Glossary term
What is DPDP Act 2023?
Quick definition: India's Digital Personal Data Protection Act, 2023 — the data privacy law that governs how student and parent data must be stored, processed, and deleted.
The Digital Personal Data Protection Act, 2023 (DPDP Act) is India's primary privacy law. It defines the institute as a "data fiduciary" (responsible for student/parent data) and the software vendor as a "data processor" (handles data on the institute's instructions). Key requirements: explicit consent for data collection, the right to erasure on request, breach notification within 72 hours, and data retention only as long as necessary. Coach Sutra is built DPDP-compliant by default — per-institute isolation, encrypted storage, audit logs, and a 90-day post-cancellation export window.