You get to learn from the best

Course Anchor | Expert

Aishvarya Joshi

Senior Associate

Indian Qualified Lawyer, MBA (Marketing & HR), Double LLM (Legal Technology, King’s College London & Criminal Laws and Cyber Security, ALU), CIPP/E, CIPM, CIPT, AIGP certified (IAPP) with ISO 27001 Lead Auditor, ISO 27701 Lead Implementer (BSI)

Aishvarya is a Legal Tech Consultant with expertise in Data Privacy, Information Security, and AI Governance. At Addictive Learning Technologies (LawSikho / Skill Arbitrage). Leads Tech, Privacy-focused courses, and mentoring programs focused on global data protection laws, ISO standards, and AI governance frameworks. Known for her structured and practical approach, she empowers learners to apply privacy, compliance, and governance principles effectively across industries.

Guest Faculty | Expert

Chinmay Lenka

B.Com, Taxation, Sri Aurobindo College. Bachelor of Laws, DU.

He is an Indian-qualified lawyer and an alumnus of the prestigious Faculty of Law, Delhi University. Experienced Technology & Data Privacy Laws Expert with 5+ years of experience dealing with Technology, Data Privacy and AI Ethics Laws. Extensive experience in legal advisory, contract drafting, and reviewing. Specialised in data privacy compliance and audit services for global startups and businesses.

Guest Faculty | Expert

Aarlin Moncy

Associate

B.A.LL.B Jamia Hamdard, LL.M in Cyber Law & Cyber Crimes, Guru Gobind Singh Indraprastha University, New Delhi.

Aarlin is the Founder & Counsel at Pathway Counsel, a full-service law firm based in New Delhi. His experience spans from representing major technology and infrastructure companies to being appointed as Standing Counsel for various Educational Institutions and Civil Societies. He delivers lectures on global privacy regulations.

Key Highlights

This course offers a thorough exploration of the dynamic data protection and privacy landscape, spotlighting pivotal global trends and legislative advancements.

Gain insights into the escalating wave of cyber threats and data breaches, illustrated by the World Health Organization's experience of a fivefold increase in cyber attacks as well as from real-world examples of data breaches that impacted major industry players such as Microsoft, Twitter, Zoom, and others.

Discover strategies to tackle the vulnerabilities arising from the widespread adoption of remote work, with a surge in internet-connected devices. The course provides actionable measures to enhance data protection in these scenarios.

Stay informed about the global response to data privacy concerns through the enactment of key legislations such as GDPR, Digital Charter Implementation Act in Canada, state-level privacy laws in the U.S., and data protection laws in countries like Brazil, Australia, China, and India.

This course opens doors to burgeoning career opportunities for young lawyers, accountants, and company secretaries in the dynamic field of data protection and privacy, both within organizations and as freelancers.

Explore a wide range of potential employers, from law firms and tech companies to multinational corporations and consulting firms. This underscores the high demand for professionals adept in international data protection and privacy laws.

Who should take this course?

Lawyers who want to shift from traditional areas of legal practice to data protection and privacy laws and work with fast-growing startups, law firms or in the privacy teams of companies
In-house counsels who want to assist their organisations in addressing data protection and privacy work at a global level
Litigators who want to assist their clients on the side with data protection and privacy work
Law students who are interested in building a career in data protection and privacy laws - starting early will give you a headstart as this space is specialised and you will have a massive advantage in securing career opportunities if you are trained

What will you learn from this course?

You will learn about how to identify applicability of Indian data protection and privacy laws and advise clients/or your company with implementation
You will learn how to handle data breaches and incidents
You will learn how to work on domestic and cross-border third-party data transfers
You will learn about how to review agreements with different parties to ensure compliance with data protection and privacy laws;
You will learn how to collaborate with other teams, perform create compliance programs, processes, audits, develop policies, and inform regulators
You will learn how to perform disputes and litigation work pursuant to data and privacy breaches

Training Methodology

Online 24/7 access

Access study materials via our online portal & via our anroid & iOS apps.

