Skip to content
School Privacy CompassReadiness Check · by Oneflo

About and sources

Legal instruments used

  • Digital Personal Data Protection Act, 2023 (No. 22 of 2023)
  • Digital Personal Data Protection Rules, 2025 — G.S.R. 846(E), as corrected by G.S.R. 892(E)
  • Commencement notification — G.S.R. 843(E)

Official pages

This question pack

School Privacy Compass Quick Start, version 0.1-draft. Research date: 2026-10-15.

Prepared by Oneflo System Integrators LLP. Independent legal review: not yet done.

Children are treated as anyone under 18.

How to read the labels

DPDP requirement — preparedness (calculated start 13 May 2027) — something the Act and Rules ask for, shown so you can prepare.

Recommended practice — good practice that supports those duties.

Most duties for schools under the Act are due to start on a date calculated as 13 May 2027. Items marked 'DPDP requirement' are shown so you can prepare. They are not breaches today.
Working approach: consent first. Some uses may be allowed without consent under the Act; that is a legal question this tool does not decide. This is Oneflo's product stance, not a legal finding.
Prepared by Oneflo System Integrators LLP. The legal references in this tool have not been reviewed by an independent lawyer. Use for awareness only, and check with your own legal adviser before acting.