Training institutes collect a lot of student info — here's what DPDPA says.
Every coaching class, skill centre, or training institute collects information. Name, phone number, Aadhaar copy, parent details — all of it. But most institutes never tell students why they are collecting it. Under the new DPDPA law, that is a problem. If you run any kind of training or education business, this applies to you — starting now.
Think about your last admission season. You collected names, phone numbers, Aadhaar copies, and parent WhatsApp numbers. Did you tell them how long you will keep this? Did you tell them who else can see it — like your software vendor or printing shop? If a student left your institute six months ago, their file is still your responsibility. You must have a clear reason to keep it. Without that, you are holding information you should not have.
Add one line to your admission form: why you need each detail.
Check old student files — delete records you no longer need.
Check if your business is ready. Takes 3 minutes. Visit saralprivacy.com/assessment
“In education the record often outlives the classroom.”
Free — takes 3 minutes
Answer a few simple questions. Get your free Readiness Score — sent to your email or WhatsApp.
Check My Readiness →Take our free 3–5 minute industry assessment to find out your compliance risk level.
Take Free Assessment →Free Download
The Complete DPDPA Compliance Guide
Plain English. Everything your business needs to understand the DPDP Rules 2025 — written for founders, not lawyers. Now in 7 Indian languages.
Download the Guide →5 Ready-to-Use Templates
Start complying — not just reading
Privacy Notice, Consent Language, Data Inventory, DSR SOP, Vendor Register. Delivered free to your email.
2-min reads, plain English, every morning. Free forever.
