness by commencement phase
- 8.6Capstone: decide, document, and escalate
- 8.7Module 8 Assessment — Everyday DPDP Practice and Readiness5 Minutes5 Questions
- Final Examination0 ItemsFinal assessment for DPDP Act Awareness. Passing score: 70%.
Certificate
