Think about your customer form. Does it ask for Aadhaar number, date of birth, and home address — just to sell a shirt? Many small shops and offices do this. They collect extra information "just in case." But under the new DPDPA law, every extra detail you collect is your responsibility. If something goes wrong, you are answerable. The less you collect, the safer you are.
Say you run a small school. You ask parents for Aadhaar, PAN card, and salary slip — but you only needed a phone number. Now you must protect all that extra information. Or say your shop collects customer WhatsApp numbers, home addresses, and birthdays. But you only send one SMS offer. That extra data sits in your phone or laptop. If it leaks, you are responsible. Ask yourself: do I really need this field? If not, stop collecting it today.
Look at every form you use. Remove fields you do not need.
Tell your staff: ask only for information the job requires.
Check if your business is ready. Takes 3 minutes. Visit saralprivacy.com/assessment
“Every extra field you collect becomes one more thing you must protect.”
Free — takes 3 minutes
Answer a few simple questions. Get your free Readiness Score — sent to your email or WhatsApp.
Check My Readiness →Take our free 10-minute industry assessment to find out your compliance risk level.
Take Free Assessment →2-min reads, plain English, every morning. Free forever.