EdTech
Liability Check
EdTech's primary risk is Data of Minors. The DPDP Act mandates Verifiable Parental Consent and bans tracking/behavioral monitoring of children.
Why EdTech is at Risk
EdTech firms are directly in the crosshairs regarding children's data. **Section 9** of the Act prohibits tracking or behavioral monitoring of children or targeted advertising directed at children. You must obtain verifiable parental consent before processing ANY data of a child.
Common Violations
- 1.defaulting to 'accept all' cookies for users under 18.
- 2.Selling student leads to coaching centers or colleges.
- 3.Gamification features that rely on behavioral profiling of children.
The Immediate Fix
Audit your platform for **'dark patterns'** that encourage more data sharing by children. Ensure your parental consent flow is robust ( e.g., OTP sent to parent's phone).
Get DPDP Updates for EdTech
We'll send you compliance alerts and deadline reminders specific to your area. No spam — unsubscribe anytime.
Need help checking your business?
- Start with the free self-check to find questions for your team.
- Our paid gap assessment takes four weeks. We check your apps, documents and records, then list what needs fixing.
- Fixing the agreed gaps takes two to three months. A final assessment checks the completed work.
Save your results and discuss the questions with your team.
Next step after the audit
The audit shows the gaps. Sanctum closes them. One programme covers legal position, data map, gap analysis, implementation, tooling, training, a written readiness opinion, and breach cover, under one accountable owner. See the all-in-one programme
What Should You Do Next?