The DPDP Act is not just a law on the statute book. For Indian parents, it is a set of specific rights that can be invoked against schools, coaching institutes, ed-tech apps and global platforms when they process a child's personal data. Most parents have not yet exercised these rights; most institutions have not yet built the muscle to answer them. The gap is closing in 2026 and 2027.
This pillar collects the DPDP, teen social-media, cross-border and parental-rights pieces written for the Indian family. Each section links to the deep-dive piece. If you are facing a specific situation (a school releasing your child's grade data to a third party, an ed-tech app processing without clear notice, a social-media account you did not consent to), start with section 2.
1. The DPDP primer: what the Act actually says
The DPDP Act 2023 in plain English. The specific provisions that touch children's data. The Data Fiduciary and Data Principal roles translated for a non-lawyer parent.
2. Your rights, and how to exercise them this week
The four specific parent rights under the DPDP Act, the template request to send to a school, college or ed-tech app, and what you can do when the response is unsatisfactory.
3. The 2026 teen social-media proposals
The Karnataka under-16 ban, the Andhra Pradesh under-13 proposal, DigiLocker age tokens and the Union-level draft, side by side. What has actually been enacted; what is still in consultation.
4. Cross-border: COPPA, GDPR and the Indian family
What COPPA and GDPR mean for an Indian family whose child uses a US-based or EU-based app. Where the DPDP Act lines up with them, and where it goes further.
5. The ed-tech and app ecosystem under DPDP
What DPDP changes for the apps and platforms your child uses every day. The specific signals that distinguish a compliant app from one that is still catching up.
6. SafeAnywhere's own DPDP posture
SafeAnywhere operates as a Data Processor under the DPDP Act. What that means for you, and the specific privacy design choices that reflect it (no message reading, no keystroke logging, no photo scraping).