Lesson 10.4: Education and edtech

Module 10 · Lesson 10.4 of 8 · About 30 minutes · Education and edtech

Children’s data and a lot of third-party tools. This DPDPA 2023 course page explains education and edtech in plain language.

education and edtech - DPDPA 2023 course lesson banner
Advertisement

What you will learn about education and edtech

  • Apply the children rules to schools
  • Handle exemptions properly
  • Control ed-tech vendors

Key points (education and edtech)

Educational institutions may process children’s data for educational activities and safety within the exemption. They still need security safeguards and must avoid tracking and targeted ads. Edtech companies selling directly to families usually need verifiable parental consent.

Edtech check

Select a numbered box to read more.

11 Agecheck22 Parentconsent33 Noad tracking44 Vendors55 Records
Tap or click a step to see exactly what to do.
Advertisement

School versus edtech (education and edtech)

TypeRule
School for education and safetyExemption for listed purposes
Edtech appParental consent
Coaching centreTreat as edtech unless exempt

Worked example

A coaching centre moves from sharing student phone numbers with advertisers to using them only for class notices.

Activity (5 minutes) (education and edtech)

List every vendor with student data.

Key takeaway: Collect less student data and keep it for less time.

Check your understanding of education and edtech

Q1. Targeted ads to students:

Q2. Edtech needs:

Q3. Schools may rely on:

Educational material for learning purposes, not legal advice. Check the official text of the DPDP Act, 2023, the DPDP Rules, 2025 and MeitY notifications for the latest position.

Official sources for education and edtech: Digital Personal Data Protection Rules, 2025 (MeitY, PDF) and DPDP Rules 2025, English text (PDF). Always check the latest official notifications.