IntegrAuth Academy
Identity, security and practical AI — free, from zero. Byte-sized lessons, real diagrams, hands-on labs, zero fluff. Two programs, each with its own exam and certificate.
English is hard? Your browser can translate this page into Tamil, Telugu, Kannada, Malayalam or Hindi. Tech words stay in English so you learn the real names.
How?
- Chrome on phone: ⋮ menu → Translate
- Chrome on computer: right-click → Translate to …
- Edge: the translate icon in the address bar
Regulations & certifications
Identity work is regulated work. Laws have different names in different countries, but the duties are alike. Your goal: match the main laws and standards to what they ask for.
- Three duties repeat everywhere: know who, protect data, prove it.
- GDPR, CCPA/CPRA and India's DPDP Act protect personal data.
- PSD2 SCA and the RBI rules need two factors for payments.
- NIST SP 800-63 gives the trust levels. ISO 27001 and SOC 2 are audits.
A short world tour
🇮🇳 DPDP Act, 2023
India's Digital Personal Data Protection Act. A company must ask for clear consent, collect only what it needs and protect the data. People can withdraw consent, correct their data and ask for it to be erased. Its rules came in November 2025, and the main duties start in stages up to May 2027.
🇮🇳 RBI payment rules
The Reserve Bank of India's authentication directions. Most digital payments need two factors. At least one must be new for each payment, such as a one-time code or a fingerprint. They apply from April 2026. You already met this idea in the proof lesson.
🇪🇺 GDPR
The EU's General Data Protection Regulation, the privacy law the world copies most. Personal data needs a lawful reason and protection. It must be deletable. The "right to be forgotten" is GDPR at work (the right-to-be-forgotten lesson).
🪪 eIDAS 2.0 & the EUDI wallet
Europe's rules for trusted electronic identity. They include a digital identity wallet that citizens carry (the EUDI wallet). EU countries must offer wallets by the end of 2026. People show credentials from the wallet instead of using many logins.
💳 PSD2 — Strong Customer Authentication
The EU payments law. Its SCA rule needs two independent factors for most online payments. The approval must also be tied to the amount and the payee. This is the legal base of step-up (the proof lesson). New EU payment rules (PSD3 and PSR) are coming and keep SCA.
🐻 CCPA / CPRA
California's privacy laws: the right to know, to delete, and to opt out of the sale of your data. Many other US states copy them.
📏 NIST SP 800-63
The US guideline for digital identity. It defines assurance levels: IAL (identity), AAL (login) and FAL (federation). People use it worldwide as the yardstick for the trust scores in the proof lesson.
✅ ISO 27001 / SOC 2
Certificates a company shows to prove its own house is in order. ISO 27001 audits the whole security management system. SOC 2 audits the day-to-day controls.
🏦 KYC / AML
Know Your Customer and Anti-Money-Laundering rules make banks check customers more strictly as amounts and risk grow.
driving in another country. The road signs change at every border, but the duties do not. Stay in your lane. Show your license. Be able to prove it. Learn the three duties once, and every new law is just a new sign.
Law is why identity teams care about paperwork-like things. Examples are consent receipts, deletion workflows, audit trails and how long data is kept. Each is a legal duty with real fines.
🧪 Interactive lab — enable JavaScript to play with this one.
Not sure which of these apply to your design? Talk to our team or browse our services.