In light of the stringent data protection regime that India is likely to see in the near future and the heavy penalties, it would be advisable that schools and educational institutes start ensuring efficient systems and processes regarding their data collection.
Schools collects variable data from students and hence as data fiduciaries they are required to meet certain stringent obligations with respect to data, keeping in mind that any activity of processing data should respect the privacy of the individual at all times. Schools will have to confirm that transparency, accountability and strict mechanisms and processes are in place so as to adhere to various duties and obligations outlined in the Data Law.