Contact Us
The School Operations Intelligence Suite
Compliance Framework: The Definitive Register ← You are here 100 SOPs: The Definitive Register SOPs 5.0: From Bahiya to Bot The Great Filter 2026
April 2026 Edition

The Complete Compliance Framework for Schools in India

88 regulatory requirements across 15 domains, mapped to 20+ Indian statutes. The first publicly accessible, statute-mapped compliance register for every school in India.

88
Requirements
15
Domains
20+
Statutes
₹250Cr
Max DPDPA Penalty

Why Most Schools Are Only Half-Compliant

School promoters and administrators in India focus heavily on setup-phase compliance: entity registration, land approvals, building codes, and board affiliation. These are necessary but represent less than a third of the regulatory surface area.

The operational phase, where most legal exposure actually lives, is routinely neglected. POCSO non-reporting, DPDPA 2023 data breaches, labour law violations, transport accidents, and fee regulation disputes all occur after the school opens, not before. In 2024-25, CBSE issued show-cause notices and disaffiliated schools primarily for operational failures that documented compliance frameworks could have prevented.

This register maps 88 individual compliance requirements across 15 regulatory domains, covering the full lifecycle from pre-establishment through daily operations. Each requirement is linked to the specific Indian statute, CBSE Bye-Law clause, or judicial directive that mandates it.

This article tells you what compliance obligations exist. For the operational procedures to meet them, read the companion article: The 100 SOPs Schools Should Have in 2026.

🛡️
Domain I

Child Protection

8 Requirements
1

POCSO Mandatory Reporting Obligation

📄 POCSO Act 2012, Sections 19 & 21Up to 6 months imprisonment for non-reporting
2

Child Protection Committee Constitution

📄 POCSO Rules 2020; CBSE Circular 19/2017High Priority
3

Annual POCSO Awareness Training for All Staff

📄 POCSO Act Sec 19; NCPCR GuidelinesHigh Priority
4

Prohibition of Corporal Punishment

📄 RTE Act Section 17; JJ Act 2015 Sec 75Up to 5 years imprisonment (JJ Act)
5

Anti-Bullying Policy and Response Protocol

📄 NCPCR Guidelines 2018; SC Guidelines 2025High Priority
6

Police Verification of All Staff

📄 CBSE Bye-Laws; Supreme Court DirectivesHigh Priority
7

POCSO e-Box Display and Grievance Access

📄 NCPCR Directive; CBSE Safety CircularMedium Priority
8

CCTV Surveillance with 60-Day Retention

📄 CBSE Affiliation Norms; DPDPA 2023High Priority
📋
Domain II

RTE Act 2009 Operational Compliance

7 Requirements
9

25% EWS/DG Reservation (Class 1 Admission)

📄 RTE Act Section 12(1)(c)Mandatory; reimbursement by state
10

Prohibition of Screening & Capitation Fees

📄 RTE Act Section 13Fine up to 10x capitation fee charged
11

School Management Committee (75% Parents)

📄 RTE Act Section 21High Priority
12

Pupil-Teacher Ratio Compliance (30:1 / 35:1)

📄 RTE Act Section 25; ScheduleHigh Priority
13

Minimum Instructional Hours & Working Days

📄 RTE Act Section 19; 200/220 days per yearMedium Priority
14

Age-Appropriate Admission (No Denial)

📄 RTE Act Section 4High Priority
15

Transfer Certificate: No Withholding Permitted

📄 RTE Act Section 5(2); Bye-Laws 14.19High Priority
🔒
Domain III

Data Privacy (DPDPA 2023)

6 Requirements
16

Data Fiduciary Registration & Compliance Officer

📄 DPDPA 2023 Section 5-6High Priority
17

Verifiable Parental Consent for Children's Data

📄 DPDPA 2023 Section 9Up to Rs 200 crore penalty
18

Data Breach Notification (72-Hour Mandate)

📄 DPDPA 2023 Section 8Up to Rs 250 crore penalty
19

Data Mapping: All Systems (ERP, EdTech, CCTV)

