Children's data needs a parent's yes first
Admissions forms, learning apps and parent WhatsApp groups all carry children's personal data. The DPDP Act treats it with the most care.
Scan your website
Read-only and free. Nothing on your site is changed.
The personal data you hold
- Student names, dates of birth and photos
- Parent phone numbers and email addresses
- Marks, attendance and learning progress
- Fee payments and scholarship details
- Health notes, allergies and transport routes
Where businesses like yours slip
Parental consent wording where children's data appears
Sign-up and admission forms that collect a child's details without asking a parent to agree first.
Forms give notice and ask for consent
Enquiry forms with no short notice saying why the details are needed.
Trackers wait for consent
Ad and analytics tags that load before a parent has said yes, including on pages children use.
Privacy notice covers the required items
A privacy notice copied from a template that never mentions children or how to withdraw consent.
A day without consent
Fictional scenario
The school app that knew too much
A school adds a free learning app. A parent notices ads following her son.
Read the storyCommon questions
Who counts as a child under the DPDP Act?
Anyone under 18. Before you process a child's personal data you need verifiable consent from a parent or lawful guardian, and you must not track children or target ads at them.
Do we need consent for marks and attendance?
Running a school is a clear purpose, but parents still need a notice explaining what you collect and why. Anything beyond that purpose, such as marketing, needs a separate yes.
Does this cover our learning app vendor?
Yes. You stay responsible for what vendors do with student data on your behalf, so you need a written contract and you should check their safeguards.
This page is general information, not legal advice.
Find out where your website stands
A free, read-only scan with plain-language findings you can act on.