Explain the framework
Use accurate terminology and distinguish the roles and responsibilities of relevant participants.
THE PROPOSED CURRICULUM
A foundation that connects
principles to practice.
Ten proposed domains bring together privacy concepts, the DPDP framework and organisational governance. This is a curriculum overview, not the final examination syllabus.
Programme in development. Domain weightings, eligibility and examination specifications are not yet finalised.
01Privacy foundations and statutory roles
Explain core privacy concepts and distinguish Data Principal, Data Fiduciary, Data Processor, Consent Manager and DPO roles.
ILLUSTRATIVE LEARNING TASK
Map the people and responsibilities involved in a simple customer-data journey.
02DPDP framework, commencement and applicability
Identify relevant instruments, distinguish present and future requirements, and recognise scope and conditional exemptions.
ILLUSTRATIVE LEARNING TASK
Check the source, applicability and commencement of a requirement before treating it as an operational obligation.
03Notice, consent and certain legitimate uses
Recognise processing grounds, notice requirements, consent withdrawal and common errors in routine scenarios.
ILLUSTRATIVE LEARNING TASK
Identify the questions a team should resolve before introducing a new data-collection form.
04Individual rights, duties and grievance redressal
Understand request handling, nomination, grievance routes and Data Principal responsibilities.
ILLUSTRATIVE LEARNING TASK
Outline how a request is received, assigned, tracked and escalated.
05Organisational obligations and data lifecycle
Understand accountability, accuracy, data inventories, retention, erasure and the purpose of implementation evidence.
ILLUSTRATIVE LEARNING TASK
Connect a data inventory entry to its owner, purpose, retention decision and supporting records.
06Children, guardians and additional obligations
Recognise child-data and lawful-guardian considerations, conditional exemptions and the additional framework for notified Significant Data Fiduciaries.
ILLUSTRATIVE LEARNING TASK
Recognise when specialist review is needed instead of assuming the standard workflow is sufficient.
07Security safeguards and breach response
Recognise basic safeguards, incident escalation, notification responsibilities and evidence preservation.
ILLUSTRATIVE LEARNING TASK
Identify the first internal escalation and record-preservation steps in an illustrative incident.
08Processors, contracts and cross-border processing
Understand processor oversight, contractual controls, data flows and conditional transfer requirements.
ILLUSTRATIVE LEARNING TASK
Identify privacy questions to ask when reviewing a new service provider.
09Privacy governance and risk management
Understand ownership, policies, risk identification, escalation, management reporting and ethical judgement.
ILLUSTRATIVE LEARNING TASK
Turn an unclear responsibility into an action with an owner, an escalation route and evidence.
10Compliance monitoring, evidence and audit readiness
Distinguish policies from operating evidence, recognise control gaps and understand remediation tracking and assurance boundaries.
ILLUSTRATIVE LEARNING TASK
Explain why a written procedure alone does not demonstrate that a control operates.
No matching domains. Try another term.
10 domains
PROPOSED LEARNING OUTCOMES
What a strong foundation should enable.
Reason through a scenario
Identify the privacy question, choose a sensible next step and escalate uncertainty.
Recognise controls & evidence
Connect a responsibility to a process, a control and a record. Recognise obvious gaps.
Contribute within your role
Communicate findings, support implementation and understand the limits of associate-level competence.
YOUR NEXT STEP