Naavi.org

DPDPA Rules have been notified on November 13, 2025. The first task before the Data Protection Board will commence from 13th November 2026 which is hardly 88 days away. This is the date set for submission of applications by aspiring “Consent Managers” for accreditation.

Before this date, DPB must be in place and its website should be operative with a necessary application form. The aspiring entities whether they are TCS, or JIO or IDFY or any other entity should get their platform audited and certified by an independent auditor of relevant credentials.

However, so far no developments have taken place so far to indicate that the Government is getting ready. In the meantime Supreme Court has received a petition challenging the constitutionality of the Act which could be a reason for the Government to be keeping the DPB formation in abeyance.

Nevertheless, for Naavi and FDPPI, it is time to continue their training efforts to create DPOs and Data Auditors ready to take on their respective responsibilities when the time comes.

In this direction, the next training program for Certified Independent Data Auditors (CIDA) is happening as a 3 day program at Fairfield Marriott, Rajaji Nagar, Bengaluru.

A virtual curtain raiser program concluded yesterday with a discussion on DPDPA and responsibilities of a DPO for implementation and the physical event is set to commence on August 23rd.

Marking the uniqueness of the training, a mock DPB hearing has been scheduled as a part of the training with a role play. The hearing will discuss the complaint of a Bank Customer against a Bank using an AI model to reject her loan application. The purpose of the discussion is to bring home learning points on DPDPA, RBI guidelines on AI, AI Governance requirements etc.

It should be an interesting experience for the trainees.

Look forward to this eventful interaction.

Considering the importance of this event, FDPPI is inviting representatives of MeitY to be present if possible. FDPPI has been regularly inviting MeitY for such programs and they are consistently avoiding attendance. We hope this time it would be different.

Naavi

Those who pass the examination after CIDA training are entitled to use the title “IDA” as a prefix to their name. Collect the IDA badge by completing the course in the first cohort.

Naavi

FDPPI is all set to launch its first course of CIDA or Certified Independent Data Auditors on a three day program from August 21-23.

Today the program is commencing with a curtain raiser which also is a crash program on DPO. This will be a virtual event for the registrants. This itself will be a bundle of DPDPA knowledge which is part of the larger program.

Independent Data Auditor (IDA) is a new profession which comes beyond being a DPO. DPDPA or Digital Personal Data Protection Act is a mandatory law that must be implemented by all business entities in India by 13th May 2027. MeitY has recently confirmed that there is no likely hood of this date being extended.

We have already reached  the stage when those entities which are processing sensitive personal information will have to decide whether they should treat themselves as Significant Data Fiduciaries (SDF) and undertake the additional obligations of designating a DPO, Appointing an external Independent Data Auditor and a DPIA.

With the use of AI everywhere and also capture of employee biometrics by most large organizations almost every organization is crossing the threshold from Data Fiduciary to Significant Data Fiduciary. There will therefore be as many SDFs in the country as there are DFs and this means a huge requirement of DPOs and Data Auditors.

They need DPOs immediately so that their implementation is put on track. But soon they will also have to think of Independent Data Auditors who will start their audit on or after 13th May 2027.

The Data Auditors will have to be quickly in place to first conduct a DPIA (Data Protection Impact Assessment)  which will also be the First Data Compliance Audit of a Company any time after 13th May 2027.

We have 269 days for professionals to get ready and claim the coveted appointment as a Data Auditor for the company when companies will be scrambling to find the right person.

FDPPI has set upon itself a mission to create as many eligible Independent Data Auditors as possible in the next 269 days so that there will be no dearth for such professionals.

The profession of “Independent Data Auditor” (IDA) is all set to create revolution in the professional field around the Data Protection Industry in India.

At the same time RBI has set the Cat amongst the pigeons by releasing the Data Governance Framework and Model Risk Management Framework to be implemented by Banks and to be “Audited” .

The guideline states “An RE should ensure that DGF and policies and processes thereunder are subject to periodic internal and external audit, including through CERT-IN empanelled auditors, as applicable”. Hence CERT In empanelled auditors who are primarily Information Security auditors today are also required to become Data Auditors and join the community of Data Auditors to be ready for the task of auditing the Data Governance Frameworks of Banks.

The CIDA program recognizes this and covers Data Audit from the perspective of DPDPA as well as the RBI guidelines.

While August 21 will be the date when the first such program will be launched, today the curtain raiser to refresh the participants with the preliminary knowledge on DPDPA as a law and the task of a DPO in implementation will be discussed in a virtual session. Further a plan of action to prepare for the program over the next 4-5 days will also be suggested so that they will be ready to participate in the CIDA program on August 21st.

All those who have registered for the course may join  the program at the link already sent to them. For any further information, please contact FDPPI.

Naavi

https://www.youtube.com/watch?v=WfqMmypbACg

Kindly note: July 16 event is virtual. July 21-23 is a Physical event