Rules education platforms should respect
Many learners are minors, which raises the bar. India's DPDP Act requires verifiable parental consent before processing a child's personal data and prohibits tracking, behavioral monitoring and targeted advertising directed at children. In the US, COPPA governs data from children under 13 and FERPA protects student education records held by schools, while the GDPR applies to learners in Europe. Accessibility standards such as WCAG matter for public institutions and inclusive classrooms.
Indian institutions are also connecting to national systems such as the Academic Bank of Credits, APAAR student IDs and DigiLocker for certificates, which shapes how student identity and records are stored. This is general information, not legal advice; schools and edtech companies should confirm obligations for their age groups and regions. Plan for these integrations early.
- Collect only the student data each feature truly needs.
- Separate parent and student accounts with appropriate permissions.
- Disable ad tracking and third-party analytics in children's experiences.
- Keep audit logs for grade and attendance changes.
- Design for screen readers, captions and low-bandwidth access.



