The DPDP Audit Tool
Compliance for EdTech
📚
EdTech
Liability Check
👶
EdTech's primary risk is Data of Minors. The DPDP Act mandates Verifiable Parental Consent and bans tracking/behavioral monitoring of children.
Why EdTech is at Risk
EdTech firms are directly in the crosshairs regarding children's data. **Section 9** of the Act prohibits tracking or behavioral monitoring of children or targeted advertising directed at children. You must obtain verifiable parental consent before processing ANY data of a child.
Common Violations
- 1.defaulting to 'accept all' cookies for users under 18.
- 2.Selling student leads to coaching centers or colleges.
- 3.Gamification features that rely on behavioral profiling of children.
The Immediate Fix
Audit your platform for **'dark patterns'** that encourage more data sharing by children. Ensure your parental consent flow is robust ( e.g., OTP sent to parent's phone).
Projected Compliance Deadline: Immediate