📄 DPDPA 2023; Best PracticeHigh Priority
20

Third-Party Vendor Data Processing Agreements

📄 DPDPA 2023 Section 8(7)Medium Priority
21

Data Retention & Deletion Policy

📄 DPDPA 2023 Section 8(8)Medium Priority
⚖️
Domain IV

Labour & Employment Law

8 Requirements
22

Internal Complaints Committee (POSH Act)

📄 POSH Act 2013; 10+ employeesRs 50,000 fine; licence cancellation on repeat
23

EPF Registration & Monthly ECR Filing

📄 EPF Act 1952; 20+ employeesUp to 1 year imprisonment
24

ESI Registration & Contribution

📄 ESI Act 1948; 10+ employeesHigh Priority
25

Maternity Benefit Compliance (26 Weeks + Creche)

📄 Maternity Benefit Act 1961 (amended 2017)High Priority
26

Gratuity Payment (5+ Years Service)

📄 Payment of Gratuity Act 1972Medium Priority
27

Minimum Wages & Payment of Wages Compliance

📄 MW Act 1948; PW Act 1936High Priority
28

Shops & Establishments Act Registration

📄 State-specific S&E ActsMedium Priority
29

Contract Labour Regulation (Outsourced Staff)

📄 CLRA Act 1970; 20+ contract workersMedium Priority
🎓
Domain V

NEP 2020 Implementation

6 Requirements
30

5+3+3+4 Pedagogical Structure Alignment

📄 NEP 2020; NCF 2023High Priority
31

Foundational Literacy & Numeracy (NIPUN Bharat)

📄 NIPUN Bharat Mission 2021High Priority
32

Competency-Based Assessment (PARAKH Standards)

📄 NEP 2020; PARAKH FrameworkHigh Priority
33

Multilingual Education (Mother Tongue till Grade 5)

📄 NEP 2020 Para 4.11-4.14Medium Priority
34

Vocational Integration from Grade 6

📄 NEP 2020; CBSE Skill Education CircularHigh Priority
35

50-Hour Annual CPD for All Teachers

📄 NEP 2020; NCTE NormsMedium Priority
🏗️
Domain VII

Land, Zoning & Infrastructure

6 Requirements
41

Land Use Conversion (Agricultural to Institutional)

📄 State Land Revenue Acts; Municipal ZoningHigh Priority
42

Minimum Land Requirement (~2 Acres for CBSE)

📄 CBSE Affiliation Bye-LawsHigh Priority
43

Building Plan Approval & National Building Code

📄 NBC 2016; Municipal Building Bye-LawsHigh Priority
44

Fire Safety NOC & Annual Renewal

📄 Fire Services Act (State); NBC Part 4Closure order on non-compliance
45

Structural Stability Certificate

📄 CBSE Affiliation Norms; NBCHigh Priority
46

Occupancy & Completion Certificate

📄 Municipal Corporation RulesHigh Priority
📜
Domain VIII

Board Affiliation & Recognition

5 Requirements
47

CBSE/CISCE/State Board Affiliation & Renewal

📄 CBSE SARAS 6.0; CISCE NormsHigh Priority
48

Mandatory Public Disclosure on Website & OASIS

📄 CBSE Bye-Laws 2.3.8, 2.4.9Show-cause notice / disaffiliation
49

NCTE Teacher Qualification Norms

📄 NCTE Regulations; RTE Section 23High Priority
50

UDISE+ Registration & Annual Data Submission

📄 MoE Directive; State Education DeptHigh Priority
51

SQAAF Self-Assessment Compliance

📄 CBSE SQAAF FrameworkMedium Priority
🍽️
Domain IX

Food Safety (FSSAI)

4 Requirements
52

FSSAI Registration for School Canteen

📄 FSSAI (Safe Food for Children in Schools) Regulations 2020High Priority
53

Junk Food Ban (Campus + 50m Radius)

