Digital Personal Data Protection Act, 2023 (DPDP Act)
QuizWiz's dedicated compliance framework ensuring the highest standards of privacy, security, and statutory protection for Indian school students and parents.
Zero Commercial Exploitation Guarantee
In accordance with Section 9 of the DPDP Act 2023, QuizWiz does not engage in behavioral tracking, student profiling, or targeted advertising directed at children. All student data is processed exclusively for academic competition purposes.
1. Legal Context & Applicability
The Digital Personal Data Protection Act, 2023 (Act No. 22 of 2023) governs the processing of digital personal data within India. As a provider of academic competitions and educational quizzes for school students (Classes 1 to 12), QuizWiz (operated by Futurenxt) functions as a Data Fiduciary and is legally committed to upholding all obligations established under the Act.
2. Section 9 Compliance: Processing Personal Data of Children
The DPDP Act defines a "child" as an individual who has not completed 18 years of age. Under Section 9 of the Act:
- Verifiable Parental Consent (Section 9(1)): QuizWiz obtains verifiable consent from a parent or legal guardian prior to processing any personal data of a minor student for competition participation.
- Protection of Child Well-being (Section 9(2)): QuizWiz never undertakes any processing of personal data that is likely to cause any detrimental effect on the physical, mental, or moral well-being of a child.
- Strict Prohibition on Tracking & Targeted Ads (Section 9(3)): QuizWiz strictly prohibits tracking, behavioral monitoring, algorithmic psycho-profiling, and targeted advertising directed at children.
3. Notice and Lawful Purpose (Sections 5 & 6)
QuizWiz operates on the principle of strict Data Minimisation. We only collect the minimal personal data strictly necessary to administer fair quiz competitions:
| Data Point | Purpose of Processing | Legal Basis |
|---|---|---|
| Student Name | Leaderboard display, competition identification, and printing on Merit Certificates. | Parental Consent (DPDP Sec 6 & 9) |
| Class / School / City | Allocation to proper age division (Group A: Classes 1-6 or Group B: Classes 7-12) and inter-school ranking. | Legitimate Educational Purpose |
| Parent WhatsApp & Email | Sending competition round links, syllabus PDFs, result alerts, and prize delivery coordination. | Parental Consent |
| Quiz Responses & Timers | Calculating academic scores, time-weighted accuracy, and validating national awards. | Contest Contract Performance |
4. Statutory Rights of the Data Principal (Parents & Guardians)
Under Chapter III of the DPDP Act 2023, parents and guardians exercising rights on behalf of their children are entitled to:
- Right to Access Information (Section 11): Request a complete summary of personal data being processed by QuizWiz and the identities of any authorized processors.
- Right to Correction & Erasure (Section 12): Request correction of inaccurate student details, completion of incomplete records, or immediate erasure of personal data that is no longer required for the championship.
- Right of Grievance Redressal (Section 13): Access an effective, readily accessible grievance redressal mechanism provided by QuizWiz.
- Right to Withdraw Consent (Section 6(4)): Withdraw consent at any time with the same ease as it was given. Upon withdrawal, QuizWiz ceases data processing unless required by applicable law.
5. Reasonable Security Safeguards (Section 8(5))
To prevent personal data breaches, QuizWiz implements state-of-the-art technological and organizational measures, including 256-bit TLS/SSL transmission encryption, restricted role-based database access, and automated log auditing. In the unlikely event of any personal data breach, QuizWiz will notify the Data Protection Board of India (DPBI) and affected parents in accordance with statutory rules.
6. Grievance Redressal & Data Protection Officer (DPO)
In compliance with Section 13 of the DPDP Act 2023, QuizWiz has designated a dedicated Grievance Redressal Officer to address queries, consent revocations, and data requests: