School Safety Has Changed
Twenty years ago, school safety mostly meant fire extinguishers, security guards, boundary
walls, and visitor registers. Today, it also includes child protection, mental health, online
safety, cyber security, data privacy, emergency communication, medical preparedness,
transport safety, visitor management, threat assessment, crisis leadership, and staff
wellbeing.
Safety has become multidisciplinary.
Schools need systems, not isolated activities.
What is school safety under NEP 2020?
School safety under NEP 2020 means establishing clear safety and security protocols,
ensuring immediate reporting and corrective action after incidents, and embedding safety
into school governance.
The National Education Policy 2020 explicitly links safe, inclusive, and supportive school
environments to learning outcomes and equity.
The Ministry of Education’s Guidelines on
School Safety and Security (aligned with NEP 2020) direct government, aided, and private
schools to:
● Establish clear safety and security protocols covering physical safety, child
protection, and emergency response.
● Ensure immediate reporting and corrective action after incidents of violence,
bullying, injury, or abuse, with documentation to prevent recurrence.
● Embed safety into school governance, not as an add-on but as part of leadership,
staffing, infrastructure, and culture.
For GCC’s schools, this means safety audits, SOPs, and training must be explicitly mapped to
NEP expectations and state/board requirements.
What are POCSO compliance requirements for schools in India?
School safety under NEP 2020 means establishing clear safety and security protocols,
ensuring immediate reporting and corrective action after incidents, and embedding safety
into school governance.
The National Education Policy 2020 explicitly links safe, inclusive, and supportive school
environments to learning outcomes and equity. The Ministry of Education’s Guidelines on
School Safety and Security (aligned with NEP 2020) direct government, aided, and private
schools to:
● Establish clear safety and security protocols covering physical safety, child
protection, and emergency response.
● Ensure immediate reporting and corrective action after incidents of violence,
bullying, injury, or abuse, with documentation to prevent recurrence.
● Embed safety into school governance, not as an add-on but as part of leadership,
staffing, infrastructure, and culture.
For GCC’s schools, this means safety audits, SOPs, and training must be explicitly mapped to
NEP expectations and state/board requirements.
How does the DPDP Act 2023 affect Indian schools?
DPDP Act compliance for schools means obtaining verifiable parental consent for children’s
data, avoiding behavioural monitoring/targeted ads, honoring data rights, and
implementing breach notification within 72 hours.
India’s Digital Personal Data Protection (DPDP) Act 2023 treats every student (under 18) as
a child and imposes strict duties on schools as Data Fiduciaries. Operational implications for
schools include:
● Verifiable parental consent before collecting or processing a child’s personal data
(including photos, videos, ERP/LMS data, health info, biometrics, GPS). Generic
checkboxes or standard admission forms are not sufficient; consent must be
informed, specific, and withdrawable.
● No behavioural monitoring or targeted advertising directed at children; no
processing likely to harm a child’s wellbeing.
● Data Principal rights for students/parents: access, correction, erasure, and consent
withdrawal; schools must have processes to honor these.
● Security safeguards and breach duties: reasonable security measures are
mandatory; in case of a breach, schools must notify the Data Protection Board of
India and affected parents promptly, typically within 72 hours of becoming aware.
● Privacy-by-design: purpose limitation, data minimization, retention limits, clear
privacy notices, and grievance redress mechanisms.
For GCC, this translates into practical work on consent workflows, vendor contracts,
photo/media policies, LMS/ERP configurations, and incident response playbooks
What should a school safety system include?
A school safety system should include physical security, child protection, mental health,
digital/cyber resilience, and emergency/crisis leadership, with one operating model owned
by school leadership.
Compliance on paper is no longer enough. The real risk lives in the invisible systems: what
gets reported, what gets ignored, what gets followed through, and what quietly slips
through the cracks.
A modern school safety system integrates five pillars:
● Physical & procedural security (access control, surveillance, drills, environmental
design)
● Child protection & safeguarding (policies, reporting, training, culture)
● Mental health & wellbeing (early help, counseling, restorative practices, staff
wellbeing)
● Digital & cyber resilience (zero trust, MFA, incident response, digital citizenship)
Emergency & crisis leadership (communication, medical preparedness, transport
safety, threat assessment)
Global frameworks like UNESCO’s Comprehensive School Safety Framework (CSSF)
reinforce this “all-hazards” approach to protect learners, ensure continuity of education,
and build risk-reduction skills
How can schools prepare for POCSO and DPDP audits?
Schools can prepare for POCSO and DPDP audits by maintaining documented policies,
training records, committee minutes, consent workflows, data inventories, and a tested
breach response plan.
Practical steps:
● One safety operating model: A single, living framework that connects policy,
people, processes, and technology, owned by leadership, not siloed in departments.
● Threat assessment teams: Multidisciplinary groups that identify and support at-risk
students before harm occurs.
● Data-informed vigilance: Clear reporting channels, consistent documentation, and
follow-through so small signals don’t compound into crises.
● Performance over compliance: Scenario-based training, role clarity, and disciplined
execution instead of check-the-box drills.
● Parent–school alignment on digital safety: Shared expectations and education so
protection extends beyond the gate.
How GCC helps schools build this system
Golden Circles Consultancy (GCC) helps schools move from fragmented measures to an
integrated safety system through:
● Safety audits that surface hidden risks and system gaps
● Policy & SOP design aligned to NEP 2020, POCSO, DPDP Act, and board/state
requirements
● Leadership & crisis training for principals and safety teams
● POCSO compliance programs: committees, training, reporting protocols, and
documentation systems
DPDP readiness for schools: consent workflows, data maps, vendor due diligence,
breach response, and privacy notices
● Digital safety & data privacy guidance that works with real school workflows
● Ongoing support to turn plans into practiced, measurable behaviors
Ready to move from checklists to systems?
If your school is preparing for POCSO audits, DPDP compliance, or NEP-aligned safety
reviews, GCC can help you build a practical, future-ready safety system.
Contact Golden Circles Consultancy
Email: info@goldencirclesconsultancy.com
Phone: +91 99107 06043
Website: goldencirclesconsultancy.com
FAQs: School Safety, NEP 2020, POCSO and DPDP
Q: Is POCSO training mandatory for all school staff?
A: Yes. POCSO obligations apply to all persons, including teaching and non-teaching staff,
transport providers, and security personnel. Schools must conduct periodic sensitisation
and maintain training records.
Q: Does DPDP Act apply to school photos and videos of students?
A: Yes. Photos and videos of students are personal data. Under DPDP, schools must obtain
verifiable parental consent, limit use to specified purposes, and implement security
safeguards.
Q: What does NEP 2020 say about school safety?
A: NEP 2020 links safe, inclusive, and supportive school environments to learning outcomes
and equity. Ministry guidelines require clear safety protocols, immediate incident reporting,
and embedding safety into school governance.
Q: What should a school safety system include?
A: An integrated system covers physical security, child protection, mental health,
digital/cyber resilience, and emergency/crisis leadership, with one operating model owned
by school leadership.




