Schools, universities, coaching institutes and edtech platforms

DPDP compliance for schools, universities and edtech

Most learners are under 18, which makes education one of the sectors most affected by the DPDP Act. Parental consent, a ban on behavioural tracking and targeted advertising, and careful vendor management are now baseline. ConsentLo makes them routine.

Book a demo Talk to a DPDP auditor

What DPDP changes for you

Verifiable consent from a parent or guardian is needed before processing a child's data.
Tracking, behavioural monitoring and targeted advertising directed at children are prohibited, with narrow exemptions.
Learning platforms, proctoring tools and communication apps are processors.
Alumni and applicant data must be erased once the purpose is served.

How ConsentLo helps

Age and guardian checks

Age signals, guardian verification and a hard block on tracking and targeted ads for minors.

Exemption records

Where the educational-institution exemption applies, the scope and reason are recorded for audit.

Vendor oversight

Every edtech tool in one processor register, with contracts and withdrawal cascades.

Retention schedules

Applicant and alumni data is erased on schedule, with legal holds for records that must be kept.

Frequently asked questions

Can edtech platforms show targeted ads to students?

Not to children. The DPDP Act prohibits tracking, behavioural monitoring and targeted advertising directed at anyone under 18, subject to narrow exemptions in the Rules.

Are schools exempt from parental consent?

Partly. The DPDP Rules exempt educational institutions from some children's-data conditions for educational activities and for the safety of children, but only to that extent.