Every step of a student's journey collects data — are you telling them?

A parent signs up for a free demo class. You take their child's name, phone number, and WhatsApp contact. You record the class. You send fee payment links. Each step quietly collects information. But did you ever tell the parent what you are doing with it? Under the new DPDPA law, not telling them is a big problem. This applies to every edtech, tuition app, or online coaching business in India.
Say you run an online coaching app. A student shares their Aadhaar for a scholarship form. A parent pays fees and shares their PAN card details. You record doubt sessions on Zoom. You send results on WhatsApp groups. All of this is collecting people's information. The law says you must tell them clearly at each step. Not just once at signup. Every new step needs a fresh, simple explanation. No explanation means you are breaking the law silently.
List every step where you collect student or parent information.
Add a simple one-line notice at each signup, payment, and recording step.
Check if your business is ready. Takes 3 minutes. Visit saralprivacy.com/assessment
“A learner journey without a clear notice becomes a silent data trail.”
Free — takes 3 minutes
Answer a few simple questions. Get your free Readiness Score — sent to your email or WhatsApp.
Check My Readiness →Take our free 3–5 minute industry assessment to find out your compliance risk level.
Take Free Assessment →Free Download
The Complete DPDPA Compliance Guide
Plain English. Everything your business needs to understand the DPDP Rules 2025 — written for founders, not lawyers. Now in 7 Indian languages.
Download the Guide →5 Ready-to-Use Templates
Start complying — not just reading
Privacy Notice, Consent Language, Data Inventory, DSR SOP, Vendor Register. Delivered free to your email.
2-min reads, plain English, every morning. Free forever.