From admission forms to old mark sheets — every step creates a privacy risk.
A parent fills an admission form. It has the child's Aadhaar number, address, and phone number. That form goes to your office, your WhatsApp group, maybe your vendor's laptop. Now multiply that by 500 students. Schools collect a huge amount of sensitive information every year. But most schools never ask: where does this data go after the student leaves? Under DPDPA, that question now has legal weight.
If you run a school or college, every step of a student's journey touches private information. When a child applies, you collect Aadhaar and birth certificates. When they study, you share marks and attendance with parents on WhatsApp. When they leave, their records sit in your files for years. Under DPDPA, you must have a reason to keep that data. You must delete it when the reason is gone. You must also check that your vendors — like bus apps or fee software — protect this data too.
List every place student Aadhaar and phone numbers are stored today.
Tell your vendors in writing to protect student information they receive.
Check if your business is ready. Takes 3 minutes. Visit saralprivacy.com/assessment
“In education data discipline must survive beyond the academic year.”
Free — takes 3 minutes
Answer a few simple questions. Get your free Readiness Score — sent to your email or WhatsApp.
Check My Readiness →Take our free 3–5 minute industry assessment to find out your compliance risk level.
Take Free Assessment →Free Download
The Complete DPDPA Compliance Guide
Plain English. Everything your business needs to understand the DPDP Rules 2025 — written for founders, not lawyers. Now in 7 Indian languages.
Download the Guide →5 Ready-to-Use Templates
Start complying — not just reading
Privacy Notice, Consent Language, Data Inventory, DSR SOP, Vendor Register. Delivered free to your email.
2-min reads, plain English, every morning. Free forever.
