The DPDP Audit Tool
Compliance for EdTech
📚

EdTech
Liability Check

👶

EdTech's primary risk is Data of Minors. The DPDP Act mandates Verifiable Parental Consent and bans tracking/behavioral monitoring of children.

Why EdTech is at Risk

EdTech firms are directly in the crosshairs regarding children's data. **Section 9** of the Act prohibits tracking or behavioral monitoring of children or targeted advertising directed at children. You must obtain verifiable parental consent before processing ANY data of a child.

Common Violations

  • 1.defaulting to 'accept all' cookies for users under 18.
  • 2.Selling student leads to coaching centers or colleges.
  • 3.Gamification features that rely on behavioral profiling of children.

The Immediate Fix

Audit your platform for **'dark patterns'** that encourage more data sharing by children. Ensure your parental consent flow is robust ( e.g., OTP sent to parent's phone).

Start 30-Second Audit

Projected Compliance Deadline: Immediate