Digital Marketing for Private Schools and CBSE Institutions

School marketing in India has one audience, and it is not the student. Section 9(3) of the Digital Personal Data Protection Act, 2023 states that "a Data Fiduciary shall not undertake tracking or behavioural monitoring of children or targeted advertising directed at children," and a child is anyone who has not completed eighteen years. Schools do have a narrow exemption — but it reaches only children already enrolled, which means it gives an admissions campaign nothing at all. Done properly, school marketing is a seasonal, parent-directed, catchment-bound discipline measured in confirmed admissions per grade.

Two further constraints shape it. What a CBSE school may claim about results is governed by its Board, and the Board no longer produces the ranks most schools advertise. And the admission procedure itself is regulated.

Truth line: your campaign is lawful or unlawful depending on which side of enrolment the child sits, and almost no school has drawn that line.

What does the law actually prohibit?

Four provisions, and they operate differently from one another. Read them from the Act itself:

• Section 2(f) defines a child as "an individual who has not completed the age of eighteen years." No lower digital-consent age, unlike other jurisdictions.
• Section 9(1) requires verifiable consent of the parent or lawful guardian before processing any personal data of a child.
• Section 9(2) bars processing "likely to cause any detrimental effect on the well-being of a child."
• Section 9(3) bars tracking, behavioural monitoring and targeted advertising directed at children.

Note what Section 9(3) is not. It is not a consent provision. Parental consent does not unlock behavioural targeting of a child, because consent is nowhere in the sub-section. You cannot buy your way past it with a signature.

The Schedule attaches real numbers. Breach of the children's obligations under Section 9 can draw a penalty extending to ₹200 crore, and failure to implement reasonable security safeguards extends to ₹250 crore. These are per-instance ceilings rather than turnover percentages, and the Board sets the actual figure after inquiry — but the ceiling is not a rounding error for a school group.

The school exemption exists, and it is narrower than you think

Section 9(4) allows the government to switch off Sections 9(1) and 9(3) for prescribed classes and purposes. The DPDP Rules, notified in November 2025, do exactly that in the Fourth Schedule, and educational institutions are one of the listed classes.

Read the condition carefully. The Fourth Schedule applies the exemption where "processing is restricted to tracking and behavioural monitoring" and only for either "the educational activities of such institution" or "in the interests of safety of children enrolled with such institution." An educational institution is defined as "an institution of learning that imparts education, including vocational education." A separate entry covers school transport providers, limited to location tracking for safety during travel to and from the institution.

Three consequences follow, and the third is the one nobody has noticed.

One: the exemption is for operations, not marketing. Attendance, learning platforms, campus safety, bus tracking. Nothing in the wording reaches remarketing, audience building, predictive admissions analytics or ad targeting.

Two: Section 9(2) is never exempted. The Fourth Schedule switches off only 9(1) and 9(3). The prohibition on processing likely to harm a child's well-being applies to a school at all times, whatever else is exempted.

Three — and this is the important one: the safety limb covers "children enrolled with such institution." A prospective student is not enrolled. An applicant is not enrolled. So for everything upstream of admission, a school has no exemption of any kind. The exemption helps you run the school. It does nothing whatsoever for the funnel that fills it.

One honesty note on timing. The Rules carry a phased commencement, and the children's-data obligations fall on the later end of that phasing. A compliance date of May 2027 circulates widely; it is an interpretation of the phasing schedule rather than a date stated in the Rules, and there has been at least one correction notification since. Treat the direction as settled and the exact date as something to confirm with counsel rather than to plan a campaign around.

So what is left to target?

Parents, on age and location, with no behavioural signal drawn from a child. Both major platforms have already built this for you, which is convenient and also means you cannot opt out of it.

Google. The personalised advertising policy states that "users under the age of 18 are not eligible for personalized advertising of any kind," including predefined Google audiences. There is a second clause that matters more for schools and that almost nobody has read: advertisers also may not upload customer information from viewers of child-directed content. If your YouTube campus-tour content is child-directed, the audience you built from it is not usable.

Meta. As reported when the change came in from February 2023, Meta removed gender targeting for under-18 users and removed in-app activity signals — who a user follows on Instagram, which Pages they like — leaving age and location as the signals that determine relevance for that age group.

The practical build is therefore unglamorous and quite robust: age-gate your ad sets to adults, target the catchment by radius, and let the creative do the qualifying. A campaign that depends on interest-stacking a teenager's Instagram behaviour was never going to survive, and it is better to find that out before building it.

What is the Admission Ladder?

Four rungs, each with one metric and one owner. We call it the Admission Ladder, and the reason for naming it is that schools routinely optimise rung two while losing at rung three.

Rung 1 — Catchment. Who can physically reach you. Set by geography, bus routes and fee position, not by marketing. The honest job here is to define the radius truthfully and stop paying to reach outside it.

Rung 2 — Shortlist. Parents in the catchment who place you among the three schools they will visit. Won by search visibility, accurate local presence, and reputation. Metric: qualified enquiries from inside the catchment, not total enquiries.