Practical Exercises

Two practical exercises every week, each followed by written feedback.

Live Online Classes

Live online classes based on exercises, allowing questions and feedback.

Convenient Class timings

Classes held after work hours, typically on Sundays or after 8 PM on weekdays.

Live Doubt Clearing

Live doubt clearing for support and one-on-one sessions with mentors.

Money-back guarantee

If you take this course, follow it diligently for a month, do all the exercises but still do not find value in it, or not able to understand or follow it or not find it good for any reason, we will refund the entire course fee to you. It is a 100% money-back guarantee with only one condition, you must pursue it properly for a month. If you don’t find it valuable after that, get your entire money back.

View Refund Policy

Client Opportunities & Recruitment Support where required

Many employers, law firms and companies are happy to recruit our high performing students. If you do well in your exercises and classes, we can help you to get jobs, internships and assessment internships in good law firms, with renowned lawyers as well as in various companies.

Our team helps our students in building their profile on LinkedIn and freelancing platforms to increase their reach to the potential recruiters or clients.

Our experts guide the students on how to crack any interview.

On-demand, we provide mock interviews for our students looking for jobs.

We share multiple internship/recruitment opportunities every week on our Whatsapp group.

We help our students to get internships not only at law firms and chambers, but also with rising startups in diverse sectors.

Our mentorship helps students to avoid running in the rat race behind the regular job openings; rather we help them design their own path based on their personal interests.

We share multiple and diverse client opportunities with our pool of practicing advocates on a daily basis. Our references have helped several advocates really scale up their practice. The opportunities range from contract drafting to complex international taxation matters.

Syllabus

HOW TO DETERMINE APPLICABILITY OF INDIAN DATA PROTECTION AND PRIVACY LAWS

Material and territorial scope of the laws Impact across Industries How and when to validly claim exemptions from Indian data protection laws How to identify business contact information How to determine the role of your client/employer - Processor/Sub-processor or Controller, Significant Data Fiduciaries or a combination of the above roles How the client/employer role influences implementation obligations and liabilities What to do if your client/employer plays multiple roles in different scenarios Which organisations need to appoint a DPO Consequences of material non-compliance

HOW TO CREATE A ROADMAP FOR ORGANISATIONAL IMPLEMENTATION

How to get started and initiate/lead implementation for your client/employer Crucial tasks and checklists for implementation Treatment of past processing activities Appointment of privacy counsels, DPOs, internal grievance redressal mechanisms How conduct a data protection impact assessment, analyse key risks in a DPIA report and create a roadmap for implementation Alignment of stakeholders from marketing, sales, HR, ops and finance Establishment of department-wise processes and SOPs How to conduct data audits Conducting department-wise Trainings Legal drafting and advisory work

DRAFTING POLICIES AND NOTICES

Identification of grounds for processing data - consent and legitimate uses How to validly invoke these grounds in data implementation Key elements of a privacy notice and how to draft one How to create a cookie policy How to customise privacy notices and cookie policies for SAAS, e-commerce, fintech, BFSI and AI Sample templates of privacy notices and cookie policies How to create an internal privacy policy for implementation of privacy laws How to create data breach policies How to create asset policies and BYOD policies How to create Acceptable Use Policies How to create data retention policies and schedules

HOW TO CONDUCT A DPIA

How to identify if DPIA is required Identifying key POCs for a DPIA How to create a record of processing activities How to create a data flow map How to scrutinise data security measures How to assist the business teams to fill the DPIA Sample templates of DPIA Identifying the legal and risk treatment controls Understanding and mitigating the issues highlighted in DPIA

HOW TO CREATE A GRIEVANCE REDRESSAL MECHANISM

Understanding the obligations of Significant Data Fiduciaries to create grievance redressal mechanism How to establish a competent grievance redressal mechanism How to implement the right to “grievance redressal” in any organisation What are the timelines to respond to any grievance and how to design a process to handle them?

