Industry guide
DPDP for Education and edtech
Learners are often children, which makes the verifiable parental consent machinery and its targeted exemptions the center of gravity for this sector.
How to read this page. The obligations belong to your organisation, not to a role or a sector. Everything here is practical emphasis: which official duties this audience usually leads or feeds into, with links to the official text. Finishing one function's work never makes the company compliant by itself.
Where the framework usually bites first
Parental verifiable consentRule 10, official text →
Creating accounts for under eighteens triggers the verification duty, illustrated in the rules with concrete cases.
Exemption boundariesRule 12, official text →
The Fourth Schedule carve outs are conditional; whether an educational context fits them is a legal judgment, not a default.
Student data retentionRule 8, official text →
Academic records outlive enrolment; retention needs a designed answer rather than indefinite keeping.