DPDP compliance for schools and ed-techSafe accounts and devices for students and staff.
Account security, device management and children's data protection for schools, colleges and ed-tech platforms.
What's at stake.
- 01
Children's data
From 13 May 2027, the DPDP Act and Rules require verifiable parental consent before processing a child's personal data.
- 02
Phishing
Large numbers of student and staff accounts make phishing an everyday risk.
- 03
Shared device fleets
Lab and classroom devices need central management and quick resets.
Rules and standards that usually apply.
Which ones apply depends on your licence, customers and data. Treat this as a starting list.
| Rule or standard | Who it applies to | What it asks for |
|---|---|---|
| DPDP Act, 2023 (children's data) | Applies to · Anyone processing personal data of children under 18 | Asks for · Verifiable consent of a parent or lawful guardian; no tracking, behavioural monitoring or targeted advertising directed at children, subject to exemptions in the Rules |
| Google Workspace for Education / Microsoft 365 Education | Applies to · Institutions using these platforms | Asks for · Admin controls for accounts, sharing and age-appropriate settings |
How we help.
- Service
Microsoft 365 and Google Workspace
Set up and secure Google Workspace for Education or Microsoft 365 Education.
Learn moreExplore Microsoft 365 and Google Workspace - Service
Network and Endpoint Management
Manage shared laptops, Chromebooks and tablets centrally.
Learn moreExplore Network and Endpoint Management - Standard
DPDP Act, 2023
Parental consent, notices and data handling for students under 18.
Learn moreRead about DPDP Act, 2023 - Service
Email Security and Deliverability
Stop spoofed principal and fee-payment emails.
Learn moreExplore Email Security and Deliverability
Where to start.
- Step 1
Book the free 30-minute IT & security health check
- Step 2
Turn on MFA for all staff and admin accounts
- Step 3
List every system that holds student data
From 13 May 2027 (as the Rules were notified): verifiable consent of a parent or lawful guardian before processing a child's personal data, and no tracking, behavioural monitoring or targeted advertising directed at children, subject to exemptions in the Rules.
Yes. We configure organisational units, sharing, sign-in security and device policies, and document them for your IT team.
With MDM or the platform's device management, so devices can be enrolled, restricted and reset centrally.
Let's build what's next.
Tell us about your infrastructure, security or automation goals. We reply with questions, then a written plan with scope and next steps.
- Response
- Usually within one business day
- Location
- Worldwide
What happens next
- 01
Reply
- 02
Discovery call
- 03
Proposal
This page is general guidance, not legal advice. Last reviewed October 2026.