Where student, guardian and staff information lives
Schools hold information about children, families and employees across admissions, academics, transport, fees and communication tools, often managed by different people and vendors.
Admissions and applicants
Enquiry forms, application documents, entrance records and details of applicants who were not admitted.
Student records
Attendance, marks, reports, discipline and welfare notes, and any health or special-needs information.
Guardian communication
Parent apps, WhatsApp groups, SMS and email lists, plus emergency contact details.
Fees and finance
Fee records, receipts, scholarship paperwork and the payment tools that hold them.
Staff and vendors
Employment files, payroll, visitor logs, and transport or canteen vendors who receive student or parent details.
Photos, video and cameras
Event photos, website and social posts, classroom recordings and campus cameras.
Use aggregate descriptions, not student details, in readiness conversations.
Questions for school leadership
- Which systems and apps hold student and guardian information, and who administers them?
- Who can see sensitive records such as welfare, health or special-needs notes?
- How are guardians told what information is collected and why?
- Which vendors (school software, transport, learning apps, photographers) receive student details?
- What happens to applicant data for students who do not join, and to records of former students?
- How would the school handle a guardian’s request, a complaint or a suspected incident?
Children’s information needs particular attention
The Act contains specific provisions about children’s personal data. This page does not say how they apply to your school, so take advice from a qualified professional before drawing conclusions.
Common places to look first:
- Publishing student names or photos on social media or the school website
- Class groups that expose guardians’ phone numbers to each other
- Third-party learning apps that collect student data
A first review in four steps
List the data
Note the systems, forms and registers that hold student, guardian and staff information.
Follow a student’s year
Trace information from admission through attendance, fees, communication and exit.
Review access and sharing
Check staff roles, vendors, apps and anyone outside the school who receives details.
Plan the next actions
Choose a short list of improvements and take advice on children’s-data questions.
Check the official sources
The applicable law and any exemptions depend on the facts. Do not assume that all organisations have identical duties, or that a checklist alone proves compliance. Check the current official Act, Rules and commencement notifications, and obtain legal advice for segment-specific conclusions.
Official MeitY DPDP Act materials · the DPDP Act guide explains the framework and its commencement schedule.