📄 FSSAI Regulations 2020; Delhi HC OrdersHigh Priority
54

Mid-Day Meal Vendor FSSAI Licence Verification

📄 FSSAI Act 2006; MDM Scheme GuidelinesMedium Priority
55

Food Allergen Identification & Sanitation Records

📄 FSSAI Regulations; Best PracticeMedium Priority
🚌
Domain X

Transport Safety

6 Requirements
56

School Bus Registration in School's Name + RTA Permit

📄 MVA 1988; SC 1997 DirectionsHigh Priority
57

GPS Tracking (AIS-140) & CCTV in Buses

📄 CBSE Transport Circular; AIS-140 StandardHigh Priority
58

Speed Governor (40 km/h Cap)

📄 SC Directions 1997; CBSE CircularHigh Priority
59

Lady Attendant on Every Bus

📄 CBSE Transport Safety GuidelinesHigh Priority
60

Driver: 5+ Years Experience, Police Verified, Annual Medical

📄 MVA 1988; CBSE NormsHigh Priority
61

Student Manifest with Blood Groups & Route Plan

📄 CBSE Circular; Best PracticeMedium Priority
Domain XI

Disability & Accessibility (RPWD Act 2016)

5 Requirements
62

Non-Discriminatory Admission for CwSN

📄 RPWD Act 2016 Section 16High Priority
63

Barrier-Free Access (Ramps, Washrooms, Signage)

📄 RPWD Act 2016; Accessible India CampaignHigh Priority
64

Reasonable Accommodation & Assistive Devices

📄 RPWD Act Section 16(ii-iv)High Priority
65

Early Detection of Specific Learning Disabilities

📄 RPWD Act Section 16(vi)Medium Priority
66

Individual Education Plans (IEPs) for CwSN

📄 RPWD Act; CBSE Circular Acad-57/2025High Priority
💰
Domain XII

Financial & Tax Compliance

6 Requirements
67

Income Tax Exemption (Sec 10(23C) or 12A/12AB)

📄 Income Tax Act 1961High Priority
68

TDS Compliance (Salaries, Rent, Contractors)

📄 IT Act Sections 192, 194C, 194I, 194JHigh Priority
69

GST Treatment of Ancillary Services

📄 CGST Act 2017; Exemption NotificationMedium Priority
70

State Fee Regulation Act Compliance

📄 State-specific Fee Regulation ActsDerecognition risk in multiple states
71

FCRA 2010 (Foreign Donations: Designated SBI Account)

📄 FCRA 2010 (amended 2020)Medium Priority
72

Audited Financial Statements & Annual Return Filing

📄 Trust/Society/Company Act; CBSE Bye-LawsHigh Priority
🌿
Domain XIII

Environmental Compliance

4 Requirements
73

Rainwater Harvesting (Mandatory in Most Cities)

📄 NGT Orders; State Building Bye-LawsHigh Priority
74

Solid Waste Management & Segregation

📄 SWM Rules 2016; Municipal Bye-LawsMedium Priority
75

E-Waste Disposal (Computers, Lab Equipment)

📄 E-Waste Management Rules 2022Medium Priority
76

Single-Use Plastic Ban on Campus

📄 Plastic Waste Management Rules 2022Medium Priority
💻
Domain XIV

Cyber Safety & IT Governance

5 Requirements
77

Cyber Safety Policy (IT Act 2000 Compliance)

📄 IT Act 2000; NCPCR Cyber Safety GuidelinesHigh Priority
78

Social Media Policy (Student Data Sharing)

📄 DPDPA 2023; IT Act 2000Medium Priority
79

Web Content Filtering & Safe Internet Access

📄 NCPCR Guidelines; Best PracticeMedium Priority
80

Cyberbullying Prevention & Response Protocol

📄 IT Act Sec 66C-66E; BNS 2023High Priority
81

EdTech Vendor Due Diligence & Data Agreements

📄 DPDPA 2023; IT ActMedium Priority
📌
Domain XV

Mandatory Committees, Disclosure & Grievance Redressal

7 Requirements
82

Safety & Security Committee

📄 CBSE Safety Circular; Bye-LawsHigh Priority
83

Anti-Sexual Harassment Committee

📄 POSH Act 2013; CBSE DirectiveHigh Priority
84

Grievance Redressal Committees (4 Types)

