Tracking who accessed sensitive student phone numbers to prevent 'Data Theft' by competitors.

Your student database is a goldmine. Competitors know it. Here's how to track every access, prevent leaks, and stay compliant with data protection laws.

In the competitive coaching industry, student phone numbers are currency. A single database leak can mean dozens of students poached by rival institutes, spam calls flooding parents, and—worst of all—legal action under India's new Digital Personal Data Protection Act. Yet most institutes have no idea who accessed what, when, or why.

₹50L+

Potential loss from data theft

68%

Institutes have no access logs

₹5Cr

Max penalty under DPDP Act

CodePex Campus gives you complete visibility: who saw what, when, and from where.

🕵️ How Data Theft Happens

👨‍💻

Insider Access

A disgruntled employee exports student phone numbers before leaving. Competitor gets a ready-made lead list.

📱

Unsecured Access

Multiple staff share one login. When data leaks, you can't trace who did it.

📤

Bulk Exports

Anyone with export rights can download entire database. No record of what was downloaded.

🛡️ CodePex Data Protection Suite

🔐

Granular Permissions

Define exactly who can view phone numbers. Teachers see only their batch students. Counsellors see assigned leads. Only senior admin can export.

📋

Complete Access Logs

Every view, download, or export is logged with timestamp, user, IP address, and device info.

⚠️

Smart Alerts

Get instant alerts for unusual activity—mass exports, after-hours access, or downloads by users who don't normally export.

👁️

Data Masking

By default, phone numbers appear masked (98765xxxxx). Full number revealed only with additional authentication.

🔍 Sample Access Log

Timestamp	User	Role	Action	Records Affected	IP Address	Device	Status
15 Mar 2025, 09:23 AM	rahul.t@inst	Teacher	View student profile	1 (Priya Patel)	203.45.67.89	Chrome / Windows	Normal
15 Mar 2025, 11:47 PM	anita.a@inst	Admin	Export batch list (CSV)	124 records	182.68.12.34	Firefox / Mac	⚠️ After-hours
16 Mar 2025, 08:15 AM	vikram.s@inst	Counselor	View phone number (unmasked)	1 (Rahul Sharma)	203.45.67.89	App / Android	Normal
16 Mar 2025, 02:30 PM	rajesh.k@inst	Admin	Bulk export (all students)	845 records	110.227.45.78	Edge / Windows	🔴 ALERT: Mass export

🚨 The system flagged a mass export by an admin at 2:30 PM. Investigation revealed he was leaving the institute and downloaded the database. Quick action prevented data theft.

🚨 Intelligent Alert Triggers

🌙

After-hours access

11 PM - 5 AM

📤

Bulk exports >100 records

Triggers review

🔄

Unusual frequency

>50 views in 10 min

🔓

First-time unmask

User views unmasked number

🔑 Role-Based Access Control

Permission

Director

Admin

HOD

Teacher

Counselor

View student names

✅

View masked phone

✅

✅ (own batch)

✅ (assigned)

View unmasked phone

✅

❌

Export data

✅

Limited

❌

👁️ Data Masking in Action

Default View (Teacher)

Rahul Sharma - 98765*****

Priya Patel - 99887*****

Phone numbers masked by default

→

Admin View (After Auth)

Rahul Sharma - 9876543210

Priya Patel - 9988776655

Full number revealed with 2FA

📜 Digital Personal Data Protection Act Compliance

📋

DPDP Act Requirements

✓ Consent management: Record when and how parent consented to data collection
✓ Access logs: Maintain records of who accessed personal data
✓ Data security: Reasonable safeguards against breach
✓ Breach notification: Alert authorities within 72 hours

CodePex helps you comply with all these requirements automatically.

💬 How One Institute Stopped a Data Breach

"We had an admin who gave notice. On his last day, at 11 PM, he exported the entire student database—over 2,000 phone numbers. Within minutes, our CodePex alert system sent an SMS to the director: 'Mass export detected from admin account.' We called him immediately and demanded he delete the file. He admitted he was planning to sell it to a competitor. We prevented a disaster. Without those logs, we'd never have known."

Mahesh K.

Director, multiple institutes

✅ Data Security Best Practices

🔐 Use role-based access 📊 Review access logs weekly ⚠️ Set alerts for mass exports 👁️ Mask sensitive data by default 🔑 Use two-factor authentication 📝 Document data access policies

🇮🇳 India's Digital Personal Data Protection Act 2023

Key provisions affecting coaching institutes:

• Consent must be free, specific, informed
• Data fiduciary must implement security safeguards
• Data breach must be reported to Board and affected persons
• Penalties up to ₹250 crore for significant breaches
• Children's data requires parental consent
• Right to access and erasure

CodePex is built to help you comply with all these requirements.

Know who saw what. Prevent data theft. Stay compliant.