Skip to content
October 2026 editionCourses

Data Protection Law and Practice in India

Data protection and privacy law in India: the Digital Personal Data Protection Act 2023 and Rules, sector rules, breach response, the Data Protection Board and comparison with the GDPR

Express interest in Data Protection Law and Practice in India

I am a*

Admission by application · Privacy

All courses
  • Six weeks
  • 12 to 15 people
  • Live sessions
  • By application

Why this course

India now has a general data protection law, with penalties of up to 250 crore rupees, and its main duties apply from May 2027. This course explains what the Act and Rules require, how to prepare for them, and how they compare with the GDPR.

What you will be able to do

  1. 01Choose a lawful ground for each use of personal data, and get notice and consent right
  2. 02Set up the duties of a data fiduciary, from security to erasure
  3. 03Run a breach response that meets every reporting duty
  4. 04Know when the GDPR applies to an Indian business

Who it is for

  • Technology and corporate lawyers
  • In-house counsel
  • Data protection officers
  • Privacy and compliance professionals
  • Law students

What it covers

  1. 01The Indian data protection framework
  2. 02Lawful processing and consent
  3. 03Duties of organisations that handle data
  4. 04Breaches and enforcement
  5. 05India and the GDPR

The full syllabus, with the topics and readings for each session, is available on request.

Get the full syllabus for Data Protection Law and Practice in India

I am a*

Admission by application · Privacy

How it works

Live sessions

Taught live every week by one instructor, who stays with the cohort for the whole course.

Recordings

Every session is recorded, so you can revise or catch up on one you missed.

Guest practitioners

People who do this work join some sessions to show how the law operates in practice.

Certificate

A Matter Labs certificate for attending the course. No exams.

Questions

What does it cost?

Fees are shared with applicants when a cohort opens.

When does the next cohort start?

Dates are set once enough people have expressed interest. Express interest and we will write to you first.

How much time does it take?

Six weeks, twelve sessions, 24 contact hours, plus some reading before each session.

Do I need a background in this area?

No. There are no prerequisites.

What if I miss a session?

Watch the recording. Recordings are for enrolled participants only.

Express interest in Data Protection Law and Practice in India

I am a*

Admission by application · Privacy