Student forms, fee receipts, WhatsApp groups — all of it counts.
Think about one student joining your school. You collect their name, Aadhaar number, parent's phone, address, and fee details. Then attendance. Then exam marks. Then WhatsApp messages to parents. That is a lot of information. And it stays in your files for years. Under the new DPDPA law, all of this is your responsibility. If something goes wrong, you are answerable.
If you run a school, coaching class, or tuition centre, this law applies to you. You take admission forms with Aadhaar copies. You save parent phone numbers in WhatsApp groups. You keep fee receipts and mark sheets. All of this is covered. You must take permission before collecting this information. You must keep it safe. You must delete it when it is no longer needed. A student who left three years ago — their data is still your responsibility.
Make a list of all places where student information is saved.
Check if parents gave clear permission before you saved their child's details.
Check if your business is ready. Takes 3 minutes. Visit saralprivacy.com/assessment
“Education data stays valuable long after the form is filled.”
Free — takes 3 minutes
Answer a few simple questions. Get your free Readiness Score — sent to your email or WhatsApp.
Check My Readiness →Take our free 3–5 minute industry assessment to find out your compliance risk level.
Take Free Assessment →Free Download
The Complete DPDPA Compliance Guide
Plain English. Everything your business needs to understand the DPDP Rules 2025 — written for founders, not lawyers. Now in 7 Indian languages.
Download the Guide →5 Ready-to-Use Templates
Start complying — not just reading
Privacy Notice, Consent Language, Data Inventory, DSR SOP, Vendor Register. Delivered free to your email.
2-min reads, plain English, every morning. Free forever.