India's data protection law has moved from paper to practice. With the DPDP Rules, 2025 notified and enforcement rolling out in phases through May 2027, every organization handling personal data — from startups to enterprises — now has a compliance clock running.

Decode DPDP is a two-day, 4-hours-a-day intensive by the Cyber Hygiene Community, designed to take professionals and businesses from awareness to action. Across the sessions, participants will unpack the DPDP Act and Rules, core obligations of Data Fiduciaries, consent and notice frameworks, breach response, children's data protections, cross-border transfer rules, and the rights of Data Principals — all explained through real-world scenarios and practical templates.

Who should attend: Compliance officers, DPOs, legal and IT teams, startup founders, HR and marketing professionals, consultants, and anyone responsible for handling personal data in their organization.

Walk away with a working knowledge of the law, a compliance readiness checklist, and the confidence to build (or audit) your organization's DPDP program.

Key Topics Covered

Day 1 — Understanding the Law - 1 Aug (10:00 A.M. - 1:00 P.M. )

• Overview of the DPDP Act, 2023 and DPDP Rules, 2025
• Key definitions: Data Principal, Data Fiduciary, Significant Data Fiduciary, Consent Manager
• Lawful grounds for processing personal data
• Consent architecture: notice standards, withdrawal, and consent managers
• Rights of Data Principals: access, correction, erasure, grievance redressal
• Special protections for children and persons with disabilities

Day 2 — Building Compliance in Practice - 2 Aug (10:00 A.M. - 1:00 P.M. )

• Reasonable security safeguards and minimum technical controls
• Breach identification, response, and the 72-hour notification requirement
• Data retention and erasure triggers (with sector-specific timelines)
• Obligations of Significant Data Fiduciaries (SDFs): DPIAs, audits, data localisation
• Cross-border data transfer rules
• Data Protection Board of India: complaints, appeals, and penalty framework
• Building an internal DPDP compliance roadmap: RoPA, policies, and audit readiness

Event Highlights

• 8 hours of expert-led training across 2 focused days
• Real case studies and breach-response simulations
• Practical templates: consent notices, RoPA, grievance workflows
• Interactive Q&A and open-house discussion with cybersecurity and legal practitioners
• Certificate of participation from the Cyber Hygiene Community
• Networking with compliance, legal, and cybersecurity peers across sectors