Skip to content
DPDP deadline in
DPDP Knowledge Bank →
PrivacySuraksha - Privacy. Trust. Compliance

India's DPDP privacy operations platform

Free certificate course

Learn the DPDP Act, then prove it.

6 short modules written against the text of the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025, then a timed exam. Pass it and you can download your certificate on the spot. Free, with no account to create.

modules
6
min reading
134
exam questions
90
to pass
85%

One path, 6 stops.

Take the modules in order: each one builds on the last. Every lesson cites the sections of the Act it rests on, and a five-question self-check closes each module.

Your progress is saved in this browser.

  1. Module 1 · 6 lessons · 20 minFoundations of the DPDP ActWhy India has a dedicated data protection law, how the Act is being brought into force in three phases, the key terms every other section depends on, and where the Act applies. It closes with a careful comparison with the GDPR.Why the Act existsThree-phase commencementKey definitionsTerritorial scopeWhat the Act excludesDPDP and the GDPRStart
  2. Module 2 · 6 lessons · 16 minRights and duties of Data PrincipalsWhat the individual a piece of personal data is about can demand from a Data Fiduciary under Chapter III of the Act, the duties she owes in return, and how she uses the Data Fiduciary, Consent Managers and the Data Protection Board to enforce her rights.Right to accessCorrection and erasureGrievance redressalNominees, parents and guardiansDuties of Data PrincipalsEscalation to the BoardStart
  3. Module 3 · 6 lessons · 18 minData Fiduciary obligations and consentHow a Data Fiduciary may lawfully process personal data under Chapter II of the Act: the two grounds for processing, notice, valid consent and its withdrawal, the legitimate uses, the general obligations of Section 8, and the special rules for children's data.Grounds for processingNotice and consentConsent ManagersLegitimate usesSecurity and breach intimationChildren's dataStart
  4. Module 4 · 6 lessons · 30 minGovernance, transfers and exemptionsHow the Act treats Significant Data Fiduciaries and their Data Protection Officers, when personal data may leave India, and which narrow exemptions Section 17 allows. It closes with the provisions that require an organisation to be able to show its compliance.Significant Data FiduciariesDPO and contact personIndependent audit and DPIACross-border transferSection 17 exemptionsDemonstrating accountabilityStart
  5. Module 5 · 6 lessons · 28 minEnforcement: the Board, penalties and appealsHow the DPDP Act is enforced: the Data Protection Board of India and its inquiries, appeals to the Appellate Tribunal, mediation and voluntary undertakings, the penalty Schedule, and the government powers and other-law provisions that sit around them.Data Protection Board of IndiaInquiries and directionsAppeals to TDSATMediation and undertakingsThe penalty ScheduleBlocking and other lawsStart
  6. Module 6 · 6 lessons · 22 minPutting the Act into practice, including AIHow the Act's existing provisions turn into day-to-day work: mapping your data, running consent, securing data and managing vendors, and responding to breaches. The module closes by applying the same general rules to AI and machine-learning systems.Data inventory and mappingConsent in practiceSecurity and processorsBreach responseAI and machine learningStart
  7. Finish lineCertificate exam90 questions in 120 minutes. 77 correct earns the certificate.Exam

Ready for the exam?

90 multiple-choice questions, 15 from each module, drawn at random every time you start. The options are shuffled too, so no two attempts are the same.

  • Work through all 6 modules. Each ends with a short self-check.
  • Set aside 120 minutes. The timer keeps running if you leave the page.
  • Have your full name ready, exactly as it should appear on the certificate.
  • Use one browser for the whole exam. Your progress is saved there, not on our servers.
Questions
90
Minutes
120
Correct to pass
77
Start the certificate exam

About this course

PrivacySuraksha wrote this course from the public text of the Act, the DPDP Rules, 2025 and the commencement notification. Where a provision is not yet in force, the course says so and gives the date it starts. It is general education about a statute, not legal advice.

The certificate records that you passed this exam on a given date. It is not a professional qualification or an accreditation. In this version, certificates are not stored by us and cannot be looked up or verified online.