📄 CBSE Notification Sept 2017: Public, Staff, Parent, StudentHigh Priority
85

RTI Compliance (Government-Aided Schools)

📄 RTI Act 2005; Public Authority definitionMedium Priority
86

Anti-Ragging Committee & Squad

📄 CBSE Norms; UGC Anti-Ragging Regulations (Sr Sec)Medium Priority
87

Student & Public Liability Insurance

📄 Best Practice; CBSE AdvisoryMedium Priority
88

Examination Conduct & Board Exam Compliance

📄 CBSE Exam Bye-Laws Rules 13-14; Annual SOP CircularsHigh Priority

Get a Compliance Diagnostic for Your School

RAYSolute Consultants maps your school against all 88 compliance requirements and delivers a priority-ranked gap report with a remediation roadmap.

1
Compliance Audit (Week 1-2)We assess your school against all 15 domains and 88 requirements
2
Gap Report & Risk Matrix (Week 3)Priority-ranked findings with statute references and penalty exposure
3
Remediation Roadmap (Week 4-8)Actionable compliance plan with documentation templates and training
4
Compliance Certification (Week 9-12)Mock inspection simulation and audit-ready evidence repository
No obligation. No spam. Just a clear picture of your compliance gaps.
AS

Aurobindo Saxena

Founder & CEO, RAYSolute Consultants

CMA, CS, MBA (E-Commerce). Forbes India contributor with 80+ published articles and 30 industry reports on Indian education. 23+ years in institutional consulting across K-12, higher education, and EdTech. RAYSolute is India's first education consultancy to offer Generative Engine Optimization (GEO) for educational institutions.

aurobindo@raysolute.com · www.raysolute.com

Frequently Asked Questions

A fully compliant Indian school must satisfy regulatory requirements across at least 15 distinct domains, generating over 88 individual compliance obligations. These span child protection, data privacy, labour law, food safety, transport, accessibility, financial compliance, environmental regulations, and more. Schools operating hostels, international curricula, or receiving foreign funding will have additional requirements.
Under Section 21 of the POCSO Act 2012, failure by any person (including school staff) to report a known or apprehended sexual offence against a child is punishable with imprisonment up to six months, a fine, or both. Schools must constitute Child Protection Committees, conduct annual POCSO awareness training for all staff, and display POCSO e-Box information prominently on campus.
Yes. Schools are classified as Data Fiduciaries under the Digital Personal Data Protection Act 2023, legally responsible for all personal data they process: student records, Aadhaar numbers, photographs, biometric attendance, medical information, CCTV footage, and payment details. Section 9 imposes enhanced protections for children's data, requiring verifiable parental consent. Penalties reach Rs 250 crore for significant breaches and Rs 200 crore for failure to protect children's data.
CBSE inspections assess infrastructure norms, teacher qualifications, mandatory public disclosures, record maintenance, student-teacher ratios, and safety compliance. Non-compliance triggers a progressive enforcement model: show-cause notice, affiliation downgrade (Senior Secondary to Secondary), and ultimately full disaffiliation. Schools with documented compliance frameworks and evidence repositories can respond to show-cause notices rapidly and avoid escalation.
The 100 SOPs article answers "what procedures should my school have?" This Compliance Framework answers "what laws and regulations apply to my school?" The SOPs are the operational response to the compliance obligations listed here. Together, they form a complete operating system: this article maps the regulatory terrain; the 100 SOPs provide the documented procedures to navigate it.
Yes. RAYSolute Consultants offers a structured School Compliance Diagnostic that maps your school against all 88 requirements, identifies gaps with priority ratings and penalty exposure, and delivers a customized Compliance Roadmap with remediation timelines. Contact aurobindo@raysolute.com or visit www.raysolute.com for an assessment.

More from RAYSolute

Explore our case studies, reports, and thought leadership

All Articles & Media