Is this a consulting service?

No, this is a free, interactive software tool that calculates your potential liability under the DPDP Act 2023 in 30 seconds. It provides an instant risk score and automated action plan.

What are common DPDP violations in Coaching Centres?

Common violations include: Collecting and storing biometric data (fingerprints, face scans) for student attendance without explicit, verifiable consent from parents/guardians., Sharing student academic results or parent contact details with affiliated career counsellors or marketing agencies without specific, opt-in consent., Retaining student and parent personal data (e.g., application forms, payment details) for longer than necessary after course completion, without a clear data retention policy..

The DPDP Audit Tool

Compliance for Coaching Centres

📚

Coaching Centres
Liability Check

🧑‍🎓

Coaching centres holding student academic records, parent payment details, and biometric attendance data are processing sensitive information, making them prime targets for DPDP penalties up to ₹250 Crore.

Why Coaching Centres is at Risk

From local tuition centres to national chains like Aakash and FIITJEE, institutes collect vast amounts of personal data belonging to both **students and their parents**. This includes sensitive details like academic performance, attendance logs, payment histories, and even biometric data for attendance. Under the DPDP Act, processing data of minors requires verifiable consent from parents, placing a significant burden on these institutes. Sharing this data, whether for marketing other courses or with third-party ed-tech platforms, without explicit consent, can lead to substantial fines.

Common Violations

1.Collecting and storing biometric data (fingerprints, face scans) for student attendance without explicit, verifiable consent from parents/guardians.
2.Sharing student academic results or parent contact details with affiliated career counsellors or marketing agencies without specific, opt-in consent.
3.Retaining student and parent personal data (e.g., application forms, payment details) for longer than necessary after course completion, without a clear data retention policy.

The Immediate Fix

Conduct a thorough audit of all data you collect – from admission forms to biometric attendance logs. Immediately update your privacy policy to clearly state what data is collected, its purpose, and who it's shared with. For all minor student data, ensure you obtain and record verifiable consent from parents or legal guardians.