Most small businesses collect extra info they never use. That's a problem now.
Think about your customer form. Does it ask for Aadhaar number, date of birth, and home address — just to sell a shirt? Many small shops and offices do this. They collect extra information "just in case." But under the new DPDPA law, every extra detail you collect is your responsibility. If something goes wrong, you are answerable. The less you collect, the safer you are.
Say you run a small school. You ask parents for Aadhaar, PAN card, and salary slip — but you only needed a phone number. Now you must protect all that extra information. Or say your shop collects customer WhatsApp numbers, home addresses, and birthdays. But you only send one SMS offer. That extra data sits in your phone or laptop. If it leaks, you are responsible. Ask yourself: do I really need this field? If not, stop collecting it today.
Look at every form you use. Remove fields you do not need.
Tell your staff: ask only for information the job requires.
Check if your business is ready. Takes 3 minutes. Visit saralprivacy.com/assessment
“Every extra field you collect becomes one more thing you must protect.”
Free — takes 3 minutes
Answer a few simple questions. Get your free Readiness Score — sent to your email or WhatsApp.
Check My Readiness →Take our free 3–5 minute industry assessment to find out your compliance risk level.
Take Free Assessment →Free Download
The Complete DPDPA Compliance Guide
Plain English. Everything your business needs to understand the DPDP Rules 2025 — written for founders, not lawyers. Now in 7 Indian languages.
Download the Guide →5 Ready-to-Use Templates
Start complying — not just reading
Privacy Notice, Consent Language, Data Inventory, DSR SOP, Vendor Register. Delivered free to your email.
2-min reads, plain English, every morning. Free forever.
