Use this checklist to track your school’s DPDP Act readiness, from appointing a data-protection contact to signing vendor agreements. It distils the DPDP Act 2023 and DPDP Rules 2025 into ten practical, tickable steps a school can actually act on. Download the printable version, work through it with your admin team, and revisit it before the May 2027 deadline.
The 10-point checklist
- Appoint contact
- data audit
- rewrite notices
- disable trackers
- classify & protect files
- parent portal
- breach plan
- vendor agreements
- staff training
- annual audit
What each item protects you from
- Tie each to a penalty or risk.
FAQ
Q: Is this checklist enough to be DPDP compliant?
A: It’s a strong start, but full compliance also needs policies, training and legal review.
Q: Who should own DPDP in a school?
A: Appoint a named data-protection contact and publish their email, as the Rules expect.