
Vendor Diligence: Questions to Ask Before Signing a New EdTech Contract
A new EdTech contract rarely feels like a data decision. It arrives as a tool that solves a scheduling or admissions problem. But the moment a vendor’s platform holds applicant records, internal marks, guardian contacts, hostel allocations or staff documents, your institution has handed part of its record-keeping to a third party. Under India’s data protection framework, that does not transfer the responsibility. The Digital Personal Data Protection Act, 2023 (DPDP Act) places its obligations on the Data Fiduciary - the institution that decides why and how personal data is processed. The vendor, acting on your instructions, is a Data Processor. When something goes wrong, the questions arrive at the institution, not at the vendor. ...








