Most schools collect student info freely — but storing it safely is a different story.
A parent fills an admission form. Their child's Aadhaar number, address, and phone number go into a WhatsApp group, an Excel sheet, and three different apps. Nobody knows who can see what. Under the new DPDPA law, this is a serious problem. Schools collect a lot of information about children. That makes them responsible for keeping it safe. If you run a school or college, this applies to you — starting now.
Think about your school right now. Your admission form collects Aadhaar numbers and parent phone numbers. Your ERP software holds student marks and fee records. Your WhatsApp group has parent contact details. Who has access to all of this? A peon should not see salary slips. A sales team should not use parent numbers for marketing. Keep academic information separate from marketing lists. Limit who can download student data. Check how old student records are stored and for how long.
List every app and vendor that holds student or parent information.
Decide which staff can see which records — and write it down.
Check if your business is ready. Takes 3 minutes. Visit saralprivacy.com/assessment
“Do not let convenience become the school's data policy.”
Free — takes 3 minutes
Answer a few simple questions. Get your free Readiness Score — sent to your email or WhatsApp.
Check My Readiness →Take our free 3–5 minute industry assessment to find out your compliance risk level.
Take Free Assessment →Free Download
The Complete DPDPA Compliance Guide
Plain English. Everything your business needs to understand the DPDP Rules 2025 — written for founders, not lawyers. Now in 7 Indian languages.
Download the Guide →5 Ready-to-Use Templates
Start complying — not just reading
Privacy Notice, Consent Language, Data Inventory, DSR SOP, Vendor Register. Delivered free to your email.
2-min reads, plain English, every morning. Free forever.
