More people touch student data than you think — and that is a problem.
Think about one student who joins your coaching class. Their name, parent's phone number, Aadhaar copy, and fee details go into your system. Now count who sees it — the admission person, the teacher, the accounts team, the WhatsApp group admin, the photographer on batch day. That is five people already. Under the new DPDPA law, every single one of them is your responsibility.
Say your institute collects a parent's Aadhaar copy at admission. Your accounts team saves it. Your coordinator shares it on WhatsApp. Your app vendor stores it on their server. Now four parties hold that one document. If anything goes wrong, the law holds your institute responsible. You must know who has access. You must limit it. Only the person who needs it should see it. No sharing on WhatsApp groups. No keeping copies without reason.
List every team that sees student or parent information in your institute.
Stop sharing student Aadhaar copies or fee details on WhatsApp groups.
Check if your business is ready. Takes 3 minutes. Visit saralprivacy.com/assessment
“When many teams touch the same child or parent record chaos becomes risk.”
Free — takes 3 minutes
Answer a few simple questions. Get your free Readiness Score — sent to your email or WhatsApp.
Check My Readiness →Take our free 3–5 minute industry assessment to find out your compliance risk level.
Take Free Assessment →Free Download
The Complete DPDPA Compliance Guide
Plain English. Everything your business needs to understand the DPDP Rules 2025 — written for founders, not lawyers. Now in 7 Indian languages.
Download the Guide →5 Ready-to-Use Templates
Start complying — not just reading
Privacy Notice, Consent Language, Data Inventory, DSR SOP, Vendor Register. Delivered free to your email.
2-min reads, plain English, every morning. Free forever.
