ShikshaFlow home

Data and privacy

The register, and the requests a person can make about their own data.

The register

What personal data the school holds, why, and for how long. It is a statutory record under India's data-protection law, and keeping it current is the school's obligation.

Requests from data subjects

A parent or a member of staff can ask what the school holds about them, ask for a correction, or ask for erasure. Those requests arrive here and have deadlines.

Erasure has limits

A school cannot erase everything on request. Records it is legally required to keep — academic and financial history — are retained regardless, and answering a request means saying which data was erased and which was kept and why.

Do not promise a parent complete deletion.

Minors

Children's personal data carries additional protection: encrypted at rest, and never written into logs in the clear. That is built in rather than a setting to switch on.

Last updated