School Safety FAQ for Indian Schools: NEP 2020, POCSO & DPDP

This FAQ answers common questions from school leaders about safety obligations under
NEP 2020, POCSO, and the DPDP Act 2023. Use it as a quick reference when preparing for
audits, inspections, or board reviews.

General

Q: What is school safety under NEP 2020?
A: School safety under NEP 2020 means establishing clear safety and security protocols,
ensuring immediate reporting and corrective action after incidents, and embedding safety
into school governance.

Q: What should a school safety system include?
A: An integrated system covers physical security, child protection, mental health,
digital/cyber resilience, and emergency/crisis leadership, with one operating model owned
by school leadership.

POCSO

Q: Is POCSO training mandatory for all school staff?
A: Yes. POCSO obligations apply to all persons, including teaching and non-teaching staff,
transport providers, and security personnel. Schools must conduct periodic sensitisation
and maintain training records.

Q: What must a school’s Child Protection Policy include?
A: A POCSO-compliant policy must define abuse, reporting procedures, roles and
responsibilities, confidentiality rules, and consequences for violations, and be approved by
the board/management.

Q: What happens if a school fails to report a POCSO offence?
A: Under Sections 19–21 of POCSO, failure to report a known or suspected sexual offence
against a child is punishable. Schools must report to police or the Special Juvenile Police
Unit immediately.

DPDP Act 2023

Q: Does DPDP Act apply to school photos and videos of students?
A: Yes. Photos and videos of students are personal data. Under DPDP, schools must obtain
verifiable parental consent, limit use to specified purposes, and implement security
safeguards.

Q: What are the key DPDP obligations for schools?
A: Schools must obtain verifiable parental consent, avoid behavioural monitoring/targeted
ads for children, honor data rights (access, correction, erasure), implement reasonable
security, and notify breaches to the Data Protection Board and affected parents (typically
within 72 hours).

Q: Do admission forms with a small consent clause satisfy DPDP?
A: Generally no. DPDP expects consent to be informed, specific, and withdrawable. Generic
checkboxes or bundled consent in long admission forms are unlikely to meet the standard
for children’s data.

Audits & Compliance

Q: How can schools prepare for POCSO and DPDP audits?
A: Schools should maintain documented policies, training records, committee minutes,
consent workflows, data inventories, and a tested breach response plan, and be ready to
show evidence of implementation, not just policy documents.

Q: How often should POCSO training be conducted?
A: At least annually for all staff, with additional sessions for new joiners and after any major
incident or policy change.

Need help aligning your school to NEP 2020, POCSO, and DPDP? Golden Circles Consultancy
supports schools with safety audits, policy design, training, and compliance readiness.
Contact: info@goldencirclesconsultancy.com | +91 99107 06043.

Request an Audit
Get answers to common questions about our school safety services