Schools and organizations in India are increasingly violating the Digital Personal Data Protection Act by posting images of children online without obtaining the required verifiable parental consent.

Key Points

• The Digital Personal Data Protection (DPDP) Act, 2023, mandates verifiable parental consent for processing the personal data of individuals under 18.
• Compliance remains low, with estimates suggesting only 30–35% of Indian schools actively adhere to data protection regulations.
• Organizations including schools, edtech firms, and banks are legally required to secure explicit permission before sharing images or data of minors.
• Global legislative trends, such as Australia’s social media age restrictions, reflect growing efforts to protect children from cyberbullying, grooming, and identity misuse.
• Unauthorized public posts of students have led to real-world consequences, including instances of online trolling and harassment.

Why it Matters

Failure to secure proper consent exposes children to significant privacy risks and potential online abuse while leaving institutions vulnerable to legal action under the DPDP Act. As digital footprints grow, organizations must shift from blanket permissions to transparent data practices to ensure the safety and digital rights of minors.