Rung 3 — Visit. The campus visit, which is the real conversion event in school admissions. Nothing a parent reads replaces walking the corridors. Metric: cost per attended visit, and the no-show rate, which is where inflated enquiry numbers get exposed.

Rung 4 — Confirmation. Fee paid, seat taken. Owned by the admissions office, not by marketing. Metric: cost per confirmed admission, per grade.

Per grade is not a flourish. Entry grade behaves nothing like Class 9 or Class 11 lateral intake: different parent motivation, different competitive set, different regulatory position. A single blended cost per admission hides which grade is actually underfilled, which is the same averaging error we see in most lead generation programmes.

An honest gap: there is no credible published benchmark for cost per confirmed admission across Indian city tiers. Vendor figures track cost per lead, which is functionally useless to a school that counts fee-paying enrolments. Build the baseline from your own last three cycles and measure against yourself, which is the discipline in our note on measuring marketing ROI.

Can you still advertise your board results?

Not in the form most schools use, because the Board no longer produces the thing being claimed.

CBSE does not prepare or declare merit lists. As reported on results day in May 2025, the Board's Examination Controller stated plainly that "no merit list is prepared and declared by CBSE," and first, second and third divisions are no longer awarded either. What CBSE does issue is a merit certificate to the top 0.1% of students scoring highest in each subject, delivered to the student's DigiLocker. The stated reason is to avoid unhealthy competition.

So a creative claiming an official CBSE state rank or district rank for a recent session is claiming something the Board did not issue. That is a factual problem before it is a compliance problem, and a parent who checks will find out.

What remains available is more durable anyway:

• Aggregate cohort performance — your pass percentage, your distribution, your subject averages, stated accurately
• A student's subject merit certificate, where the top 0.1% certificate genuinely exists and the family consents
• University and board-exam outcomes over several years, which show consistency rather than one lucky cohort
• Faculty qualifications, student-teacher ratio, infrastructure, affiliation status

Affiliation deserves its own discipline. State your affiliation exactly as granted — provisional is not permanent, and the upgradation status is not the affiliation status. A school misdescribing its affiliation in marketing has a Board problem, not a marketing problem.

What can you say about admissions themselves?

Less than the premium-positioning instinct wants.

Section 13 of the Right of Children to Free and Compulsory Education Act, 2009 prohibits a school from collecting any capitation fee and from subjecting the child or the parents to any screening procedure while admitting a child.

For entry-grade admissions that rules out the entire exclusivity playbook: no advertised entrance test, no advertised assessment, no advertised selection interview as a route to a seat. The messaging has to carry quality without implying filtering — pedagogy, early-years approach, teacher training, safety, transition outcomes. Positioning on selectivity at entry level is both unlawful and, for most parents of a three-year-old, not actually the reassurance they are looking for.

The YouTube trap

This one catches almost every school, and the consequences are more severe than schools realise.

YouTube requires content to be designated as made for kids, and uses machine learning to identify videos "clearly directed to young audiences" — it may override a creator's own setting. A school's annual day, sports day, primary-grade performance or campus tour featuring young students is squarely the kind of content that attracts the designation.

Once applied, YouTube's own documentation lists what is switched off on that video: personalised advertising, comments, cards or end screens, the notification bell, channel memberships, video watermarks, save to playlist and save to watch later, autoplay on home, miniplayer playback, the donate button, Super Chat and Super Stickers, merchandise and ticketing, and live chat. Set the whole channel as made for kids and posts and Ask Studio go too.

Read that against how schools actually use YouTube. The admission-season film cannot carry a clickable end screen to the enquiry form. Parents cannot save it to watch later. Subscribers get no notification when you publish it. Comments — your social proof — are gone. The asset still works as something you embed on your own website and send over WhatsApp, and that is where it should live.

The workaround is not to mislabel the content. It is to build two libraries: student-featuring footage designated correctly and used off-platform, and parent-directed content — the principal explaining the curriculum, a facilities walkthrough without children in frame, an admissions process explainer — which carries the conversion features because it is not child-directed. That split also keeps your social channels usable.

What about photographs of your own students?

A student's photograph, name or result published on your website or social media is processing a child's personal data, and the marketing use of it sits outside every exemption in the Fourth Schedule.

The implication is a consent regime, captured separately from the admission form, specific to publication and marketing use, documented, withdrawable, and recorded per student. A general clause in the admission agreement is not a verifiable parental consent for promotional publication, and Section 9(2) sits over the top regardless — content that could affect a child's well-being is never exempted, whatever consent exists.

Practically: build a consented-media list, treat it as the only pool you may publish from, keep withdrawal easy and honour it quickly, and prefer wide shots, activity framing and images that do not identify individual children for anything that will be used in paid creative.

Is marketing even the right lever for a school?

The counter-case here is stronger than in most categories, and a trustee deserves it straight.

Catchment and fee largely decide the intake. Parents weight commute and safety heavily, which bounds the addressable market to a radius no campaign can widen. If a family lives outside the viable bus route, the impression was wasted. Your neighbourhood's density and income bracket set the ceiling, and marketing works inside it rather than against it. Which is precisely why local search presence matters more than reach for a school.

