SCENARIO E04 · CHILDREN & GUARDIANS
A school adds behavioural tracking of children “to improve engagement.” What should happen before enabling it?
IN PLAIN ENGLISH
Why you are seeing this step
This field note uses one realistic decision to separate the official source, an editorial interpretation, a practical option, evidence to keep, and any uncertainty that still depends on your facts.
Educational only, not legal advice. Source status is dated 13 May 2027; inspect the official links below before relying on it.
BEST NEXT STEP
Stop and test the Act section 9(3) prohibition and the precise Rule 12 exemption conditions.
This is not merely a general design review. The legal starting point is a prohibition, followed by a careful exemption analysis.
WHY THE OTHER INSTINCTS MISS
Stop and test the Act section 9(3) prohibition and the precise Rule 12 exemption conditions.
Correct. Tracking and behavioural monitoring of children is prohibited by default, subject to notified classes/purposes and conditions.
Enable it after adding the purpose to a privacy policy.
A notice update does not override the child-tracking prohibition.
Enable it if the dashboard is visible only to teachers.
Audience alone does not establish that a Rule 12 exemption applies.
BUILD THIS EVIDENCE
Tracking inventory, prohibition/exemption analysis, conditions map and go/no-go approval.
This artefact supports review. It does not certify compliance or replace advice on your facts.
- Guidance type
- legal requirement
- Pinpoint
- Act s. 9(3); Rule 12 and Fourth Schedule; G.S.R. 843(E) and 846(E)
- Reviewed
- 2026-08-30
- Change note
- Status and pinpoint reviewed against the official Act, final Rules, commencement notification and corrigendum for this educational website.
OFFICIAL SOURCE TRAIL
Digital Personal Data Protection Act, 2023 (Act No. 22 of 2023) ↗
Definitions and specified machinery provisions are operative; most substantive duties and rights are notified for later commencement. Check each scenario's status record.
Act s. 1(2); provision-specific section pinpointsDigital Personal Data Protection Rules, 2025 (G.S.R. 846(E)) ↗
Final Rules with phased commencement. Scenario pinpoints identify the particular Rule being taught.
Rule 1(2)–(4), read with the corrigendumDPDP Act commencement notification G.S.R. 843(E) ↗
Appoints immediate, one-year and eighteen-month commencement cohorts for the Act.
G.S.R. 843(E), clauses (a)–(c)