A small team can collect a LOT of people's information without realising it.
You have 40 people working for you. Feels small, right? But think about this — you have salary slips, Aadhaar copies, customer phone numbers, resumes, WhatsApp groups, and shared Google folders. All of that is people's information. And most businesses have no idea where it all sits. The new data protection law — DPDPA — says you are responsible for all of it. Today.
Imagine your HR person shares a folder with salary slips on WhatsApp. Your accountant has a copy of 50 customer PAN cards on his laptop. A vendor can see your Google Sheet with customer phone numbers. This is normal for most small businesses. But under DPDPA, if any of this leaks, you are responsible. You will have to answer — who had access, why, and what you did to protect it. Most 40-person businesses cannot answer these questions today.
List every app and folder where customer or staff information is saved.
Remove admin access from anyone who does not truly need it.
Check if your business is ready. Takes 3 minutes. Visit saralprivacy.com/assessment
“A growing company becomes a data machine long before it feels big.”
Free — takes 3 minutes
Answer a few simple questions. Get your free Readiness Score — sent to your email or WhatsApp.
Check My Readiness →Take our free 3–5 minute industry assessment to find out your compliance risk level.
Take Free Assessment →Free Download
The Complete DPDPA Compliance Guide
Plain English. Everything your business needs to understand the DPDP Rules 2025 — written for founders, not lawyers. Now in 7 Indian languages.
Download the Guide →5 Ready-to-Use Templates
Start complying — not just reading
Privacy Notice, Consent Language, Data Inventory, DSR SOP, Vendor Register. Delivered free to your email.
2-min reads, plain English, every morning. Free forever.