REQUIREMENTS FOR THIRD PARTY DATA TRANSFERS AND CROSS-BORDER DATA TRANSFERS

Identifying restrictions on cross-border transfers through sectoral laws and regulations How to ensure rights mentioned under Indian law in cross-border transfers How to analyse the risk associated with any cross-border transfer Contractual clauses necessary for valid third-party transfers How to keep a track of the blacklisted countries by the government

HOW TO LEAD/REVIEW DEPARTMENT-WISE TRAININGS AS A DATA PROTECTION LAWYER/PRIVACY COUNSEL

How to conduct an awareness or training session for different departments

Identification of data processed by the relevant department
Drill-down into user access rights and admin controls
Mapping specific restrictions on processing, sharing internally, with external agencies and deletion
Department-specific examples
Training, refreshers and certification

Relevant provisions for administration of data privacy trainings:

Data Protection Regulations
Identifying and Handling Sensitive Data
Social Engineering Awareness
Understanding the Best Practices in Data Privacy and Security

How to evaluate the effectiveness of the awareness or training sessions

HOW TO HANDLE DATA PRINCIPAL RIGHTS

Understanding Rights of Data Principals

Right to correction and erasure of data
Right to nominate
Right to access
Right to withdraw consent and data deletion rights
Right to grievance redressal

How to implement a secure deletion process that allows users to permanently remove their data upon request How to maintain a directory of individuals who have exercised the right to nomination How to collaborate on a self-service portal where users can view and download their data Implementation of popular tools How to implement data deletion rights across the company How to enable and provide a mechanism to register grievances How to liaise with team members in case of Data Access Requests

INCIDENT RESPONSE AND HOW TO HANDLE DATA BREACHES

Legal obligations in case of an incident or a data breach How to develop detailed policies and procedures for incident identification, reporting, and response How to identify key roles and responsibilities in a data breach team How to perform pre-emptive risk assessments to identify critical assets, potential threats, and vulnerabilities How to prepare a public statement and communicate with customers, partners, and regulators

POWERS OF GOVERNMENT, INVESTIGATIVE AGENCIES AND REGULATORY AUTHORITIES FOR INTERCEPTION AND DISCLOSURE

Statutory provisions and circumstances which require disclosure of personal information: tax laws, anti money-laundering laws, SEBI and RBI Regulations, Delhi Special Police Establishments Act, state Powers of government, investigative agencies and data protection board to intercept or require disclosure and procedural requirements How to handle requests for disclosure from such agencies and how to verify whether the disclosure rules are validly invoked by government agencies What to do if government/investigative agencies exercise powers in violation of procedures Consequences of wrongful disclosure to government agencies

DISPUTE RESOLUTION, PENALTIES AND PROCEEDINGS BEFORE DATA PROTECTION BOARD

How to initiate complaints for a client How to defend your client/organisation before the Data Protection Board Administrative process for adjudication Appellate process before TDSAT Scope of writs and SLPs before and after decisions of Data Protection Board/TDSAT

Course Plan

Above prices are inclusive of all applicable taxes and charges.

Standard

RS. 51000 incl. of all charges

Join the waitlist Enroll now

1 online live class/ week

2 practical or drafting exercises per week

Get digital access to entire study material

Access on LMS, Android & iOS app

Instructor feedback on assignments

Unlimited doubt clearing sessions.

Instructor led course with online live classes

Online exams (give exams as per your convenience on given time slots)

Certificate (by courier)

CV enhancement

Coaching for professional networking

Training for writing and publishing articles

Internship & Job Support

Interview preparation guidance

Access to updated content online for 3 years

Top students are recommended to law firms and companies (as applicable)

Join the waitlist Enroll now

Indian Data Protection and Privacy Laws: Implementation, Compliance and Regulatory Litigation

Enrollment Closed