Naavi.org

On August 21, 22 and 23, FDPPI will be conducting the first CIDA (Certified Independent Data Auditor) program in Bangalore.

It will be a physical event at Fairfield Marriott hotel in Rajaji Nagar, Bangalore (Location).

The curriculum for the event has already been published . 

Earlier we used to conduct a program under the banner C.DPO.DA which was “Certified Data Protection Officer and Data Auditor”. This program was available both for those who were aspiring to be DPOs and those who wanted to be Data Auditors. Now we have two different training and certification programs called CEDPO (Certified Elite DPO) fand CIDA (Certified Independent Data Auditor).

Since an Independent Data Auditor is some body who has to check the work of a DPO, he needs to be as much competent as a DPO in addition to his audit skills.

Considering that many of the participants of the August 21 program might not have gone through the earlier program on DPDPA and DPO requirements. We will supplement the physical CIDA program with a virtual masterclass on CEDO in a compressed form. This will be available free for those who register for CIDA till 9th August 2026. It will be held as a 3 hour session on probably 10th August 2026. (Sunday). Those who attend may also appear for the CEDPO examination by paying an examination fee of Rs 5000/-

Interested persons need to complete the registration for CIDA as early as possible. (Early Bird discount is available till 31st July 2026).

The total fee for CIDA program is Rs 30000+GST of Rs 5400 (Total Rs 35400/-)

The Early bird discounted price is Rs 25000/- +GST of Rs 4500/- (Total Rs 29500/-)

Master class : free for all registrants till 9th August 2026. Examination fee Rs 5000/- (If required.

Request all to make use of this opportunity.

Naavi

It is unfortunate that a massive personal data breach has been reported at Bank of Baroda resulting in the compromise of the personal data of many customers. It is said that over 1TB of data has been posted on dark web and it was compromised through an email of one employee. The leaked data includes Aadhaar information also making it a highly harmful information leak.

India Today report

Had the Data Protection Board was in place and DPDPA 2023 was effective, this should have resulted in more than Rs 250 crores of penalty. Fortunately in the current scenario only CERT In can act under ITA 2000 and impose a penalty of upto Rs 1 crore. The customers can however file an individual/collective legal action for damages under Section 46 of ITA 2000 or through a writ petition at a High Court.

This is indicative of the failure of the information security system in Banks in general and if not addressed promptly, could lead to repetition in other Banks.

It would be interesting to observe how other banks respond to this threat. As some body looking at DGPSI-Banks as a DPDPA compliance framework, we would be watching the event closely.

We can continue the debate with ..What is the value of such data if BOB has to buy it back from the hacker?

It is presumed that the number of data sets lost would be in the range of 1 million. Dark web may value it at a minimum of Rs 100 each. The value of data lost could therefore be in a conservative estimate equal to Rs 100 million or Rs 10 crores.

Naavi

At a time Naavi/FDPPI are working on the DGPSI-Banks as a framework for DPDPA compliance for Banks, it is interesting to see that the RBI has also issued a “Draft Guidance on Regulatory Expectations for Data Governance” for public comments.

Copy of the draft Governance is available here: 

The draft Guidance is applicable to following regulated entities:

i. Commercial Banks
ii. Small Finance Banks
iii. Payments Banks
iv. Local Area Banks
v. Regional Rural Banks
vi. Urban Co-operative Banks
vii. Rural Co-operative Banks
viii. All India Financial Institutions
ix. Non-Banking Financial Companies
x. Asset Reconstruction Companies
xi. Credit Information Companies

2. Comments on the draft Guidance are invited from regulated entities, members of public and other stakeholders by August 17, 2026.

The comments / feedback may be submitted through the link under the ‘Connect 2 regulate’ Section available on RBI’s website or alternatively be forwarded to:

The Chief General Manager, Operational Risk Group Department of Regulation, Central Office Reserve Bank of India, Shahid Bhagat Singh Marg, Fort,Mumbai – 400 001
Or
By e-mail with the subject line ‘Feedback on Guidance on Regulatory Expectations for Data Governance’

Since most of the suggestions are already part of the framework DGPSI Banks, we will integrate the RBI draft suggestions in the framework.

Watch this space…

Naavi

On 24th, Corproatelore communications, Mumbai has organized a one day workshop for its clients at Holiday Inn, Mumbai.

Naavi will be conducting the workshop.

Interested persons may contact Corproatelore Communications over email: business@corporatelore.in

Other details are available here.

The concept of Independent Data Auditor introduced by FDPPI will be a watershed event in the history of Data Protection in India. The Era is now set to begin.

Venue:

Fairfield Marriott, 59th C Cross, 4th M Block, Rajaji Nagar, Bengaluru, India, 560 010

Date: August 21,22 and 23, 2026

Location

Tentative Curriculum:

Day 1:

-Introduction to the Course
-Overview of DPPA
-Challenges in implementation of DPDPA

-Role of an Auditor vis-a-vis a DPO or a Consultant
-Professional independence and conflict of interest
-Legal exposure and liability of audit opinions
-Engagement acceptance and scope definition
-Ethical standards and confidentiality obligation
-Audit Principles & Methodology: (Principles of ISO 19001
-Audit lifecycle
-Evidence Collection
-Documentation standards and audit trail
-Audit Engagement Contract

Day 2:

-Understanding organisational context and business model
-Stakeholder interview
-Designing audit checklists
-Sampling strategy and time budgeting

-Frameworks (ISO + DGPSI Architecture)
-Introduction to ISO 27701 privacy information management
-DGPSI as an Indian compliance assurance framework
-DGPSI Principles
-DGPSI Full and DGPSI Lite

Day 3:

DGPSI Variants:
-DGPSI-AI — AI governance assurance
-DGPSI-HR — employee data governance audit
-DGPSI-DP — core DPDPA compliance audit
-DGPSI-Hospital-DPDPA Compliance framework for a hospital
-DGPSI-Banks

Audit Simulation

Certification

All participants will get participation Certificates

Online examination will be available after 15 days.  Those who pass the cut off will get the completion certification.

Certificate will be issued as FDPPI-MYRA Certified Independent Data Auditor

Fees:

Rs 30000/-+GST (Total Rs 35400/-)

Early Bird Discount Rs 5000/- upto 31st July 2026 Rs 5000/- (Net price Rs 25000+GST, Total Rs 29500/-)

REGISTRATION AND PAYMENT OF FEES

P.S: We shall provide a pre-event master class on “Requirements of being a DPO”.

Corporatelore Communication, Mumbai is organizing a one day workshop on DPDPA on 24th July 2026 at Holiday Inn, Mumbai.

The program will be conducted by Naavi.

The details of the program are available below.

Download the flyer

Payment can be made to:

Bank Details & Payment Information
Beneficiary Name: CORPORATELORE COMMUNICATION
Bank Name: Canara Bank
Branch: Bandra West, Mumbai – 400050
Account Number: 0103201008775
IFSC Code: CNRB0000103
Digital Payment (Optional)
UPI ID: s2a.clc@oksbi

Naavi