Siblings and referrals take most of the seats. At entry grade, siblings of current students and direct referrals from existing parents absorb a large share of the intake before any campaign runs. I am not going to put a percentage on it — no published Indian data establishes the baseline, and the figures quoted in the sector are anecdotal. But the direction is not disputed, and it has a hard planning consequence: size the budget against the seats actually open to cold acquisition, not against total seats. A school budgeting as though every seat is winnable will report a terrible cost per admission and conclude, wrongly, that the channel failed.

Visible spend can read as weakness. In the premium segment, scarcity is a quality signal and a heavy advertising presence can suggest empty seats. This is real, and the answer is tone rather than silence: informational, specific, confident content performs better here than aggressive campaign creative, and it is also what the regulatory position permits.

Results and teaching move a premium school more than campaigns. True over any multi-year horizon. A school with weakening outcomes cannot market its way out, and budget moved from campaigns to teaching quality compounds in a way campaigns do not.

Taken together these do not argue for no marketing. They argue for a smaller, sharper, catchment-bound programme measured on confirmed admissions, with honest expectations about how many seats it can actually influence.

What this looks like when Midgrow runs it

We would start with an audit that is mostly subtraction: every ad set that can serve to under-18s, every audience built from child-directed content, every creative claiming a board rank the Board no longer issues, every published student image without a specific marketing consent, and every entry-grade campaign implying a selection test.

Then: a parent-only targeting architecture age-gated and bounded to the real catchment, a content library split between child-featuring assets used off-platform and parent-directed assets that keep their conversion features, aggregate results and affiliation stated exactly as granted, a media consent process at admission that produces a usable publishable pool, campus-visit booking treated as the conversion event with cost per attended visit as the live metric, and reporting by grade.

We work on a retainer and we report confirmed admissions per grade against spend, not enquiry counts. We are an AI-powered agency, and in this category that means production volume across grades and campaigns and faster reporting — not generating children's faces, which would be both prohibited and obvious.

We are based in Indore and we work with performance marketing in regulated categories across several verticals. If your admission season starts in three months and your campaign plan was written before the DPDP Rules, it needs a compliance pass before it needs a budget.

Talk to us. Book a consultation or message us on WhatsApp at +91 7415603507. Bring your grade-wise vacancy position, your catchment map and last season's enquiry-to-admission numbers. We will tell you how many seats marketing can realistically influence before proposing anything.

This article summarises the legal position in general terms and is not legal advice. The children's-data provisions and their phased commencement are matters to confirm with your own counsel for your institution.

Frequently asked questions

Can a school run targeted ads to students?

No. Section 9(3) of the Digital Personal Data Protection Act, 2023 bars tracking, behavioural monitoring and targeted advertising directed at children, and a child is anyone under eighteen. It is not a consent provision, so parental permission does not unlock it. School campaigns must be built for parents, age-gated to adults.

Doesn't the school exemption cover this?

Not for marketing, and not for applicants. The DPDP Rules' Fourth Schedule exempts educational institutions from sections 9(1) and 9(3) only where processing is restricted to tracking and behavioural monitoring for the institution's educational activities, or the safety of children enrolled with the institution. Prospective students are not enrolled, and section 9(2) is never exempted.

What penalty applies?

The Act's Schedule sets a ceiling extending to ₹200 crore for breach of the children's-data obligations under section 9, and up to ₹250 crore for failing to implement reasonable security safeguards. These are per-instance maximums, with the actual figure set by the Data Protection Board after inquiry.

Can we advertise our CBSE toppers and state ranks?

Not as official ranks. CBSE does not prepare or declare merit lists and no longer awards first, second or third divisions. It issues merit certificates to the top 0.1% of students in each subject via DigiLocker. Market aggregate cohort performance instead, stated accurately.

Can we advertise an entrance test for admission?

Not at entry level. Section 13 of the Right to Education Act, 2009 prohibits subjecting a child or parent to any screening procedure while admitting a child, and prohibits capitation fees. Position on pedagogy, outcomes and safety rather than on selectivity.

Why do our YouTube videos lose end screens and comments?

Because they are designated made for kids. YouTube disables personalised advertising, comments, cards and end screens, the notification bell, memberships, save to playlist and more on that content, and it may apply the designation itself. Keep student-featuring footage for your website and WhatsApp, and build parent-directed video for the conversion path.

Can we post photos of our students?

Only from a properly consented pool. Publishing a child's photograph, name or result is processing a child's personal data, and promotional use falls outside the Fourth Schedule exemptions. Capture a specific, documented, withdrawable marketing consent separately from the admission form, and keep section 9(2) in mind regardless of consent.

What should we actually measure?

Cost per confirmed admission, by grade, with cost per attended campus visit as the leading indicator. Cost per enquiry is misleading in a category where the visit is the conversion event. No credible published Indian benchmark exists for either, so measure your own cycles against each other.