Coming soonAI GovernanceAdvancedProfessional ServicesTechnology

Moving Data and AI Across Borders: Transfers, Cloud and Vendors

AI Governance, Risk & Compliance Track · Certified Cross-Border Data and Vendor Governance Specialist

India took an unusual path on cross-border data: transfer is permitted by default, restricted only to countries the Central Government notifies. That is the inverse of the GDPR adequacy model, and it produces a specific strategic risk — an architecture that is lawful today can become unlawful with a single notification. Layered on top are sectoral localisation rules that DPDP does not displace, notably in payments, and Rule 13 in-India processing obligations for Significant Data Fiduciaries. This course teaches learners to inventory their real data flows, design architecture that survives a future restriction, and contract with vendors and cloud providers so obligations actually flow down. It covers the India-GCC corridor in particular detail.

15 modules

What you'll master

Learning objectives

01Produce a complete and accurate cross-border data flow inventory
02Determine lawfulness of a transfer under DPDP and any applicable sectoral rule
03Design restriction-ready architecture that survives a country being notified
04Contract with processors and cloud providers so obligations genuinely flow down
05Manage the India-GCC data corridor across DPDP, UAE PDPL and KSA PDPL
06Assess and monitor a vendor's ongoing compliance rather than trusting attestation

Skills gained

DPDP Act Section 16ITHR Data Flow Inventory TemplateITHR Hidden Transfer ChecklistDPDP Rules 2025 Rule 15GDPR Chapter V for contrastITHR Restriction Exposure ModelRBI payment data localisation directiveRBI outsourcing guidelines

Curriculum

15-module program

Full curriculum in preparation

This course is being written now by the ITHR editorial team. Join the waitlist and we'll notify you the moment the full syllabus, hands-on labs, and certification exam are live. No enrollment is accepted until publication.