Can schools share student results and award photos? A privacy checklist
A practical pre-publication check for Indian schools celebrating student achievements while protecting student privacy.
DPDPA compliance
for your whole school.
A clear starting point for Indian school leaders, administrators and IT teams. Understand your gaps, build a practical plan and get help with policies, people and technology.
School-wide guidance. Specialist partners.
MEDIA GUARD technology, powered by LIT.
The whole school, in view
What needs attention?
A starting point for your school’s review
- Student & parent dataRecords, access, retention
- Consent & noticesPermissions, clear communication
- Staff & responsibilitiesTraining, day-to-day processes
- School apps & vendorsSystems, third-party data flows
- Photos & videosCapture, sharing, publication
- Requests & incidentsOwnership, response processes
Start with the gaps.
Build a plan around your school.
Build a plan around your school.
An overview of review areas, not a compliance score or certification.
Powering schools today with compliance, protecting students’ data for tomorrow.
School communities connected through LIT.
Start with a little clarity.
Making sense of DPDP for your school? Start with our existing guides, or talk through your situation with us.
Browse all blogs & resources ↗From “where do we start?”
to a plan you can use.
You bring your school’s situation. We help make sense of it, agree the scope and coordinate the right support.
- 01
Find the gaps
Review your data, systems and existing practices. Understand where attention is needed.
- 02
Agree the priorities
Set a practical scope, clear responsibilities and the right specialist involvement.
- 03
Get the right help
Coordinate policies, people, technology and partner support around your school.
One conversation to find a starting point. Wider compliance services are scoped with specialist partners; technology is one part of the plan.
Explore compliance servicesHelp across your school’s
compliance plan.
From data reviews and parent permissions to staff training and vendor practices, we help coordinate the right support with specialist partners. Your school’s needs define the scope. MEDIA GUARD fits into this wider plan where media permissions need attention.
Explore all services ↗Services & Compliance Solutions
Services to Make Your School DPDPA-Compliant
01
02
03
04
05
06
Parental Consent Management
Simple, secure digital consent workflows.
Data Protection Audits
Identify risks and close compliance gaps.
Vendor Governance
Ensure third-party vendors comply with DPDPA.
Privacy-First Media Workflows
Secure photo and video sharing with parents.
Teacher & Staff Training
Build awareness and best practices within your school.
Ongoing Support & Compliance Updates
Stay future-proof as laws evolve.
Simplifying DPDPA compliance so your school can focus on students, not paperwork.
DPDP OS
for Schools
Also known as Media GuardPowered by LIT
See the work.
Know the next step.
Explore the product demo: a whole-school overview, parent permissions, school media and the records behind each decision.
Exclusively provided by DPDPA for Schools.
Explore the productProduct demo · synthetic sample school. Names, records and outcomes are illustrative, not client results. Select any screen to see it in full.
These screens illustrate product workflows, not verified live integrations or legal certification. Your school’s implementation scope is confirmed during discovery.
One school event.
So many places a photo can go.
Staff phones. Parent galleries. The school website. Social media. A child’s photo can move between them in moments. Permission for a private gallery does not automatically cover a public post.
Make media a priority in your wider compliance plan. Check the purpose, the permission and who can access it, before sharing.
What about DPDP penalties?
The Act sets ceilings up to ₹200 crore for breaches of children’s-data obligations and ₹250 crore for failures to take reasonable security safeguards. These are not automatic fines or media-specific penalties. Applicability depends on the facts, exemptions and commencement of the relevant provisions. See the Act’s Schedule. We help prioritise practical controls, rather than promise that one tool makes a school compliant.
Keep your systems.
Connect the missing step.
Your consent manager records the decision. MEDIA GUARD helps your team use it when handling photos and videos. Together, they connect permission to practice within your school’s agreed workflow.
For your IT team: integration scope
Designed for API integration with any consent manager. Specific platform compatibility, API availability, permission mapping and implementation scope are confirmed during discovery. Controls apply within the agreed workflow; this does not promise control over copies shared outside it.
Meet the LIT
behind the technology.
Learn more about our latest updates and insights
Watch Our Featured Video · LIT for Schools
Make Your School DPDPA-Ready — Without Extra Work
The Digital Personal Data Protection Act (DPDPA) applies to every Indian school. Parents expect privacy, trust, and control when it comes to their child’s photos and data. We help you comply with the law while simplifying your daily workflows.
