The Digital Personal Data Protection (DPDP) Act marks a significant shift in how organizations in India collect, manage, use, and protect personal data. While many non-profits recognize the importance of responsible data practices, translating legal requirements into day-to-day organizational processes remains a challenge. Most organizations require practical guidance, contextual examples, and ongoing support rather than one-time compliance training.
The Cohort-Based DPDP Advisory Programme is designed to bridge this gap by combining structured learning, peer exchange, expert advisory, and hands-on implementation support over three months. The programme aims to help organizations build sustainable systems and compliant legal and organizational practices for responsible data governance.
The program combines the tech and legal expertise of Tech4Dev and Pacta.
Programme Overview
| Duration | 3 months |
| Next Cohort | mid-Sep 2026 – mid-Dec 2026 |
| Cohort Size | 8–10 organizations |
| Delivery Mode | Hybrid (in-person event at the beginning, with virtual sessions and advisory support through the programme) |
| Programme Fee | INR 1.5 L excluding taxes. Additionally, participants will have to make their own travel arrangements (flights/trains) for the in-person workshop in Bangalore. Accommodation and food will be provided. |
| Program Delivered by | Project Tech4Dev and Pacta |
Programme Structure
The programme combines structured workshops, peer learning, and tailored advisory support.
It will follow a “Measure, Analyze, Improve” framework to ensure organizations can systemically close their DPDP compliance gaps.
- Measurement – Pre-work
Participants will complete the self-assessment and come ready to the in-person event, with a view on where they stand now in terms of DPDP compliance. The participant attending from each organisation must have both the responsibility and the internal authority to propel changes within their organizations, ie, they must have buy-in from all departments and staff.
- Analyses and Planning – Kick-off event – 2-day in-person workshop in Bangalore
The 2 day in-person workshop will include instructor-led workshops on key DPDP areas delving into the requirements of the Act, activities in breakout groups for hands-on learning, and individual work to create tangible plans for DPDP implementation. The key topics will include, but are not limited to:
- DPDP 101 – Understanding the Digital Personal Data Protection Act
- Data Collection & Consent – Building Responsible Data Collection Practices
- Data Storage & Security – Protecting the Data You Hold
- Data Usage & Sharing – Ensuring Responsible Data Practices
- Rights of Individuals – Supporting Data Principal Rights
- Governance & Processes – Embedding Data Protection Across the Organisation
- Improvement – 10-week virtual programme
The 10 week virtual programme will cycle through each of the above 6 topics. Participants will work individually on implementing some of their identified projects. This will be supported by group QA clinics. The clinics will cover any questions on the topic and challenges participants are facing in completing their assignment. Participants will be required to submit the evidence of completion of the assignments under each topic.
In parallel with the 10-week implementation plan, organisations will also get 1-1 advisory support. Each participating organisation will receive 10 one-hour advisory sessions with a Tech4Dev Fractional CXO or a senior lawyer from Pacta. Advisors’ profiles and availability will be published upfront. The 1-1 advisory component ensures that programme learning is translated into practical organisational change.
- Program Closing
This will be a 1 hour group call, in the last week of the program, where participants will be encouraged to list down their next steps, raise final questions, and provide their reflections and feedback.
- Post program check ins
Two group check-in calls, 1 month and 3 months after the program closing.
Programme Approach
The programme combines multiple learning modalities to maximize impact:
- Expert-led workshops
- Practical implementation exercises
- Templates and implementation toolkits
- Peer learning across organisations
- Individual advisory support
- Regular Q&A clinics
- Action planning between sessions
Participants are encouraged to apply learnings and bring real implementation challenges back to the cohort for discussion.
Expected Outputs
By the end of the programme, participants are expected to have developed:
- A clearer understanding of their obligations under the DPDP Act
- An organisational action plan for strengthening data protection practices
Depending on their identified compliance gaps and selected projects for implementation, they would also have some of the following:
- Clearer privacy policies and internal governance documents
- Better consent and data collection processes
- Improved data inventory and classification practices
- Better data storage and security procedures
- Processes for responding to data principal requests
The participants are expected to learn from the program and in turn train and sensitize their organizations. The mentors will help the participants understand their compliance obligations and formulate a clear action plan. The responsibility of the execution of that plan remains with the participating organizations. The program is designed to ensure participating organizations get the advice and support they need during the implementation phase, but the onus of doing the actual work remains on them during and after the program
Expectations from the participants
Who should attend?
The CTO or someone in senior leadership – ideally the person who will act as the DPO and will anchor the DPDP program internally. This person must have both the responsibility and the internal authority to propel changes.
We recommend that 1-2 participants from each organization attend.
Time commitment needed from participants
| Activity | Curated sessions | Self-Work |
| Pre-work | 1 hr call kick-off call | 2-4 hrs for self-assessment* |
| Kick-off in-person event | 2 days (exc travel) | N/A |
| Virtual program | 6 QA group calls of 1hr each10 advisory sessions of 1 hr each | 3-6 hrs each week for the implementations * |
| Closing call | 1 hr call | As needed, going forward * |
| Post Cohort Check-in calls | 2 hrs | As needed, going forward * |
 * Hours will vary for each participating organization.
Ready to Apply?
Apply here: https://forms.gle/XPBdjxvLLqAsZtH7A
Applications close on 31st Aug 2026
The Cohort-Based DPDP Advisory Programme aims to build a community of organizations that move beyond minimum compliance to adopt responsible, secure, and ethical data practices. Through sustained engagement, practical advisory support, and peer learning, the programme seeks to strengthen the data governance capacity of India’s civil society ecosystem and foster a culture of trust, accountability, and responsible use of personal data.
