Empanel, Engage, Empower

To all Empanelled Auditors

In the recent days, AIDAI has been actively conducting its outreach programs and has recently concluded an event in Chennai and in Delhi. The team needs to be specially congratulated for their efforts.

As part of the new developments, FDPPI has also introduced special efforts to address the issue of Audit of Banks where the data processing happens at branches while the head office manages the compliance.

Many major Banks like Canara Bank and SBI have already announced substantiao investments in software for compliance. Many of them have also engaged the services of Big4 auditing agencies.

It is not clear if their approach is founded on robust foundation of employee awareness and appreciation of the requirments of compliance.  Some of these Banks have separately contracted audits with Consultants and software supply with IT companies.  We donot know if the capabilities of software match the requirements of the consultant’s recommendations.

Many of these banks will require “Peer Audit” either before completing their exercise of initial audit before 13th May 2027 or there after.

One of the principles which FDPPI-AIDAI has now introduced is the concept of “Aggregation of Audits at multiple sub units”. This is required for all agencies particularly the Banks.

We are certain that the Big4 will follow this thought process in their own way sooner or later.

We however believe that we need to build a strong army of data auditors who can undertake the audits of multiple compliance units which can be aggregated into an enterprise level audit. We have introduced a new SOP namely  AIDAI-SOP-DA 600 for the purpose of conduct of aduits at multiple sub units which are consolidated by an enterprise auditor.

Currently the software developers may not be ready with such frameworks. We expect that big entities like SBI and Canara Bank may even try to bull doze and defend their current approach as the best approach for their compliance. They need time to realize the need for change of their approach.

We shall however continue with our commitment to create a Data Audit eco system which we beleive is the right thing to do.

With the introduction of this concept of “Lead Enterprise Auditor” and “Component Data Auditor”, we have made changes to the Cod of Ethcis and you will find the new version now available on the website.

We are also conducting a specific training program to introduce the framework AIDAI-SOP-DA 600 and the modified Code of Ethics in our special Jnaana Vardhini session on 16th September 2026.

Naavi

Contact secretary@aidai.org.in for details of registration.

Naavi

Naavi

To facilitate that during the CIDA program all will have the required background on DPDPA and its implementation, FDPPI is conducting a curtain raiser program on 10th August 2026 (Virtual) at 10.00 am.

All persons who register for the CIDA event will have a free entry to this mini event. Others can join at a fee of Rs 3540/- including GST.

If the participants of this program later register for CIDA program, there will be a discount of the amount of Rs 3540/- from the amount payable for CIDA.

Kindly contact FDPPI for more details.

Naavi

On August 21, 22 and 23, FDPPI will be conducting the first CIDA (Certified Independent Data Auditor) program in Bangalore.

It will be a physical event at Fairfield Marriott hotel in Rajaji Nagar, Bangalore (Location).

The curriculum for the event has already been published . 

Earlier we used to conduct a program under the banner C.DPO.DA which was “Certified Data Protection Officer and Data Auditor”. This program was available both for those who were aspiring to be DPOs and those who wanted to be Data Auditors. Now we have two different training and certification programs called CEDPO (Certified Elite DPO) fand CIDA (Certified Independent Data Auditor).

Since an Independent Data Auditor is some body who has to check the work of a DPO, he needs to be as much competent as a DPO in addition to his audit skills.

Considering that many of the participants of the August 21 program might not have gone through the earlier program on DPDPA and DPO requirements. We will supplement the physical CIDA program with a virtual masterclass on CEDO in a compressed form. This will be available free for those who register for CIDA till 9th August 2026. It will be held as a 3 hour session on probably 10th August 2026. (Sunday). Those who attend may also appear for the CEDPO examination by paying an examination fee of Rs 5000/-

Interested persons need to complete the registration for CIDA as early as possible. (Early Bird discount is available till 31st July 2026).

The total fee for CIDA program is Rs 30000+GST of Rs 5400 (Total Rs 35400/-)

The Early bird discounted price is Rs 25000/- +GST of Rs 4500/- (Total Rs 29500/-)

Master class : free for all registrants till 16th August 2026. Time: 10.00 am.

For those who have not registered for CIDA, there would be a fee of Rs 3540/- including GST. This can be adjusted with the final registration  fee for CIDA.

Examination fee Rs 5000/- (If required.

Request all to make use of this opportunity.

Naavi

Some photographs of the Chennai event are available here.

The video of the entire program is also available here:

AIDAI/FDPPI has organized an awareness program on the profession of Independent Data Auditors in Chennai on 17th July 2026 at Hotel Palmgrove.

REGISTER HERE: 

(Registration fee: Rs 500/-: May be paid here: )

Interested persons may register as indicated above.

Naavi

Yesterday (June 6), FDPPI conducted the First Induction Training for those who had empanelled as Independent Data  Auditors.  The program went on very well and the participants enjoyed the first of its kind program.

The Program started with an introductory talk from Naavi. Then a panel discussion on “Code of Ethics” was held. A second Panel discussion on Role of Independent Data Auditors followed.

Subsequently,  some of the Advisors of AIDAI who were physically present. (Mr Rakesh Maheshwari, Sudarshan Mandyam and Mr Madhava Murthy) shard their valuable views.

Post Lunch, Dr Ramasastry Ambarish, Director of MYRA  shared his thoughts on the involvement of Academic  institutions in the development of Data Auditors. Mr Mahndra, CTO, of MYRA shared his views on some technical aspects of Data Breach management.

Then a third panel discussion on the Challenges of Independent Data Auditors was held. Finally an interesting role play was conduced on the “Case of Ramya”.

During the discussions, several new thoughts emerged and they will be discussed in due course.

An Audio track of the event was taken on record through the Zoom. A clean video recording is under development.

Some important suggestions that came up during the discussions which will be further discussed include

a) whether  the Auditors should be voluntarily rotated after 2 or three years

b) Whether the share holders of a company should approve the appointment.

c) Whether Scoping of an  Audit be done by some body other than the Management and the Auditor

d) Increasing the value of the FDPPI certifications by building Association with other Certification bodies and Academic institutions.

AIDAI will consider adopting some of  these provisions into their activities.

Naavi

More photos of the event available here

The first batch of empanelled IDAs will be provided a one day Induction course on June 6, 2026 at Bengaluru.

During the program, we will focus on understanding the role of  an Independent Data Auditor and how would it differ from the role of an ISO 27001 lead auditor.

A reference will be made to the DGPSI framework but the frameworks themselves will not be discussed in detail.

We hope participants will take the maximum advantage of the event.

For those who cannot attend the event physically, we will try to conduct a similar event in a short time at Mumbai and Delhi. On a later day we may provide a virtual version of the event also.

We look forward to seeing you all on June 6th.

Naavi