Lesson 10.4: Education and edtech
Children’s data and a lot of third-party tools. This DPDPA 2023 course page explains education and edtech in plain language.
What you will learn about education and edtech
- Apply the children rules to schools
- Handle exemptions properly
- Control ed-tech vendors
Key points (education and edtech)
Educational institutions may process children’s data for educational activities and safety within the exemption. They still need security safeguards and must avoid tracking and targeted ads. Edtech companies selling directly to families usually need verifiable parental consent.
Edtech check
Select a numbered box to read more.
School versus edtech (education and edtech)
| Type | Rule |
|---|---|
| School for education and safety | Exemption for listed purposes |
| Edtech app | Parental consent |
| Coaching centre | Treat as edtech unless exempt |
Worked example
A coaching centre moves from sharing student phone numbers with advertisers to using them only for class notices.
Activity (5 minutes) (education and edtech)
List every vendor with student data.
Check your understanding of education and edtech
Q1. Targeted ads to students:
Q2. Edtech needs:
Q3. Schools may rely on:
Educational material for learning purposes, not legal advice. Check the official text of the DPDP Act, 2023, the DPDP Rules, 2025 and MeitY notifications for the latest position.
