A large school group's ERP holds more sensitive information than almost any other system it runs: names, dates of birth and addresses of thousands of children, parents' phone numbers and income documents, health and disability notes, marks, attendance, live bus locations, fee payments and staff salaries. School ERP data security in India is therefore not a feature checkbox. It is a legal duty under the Digital Personal Data Protection (DPDP) Act, 2023, and a question of trust with every parent.



