EdTech & Educational Institutions
DPDP Compliance for EdTech Platforms
EdTech platforms and educational institutions collect data on minors, requiring additional safeguards under the DPDP Act. Learning analytics, assessment data, and behavioural profiling all require parental or guardian consent and special protections for children's data apply to every processing activity. ConsenPro's guardian consent flows and child data protections make compliance straightforward.
The Reality
EdTech platforms routinely process children's data without adequate consent.
Parental consent is collected at account creation but not refreshed when new data processing is introduced
Learning analytics and AI personalisation use student data without disclosed purpose or guardian consent
Assessment and test performance data is shared with third-party analytics platforms without processor agreements
Students 18+ are treated the same as minors no age-based consent differentiation exists
LMS and SIS data flows to cloud providers and analytics vendors without mapped DPDP obligations
No mechanism exists for guardians to review, update, or withdraw consent on behalf of a minor
The ConsenPro Approach
Purpose-specific guardian consent and child data protections built into your platform.
ConsenPro maps your full EdTech data estate LMS, SIS, assessment, and analytics and builds guardian consent flows for every processing activity involving minors. Learning analytics, personalisation, and research are governed as distinct consent purposes. Third-party analytics and assessment platforms are mapped as data processors. Guardians have a self-service portal to review and manage consent on behalf of their ward. Age verification gates ensure adult students are governed separately.
Capabilities
What ConsenPro delivers
Guardian Consent Flows
Parental and guardian consent is captured per processing purpose learning analytics, assessments, communications, and research. Each consent is versioned and sealed in the Consent Ledger.
Children's Data Protections
Special processing rules apply to all student data where the learner is a minor elevated consent requirements, restricted third-party sharing, and shorter default retention schedules.
Age Verification & Differentiation
Platform entry gates verify learner age. Adults (18+) manage their own consent. Minors are governed through guardian consent flows with full audit trail.
LMS & SIS Integration
ConsenPro integrates with major LMS platforms (Moodle, Canvas, Blackboard) and student information systems to map data flows and enforce consent at the data layer.
Third-Party Assessment Governance
External assessment platforms, proctoring services, and analytics tools are mapped as data processors. Agreements cover data categories, retention limits, and re-identification prohibitions.
Guardian Self-Service Portal
Guardians access a secure portal to view what data is collected about their child, review consent status, update preferences, and submit DSARs without contacting support.
Outcomes
What you can expect
DPDP Coverage
DPDP Section 6 (consent)DPDP Section 9 (children's data safeguards)DPDP Section 8 (data processor obligations)DPDP Sections 13–17 (rights of data principals)