We are a School Compliance Partner
Powerful solutions for schools under India’s DPDPA.
We help schools build trust with parents while staying compliant with the Digital Personal Data Protection Act, 2023. Our solutions simplify complex legal requirements into easy-to-use systems for consent, data security, and privacy-first media workflows. Whether you’re a small school or a large institution, we deliver the right-fit compliance framework — optimized for your daily operations and future-ready for audits.
Support is scoped to your school’s needs; no single tool or service guarantees compliance.
Talk to UsA school leader’s
LIT experience.
Dr. Amrita Vohra Shares Her LIT Experience
Privacy-first innovation in school events.
Hear about the LIT school media experience.
The Real Benefits of Compliance
Trusted by schools and parents
We take pride in helping schools stay DPDPA-compliant, safeguarding student data, and building lasting trust with parents through secure and future-ready solutions.
Our Latest Blogs
Insights on Privacy & Compliance in Education
Explore all articles ↗
A parent asks for school CCTV footage: what should we do?
A practical, privacy-aware process for Indian schools handling a parent’s request for CCTV footage.
A school photo gallery link is exposed: what should we do?
A practical first-response checklist for a school event photo gallery accessible through an unintended link.
DPDPA Act: Potential Penalties for Schools
Ignoring the DPDP Act could cost your school crores. Our solutions keep you safe, compliant, and stress-free.
| Violation | Max Penalty |
|---|---|
| Failure to implement security safeguards | ₹250 crore |
| Failure to notify data breaches | ₹200 crore |
| Issues with children’s data handling | ₹200 crore |
| Lapses by major data fiduciaries | ₹150 crore |
| Other violations under DPDP Act | ₹50 crore |
Source: DPDP Act, Govt. of India
What is the Digital Personal Data Protection Act (DPDPA) and when did it come into force?
The DPDPA is India’s data protection law that governs how personal data is collected, used, and stored. It sets requirements for consent, data security, and user rights. The Act came into force in 2023 and applies to organizations processing personal data in India, including schools.
Which schools are required to comply?
All schools in India that collect, store, or process personal data of students, parents, staff, or vendors must comply with the DPDPA. Compliance obligations depend on the type and scale of data processing—public, private, large, and small institutions should assess their exposure.
What constitutes “processing of personal data” under the DPDPA?
Processing includes any activity performed on personal data: collection, recording, storage, use, disclosure, sharing, or deletion. For schools, typical processing examples include student enrolment records, photographs, attendance logs, communications with parents, and third-party services that handle school data.
How long does implementation take?
Implementation time varies by school size, current maturity, and scope. A focused compliance audit and prioritized action plan can deliver meaningful improvements in weeks; full implementation (policies, systems, training, vendor governance) typically takes a few months. We offer staged roadmaps to fit different schedules.
What if a parent revokes consent?
If a parent withdraws consent, the school must stop processing the specific data for the purpose covered by that consent, unless another lawful basis applies. The school should provide clear procedures for withdrawal and document the action. Some operational records may still be retained if legally required; consult policy guidance.
How is student data stored and secured?
Student data should be stored with appropriate technical and organizational safeguards: encrypted storage, access controls, role-based permissions, secure backups, and regular security reviews. Limit access to only those staff or vendors who need the data, and maintain logs for accountability.
What are the penalties for non-compliance?
The DPDPA includes significant penalties for various violations (including failure to implement safeguards or to notify breaches). Penalty amounts vary by the type and severity of violations. Schools should treat compliance proactively to avoid reputational damage and financial risk.
How long does implementation take?
Implementation time varies by school size, current maturity, and scope. A focused compliance audit and prioritized action plan can deliver meaningful improvements in weeks; full implementation (policies, systems, training, vendor governance) typically takes a few months. We offer staged roadmaps to fit different schedules.
Can this integrate with our existing systems (LMS/MIS)?
Yes. Privacy-first workflows and consent management systems can be integrated with common LMS/ MIS platforms using APIs or secure connectors. Integration ensures single-source consent records and reduces manual work — but we always verify compatibility and data flows in a discovery phase.
You run the school.
Let’s work through the gaps.
Bring your questions, existing systems and current processes. We’ll help scope the right next step, from MEDIA GUARD to broader specialist support.