DPDP Act articles
India's Digital Personal Data Protection Act explained for LMS owners, edtech companies, schools and employers.
4 articles
What Organisations Report as the Hardest Part of DPDP Readiness: Legacy Systems
The most commonly reported obstacle to DPDP readiness is not interpreting the law. It is adopting privacy technology in legacy environments. What EY's January 2026 survey found, which DPDP Rules depend on system capabilities, and why learning platforms are a sharp case.
DPDP Act 2023: Building Employee Data-Privacy Awareness Training for Indian Companies
Neither the DPDP Act nor the Rules 2025 contains an express employee-training requirement. What rule 6 does require, which roles need which training, what happens in the first hour of a breach, and what an LMS has to be able to prove.
Children's Data Under DPDP: What the Education Provisions Do and Do Not Cover
Rule 12 and the Fourth Schedule are often summarised as an exemption for schools. The disapplication is narrower than that summary suggests: it names two of the three children's provisions in section 9, operates only within a stated condition, and leaves section 9(2) untouched.
DPDP for LMS and Edtech: What the Rules Say, and When They Apply
India's DPDP Rules 2025 commence in three phases from 13 November 2025. What each phase carries, who counts as a Data Fiduciary in a learning context, what the children's provisions say, and where the obligations meet a learning platform.
Weekly L&D insights, delivered.
No spam. Unsubscribe anytime. Read by 2,000+ L&D professionals.