PDPL essentials for schools
- Federal Decree-Law No. 45 of 2021 (PDPL) establishes consent as a primary basis for processing, with heightened care for children's data.
- Consent should be clear, specific and withdrawable; records should show what was consented to and when.
- Processors (app vendors) should be bound by written agreements covering security, sub-processing and deletion.
- Free-zone schools (DIFC, ADGM) may sit under separate regimes — check which applies.
Tiered consent, bilingual
Provide consent forms in English and Arabic with separate tiers — family-only, group, public — and record each child's status where the sharing happens so it is enforced automatically.
Turning sharing into inspection evidence
KHDA and ADEK frameworks look for parent partnership and student wellbeing. A timestamped, activity-tagged record of approved moments with parent reactions is exactly that evidence. Oyku exports child, event and school portfolios in one click — see Oyku for international schools.
Vendor questions for the UAE
- ✓Regional hosting options and data transfer terms
- ✓Per-child consent enforcement in Arabic/English
- ✓Admin approval before families see content
- ✓Evidence exports aligned to KHDA/ADEK
- ✓Photo book delivery to the UAE
See it live
Want this for your classrooms?
Book a 20-minute call. We'll show the parent feed, teacher capture and approvals — then set up a free pilot classroom. Under $10 per child, per month.
