Are Schools Exempt from DPDP Children’s-Data Rules? The Fourth Schedule, Explained

Partly — but not blanketly. Under the DPDP Rules 2025, certain classes of Data Fiduciaries, including educational institutions, are granted limited relief from some children’s-data obligations (such as aspects of verifiable parental consent and the bar on tracking) — but only for specific, listed purposes tied to the child’s welfare, safety and education. It is not a free pass. This article explains what the exemption likely covers, what it does not, and why most of a school’s data processing still needs full consent and safeguards.

What the relief is meant to cover

• Safety, attendance/monitoring for welfare, educational activities — the operationally necessary processing.

What is NOT exempt

• Marketing, photos on social media, sharing with edtech partners, behavioural ads — still need consent.

FAQ

Q: Are schools fully exempt from DPDP consent rules?

A: No. Relief is limited to specific welfare/education purposes; most processing still needs verifiable parental consent.

Q: Can schools track students under the exemption?

A: Only where strictly tied to a permitted purpose such as safety; general behavioural tracking and ads remain prohibited.