LiveLaw Academy has launched a six-week live course on India's data protection law, beginning July 11, 2026, taught by Advocate Vrinda Bhandari, Rhodes Scholar and litigating lawyer known for her work on digital rights and privacy law in India.

Register for the course on LiveLaw Academy →

Titled the Capsule Course on Data Protection Law in India, the course covers the evolution of privacy jurisprudence, the structure and obligations under the Digital Personal Data Protection Act (DPDP Act), 2023, exemptions and government powers under the Act, the rights of data principals and the role of the Data Protection Board, a comparative reading against the European Union's GDPR, and the emerging legal questions at the intersection of artificial intelligence and data protection law.

About the Course

The course runs live every Saturday from 11:00 AM to 1:00 PM, over six weeks, for a total of 12 teaching hours. Sessions begin July 11, 2026, and conclude August 16, 2026.

Each week builds on a structured syllabus:

Week 1 examines the background of privacy law in India, including the Justice Srikrishna Committee, the Personal Data Protection Rules, 2019, the Joint Parliamentary Committee Report, the existing legal framework under the IT Act, the SPDI Rules, and the BNS, and foundational privacy principles such as notice, consent, and collection and storage limitation.

Week 2 covers the structure of the DPDP Act, including its applicability and timelines, the obligations on data fiduciaries and data processors, additional obligations on significant data fiduciaries, and the foundational rules around notice and consent — including where an organisation should start and the role of consent managers.

Week 3 addresses exemptions under the Act, including legitimate uses such as employment purposes, general exemptions, exemptions for the Central Government and for research, archiving, and statistical purposes, the Central Government's powers relating to surveillance and data localisation, and the Act's amendment to the Right to Information Act.

Week 4 covers the data of children and persons with disabilities and verifiable parental consent, the rights and duties of data principals, the constitution and powers of the Data Protection Board, penalties, and the appeals process.

Week 5 compares the DPDP Act with the GDPR, including the absence of rights such as the right to be forgotten and the right not to be subject to automated decision-making, and examines the IT Rules, 2021, content-blocking under Section 69A of the IT Act, and surveillance and privacy.

Week 6 turns to artificial intelligence, covering how the DPDP Act functions in an age of AI and AI agents, intellectual property issues, algorithmic bias and accountability, AI-generated content and misinformation, and AI governance frameworks.

About the Instructor

Advocate Vrinda Bhandari is a litigating lawyer based in Delhi, specialising in digital rights, technology, and privacy law. A Rhodes Scholar, she holds a double Masters in Law and Public Policy from the University of Oxford and an undergraduate law degree from NLSIU Bangalore.

She has been involved in litigation challenging the constitutionality of the Aadhaar Act, the Intermediary Rules of 2021 and 2023, India's surveillance framework, and the procedure governing the search and seizure of digital devices, among other matters. She has also litigated on the use of government blocking powers and on the restoration of internet access in Jammu & Kashmir.

Who the Course Is For

The course is designed for legal professionals, compliance officers, policymakers, in-house counsel, technology professionals, researchers, and students seeking to navigate India's evolving privacy and technology law landscape.

Fee and Registration

The course is priced at ₹4,999, including GST.

Register for the course on LiveLaw Academy →