Education and edtech
Schools, universities, coaching/edtech, transport, assessment and campus systems handle student, parent/guardian, teacher, applicant and alumni data. Under-eighteen students are children under the Act even where a product’s global age threshold is lower.
Data and systems
Section titled “Data and systems”Admissions/SIS, identity/contact, attendance, grades, learning/behaviour analytics, disability and health accommodations, fee/payment, counselling, LMS/classroom recordings, proctoring, library/device, CCTV/access, bus GPS, parent communication, hostel and vendor apps.
Purpose separation
Section titled “Purpose separation”Admissions, education delivery, assessment, accommodation, safeguarding, transport safety, administration, research, product improvement and marketing are distinct. A school relationship or parent grant for core education does not authorise behavioural advertising or indefinite commercial profiling.
Parent and child journeys
Section titled “Parent and child journeys”Use an already verified school parent/guardian relationship where possible. Explain the purpose to the child in age-appropriate language and give the parent full required notice. Support guardians, split households, older students, emancipation/authority questions and transition at eighteen through policy and review. Do not force Aadhaar when another proportionate method works.
Tracking and advertising
Section titled “Tracking and advertising”Inventory analytics, SDKs, cookies, recommendation, device management, location and adtech. Child-configured journeys block tracking/behavioural monitoring and targeted advertising subject to documented statutory exceptions. School safety/location access is role- and time-limited; no continuous parent/employee browsing without purpose.
Retention and correction
Section titled “Retention and correction”Separate statutory academic records, assessment evidence, attendance, fee, safeguarding, discipline, counselling, health, CCTV, transport and marketing. Grade/discipline correction preserves provenance and academic procedure. On leaving, delete optional app telemetry and vendor copies while retaining only source-supported records.
Minimum configuration
Section titled “Minimum configuration”Institution/legal entity, age bands, parent/guardian methods, purpose/exception catalogue, education/campus systems, vendors/SDKs, child-mode tests, transport/location policy, accessible notices in local languages, grievance/safeguarding separation and record-class retention.
Sample workflow
Section titled “Sample workflow”A parent withdraws optional class-photo publication and requests correction of an address. The portal verifies the school relationship, removes the photo from controlled publication channels, creates takedown tasks for vendors, updates SIS/transport sources, preserves the original admission record if required, and reports any inaccessible printed material honestly.
Evidence and open questions
Section titled “Evidence and open questions”Evidence includes guardian assurance, child-friendly notice, exception approval, SDK scan, location-access review, correction provenance, vendor task results and retention decision.
Counsel must resolve state/board/university record rules, school-versus-edtech roles, education and health/safety exceptions, exam/proctoring necessity, research conditions and how parental authority changes for a specific student.