Three questions every small business owner is asking — answered simply.
Many shop owners think: 'I am small. This law is not for me.' But that is not true. If you collect a customer's phone number, a worker's Aadhaar, or a student's name — this law applies to you. It does not matter if you have 5 employees or 500. The new DPDPA law covers almost every business in India that stores people's information digitally.
You run a small school and collect parents' phone numbers on WhatsApp. That is covered. You own a factory and keep workers' salary slips and Aadhaar copies. That is covered. You have a shop and store customer PAN card details for GST billing. That is covered too. A privacy policy on your website is a good start. But you also need to ask permission before collecting information. You need to keep that information safe. And you must delete it when you no longer need it.
Write down every type of information your business collects from people.
Check if you are asking permission before saving customer or staff information.
Check if your business is ready. Takes 3 minutes. Visit saralprivacy.com/assessment
“People save content that removes fear without hiding the truth.”
Free — takes 3 minutes
Answer a few simple questions. Get your free Readiness Score — sent to your email or WhatsApp.
Check My Readiness →Take our free 3–5 minute industry assessment to find out your compliance risk level.
Take Free Assessment →Free Download
The Complete DPDPA Compliance Guide
Plain English. Everything your business needs to understand the DPDP Rules 2025 — written for founders, not lawyers. Now in 7 Indian languages.
Download the Guide →5 Ready-to-Use Templates
Start complying — not just reading
Privacy Notice, Consent Language, Data Inventory, DSR SOP, Vendor Register. Delivered free to your email.
2-min reads, plain English, every morning. Free forever.
