AI Governance Practitioner Certification
A working certification for the people who have to make AI use defensible: inventory and risk tiering, impact assessment, vendor and model due diligence, generative and agentic controls, monitoring and incident response, and evidence that survives an audit or a board question.
- Modules
- 12
- Lessons
- 60
- Study time
- ~11.5 hours
- Module checks
- 60
- Final exam bank
- 120 questions
- Toolkit files
- 25
An independent credential
AI Governance Practitioner is created, taught and issued by Digital Privacy India. It is not affiliated with, accredited by, endorsed by or connected to the IAPP, and it is not the IAPP Artificial Intelligence Governance Professional (AIGP) credential.
All lessons, questions, templates and the capstone are original work. We make no claim of regulatory accreditation or of recognition by any authority.
What you will be able to do
- Stand up an AI governance operating model with clear accountability, decision rights and escalation
- Build and maintain an AI system inventory, intake process and defensible risk tiering
- Run impact assessments that join fairness, human rights, privacy and security questions together
- Map obligations across the EU AI Act, the NIST AI Risk Management Framework, the OECD AI Principles, GDPR and India's DPDP regime
- Run vendor and model due diligence, and challenge supplier claims with evidence
- Control generative AI, retrieval-augmented generation and agentic deployments with tested guardrails
- Operate monitoring, incident response, change management and retirement for live AI systems
- Produce audit-ready evidence and board-level AI risk reporting
Full syllabus
Twelve modules, 60 lessons. Each module ends with five graded knowledge checks.
- AI foundations, capabilities and limits
- The AI governance operating model and accountability
- AI inventory, use-case intake and risk tiering
- Ethical and human impacts, fairness and non-discrimination
- Privacy and data governance for AI
- Laws and frameworks: applicability mapping
- Acquisition, vendor and model due diligence
- Design, development and validation
- Generative AI, RAG and agentic systems: risks and controls
- Deployment, human oversight and user-facing transparency
- Monitoring, incidents, change management and retirement
- Audit, assurance and board reporting
What is included
- Twelve modules, sixty written lessons with worked examples and exercises
- Sixty module knowledge checks, graded on the server
- Final exam: forty questions drawn at random from a bank of one hundred and twenty, 70% to pass, three attempts
- A full Kestrel Group capstone with fact pack, evidence requirements and marking rubric
- Twenty-five downloadable working documents: registers, assessments, runbooks and board reporting
- A verifiable certificate with a unique credential ID and a public verification page
The working toolkit
Twenty-five registers, assessments, runbooks and reporting packs, each supplied with a worked example and blank working sections.
Who it is for
- Privacy, risk and compliance professionals picking up AI oversight
- Data protection officers and legal counsel advising on AI deployments
- Product, data science and engineering leads accountable for AI systems in production
- Internal auditors and assurance teams building an AI audit programme
- Consultants advising Indian and multinational organisations on AI governance
Prerequisites
- No coding or mathematics background is required.
- A working familiarity with how your organisation builds or buys software is helpful.
- Basic privacy literacy helps but is not assumed; the privacy and data governance module starts from first principles.
How you are assessed
- Each module ends with five knowledge check questions. Answers and rationales are returned after you submit; they are never sent to the browser in advance.
- The final exam serves forty questions drawn at random from a bank of one hundred and twenty. The pass mark is 70%. You have three attempts on this certification.
- The capstone asks for a governance review of the fictional Kestrel Group against a supplied fact pack, marked against a published rubric.
- Every lesson must be marked complete before the certificate is released.
This certificate is issued by Digital Privacy India. It is an independent credential and is not affiliated with, accredited by or endorsed by the IAPP or any regulator.
Primary sources we teach from
Legal statements in this programme carry an as-of date of 17 September 2026. Binding law, future commencement dates and voluntary best practice are labelled separately in every lesson. Paywalled standards are described, never reproduced.
- EU AI Act — Regulation (EU) 2024/1689 and the Commission's regulatory framework page
- European Commission guidelines on the definition of an AI system (6 February 2025)
- NIST AI Risk Management Framework (AI RMF 1.0, voluntary, under revision)
- NIST AI 600-1 — Generative AI Profile
- OECD AI Principles (updated 2024)
- India AI Governance Guidelines (voluntary, published 5 November 2025)
- Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025
- ISO/IEC 42001 overview page (standard text is paywalled)
Questions people ask
Start the certification
Both certifications included — no additional exam fee. Pay once by UPI and both programmes unlock after verification. The ₹999 bundle covers DPDP Practitioner and AI Governance Practitioner only. Privacy Law & DPO Practice is sold separately.