6 scenarios
Founder / general management
Decide how your business collects, uses and keeps customer data.
Consent, legacy data and honest readiness claimsChoose this situation →PRACTICAL PRIVACY LEARNING / DPDP GURU
Understand DPDP before the next difficult decision.
A customer wants their details deleted. A vendor asks for access to a spreadsheet. Practise how you would respond, then read the explanation and the law behind it.
Short, guided lessons on India’s Digital Personal Data Protection framework. Educational guidance, not legal advice.
Follow the lantern through each step of the lesson.
YOUR NEXT STEP
Pick the lesson that fits your role.
Each lesson gives you a situation, a choice and an explanation. No account needed.
01
I run a business
Customer details, staff records and the decisions you make every day.
Open business scenarios 02I build software
Data collection, product choices and working with service providers.
Open product scenarios 03I am new to DPDP
Choose your role and topic for a short guided lesson.
Start a guided lessonSpecified institutional provisions and Rules 1, 2 and 17–21 are in force; further provisions begin 13 Nov 2026; most duties and rights are notified for 13 May 2027.
Check official sources →HOW A LESSON WORKS
Work through the decision, step by step.
Read the situation, compare your options and see why the distinction matters. Each lesson separates legal requirements from practical suggestions.
- 01Situation
Choose a familiar founder, vendor, HR, school, health or DPO question.
- 02Source and law
See the relevant provision and when it takes effect.
- 03Practical options
Consider what you could do next and what you need to check first.
- 04Evidence to keep
See an example of a record your team could keep.
- 05Uncertainty
Know what still needs checking before you apply the lesson at work.
CHOOSE A FAMILIAR SITUATION
Start with the work in front of you.
Choose from 42 situations across seven areas of work. Start wherever you have a question.
6 scenarios
SaaS / product and engineering
Work through product design, service providers and deletion requests.
Processors, rights flows and deletion architectureChoose this situation →6 scenarios
E-commerce / marketing and sales
Understand customer data at checkout and in marketing campaigns.
Channels, voluntary data and retention triggersChoose this situation →6 scenarios
HR / recruiting
Work through how you handle applicant and employee records.
Employment uses, vendors and grievance routesChoose this situation →6 scenarios
School / EdTech
Explore student data, parental consent and education technology.
Guardian consent, tracking and proportionate assuranceChoose this situation →6 scenarios
Healthcare / high-trust services
Consider patient records, access controls and incident response.
Safeguards, incidents, logs and rightsChoose this situation →6 scenarios
DPO / privacy and security professional
Examine governance duties, transfers and when provisions take effect.
SDF duties, transfers and commencement statusChoose this situation →CLAIM VS EVIDENCE
Understand why the answer matters.
See the rule we relied on, how we read it and where your circumstances could change the answer.
Pinpoint, status and effective date stay close to the statement.
For example, a copy of the notice shown to a customer or a record of a vendor review.
FOR PROFESSIONAL REVIEW
How each source card is built.
Open a lesson’s source notes to check the original text, effective date and reasoning behind the guidance.
1. Quoted source2. Editorial interpretation3. Practical action4. Open question