DPDP Rules 2025 are now in effect. How ready is your business? Most Indian companies don't know yet.Find out in 10 minutes — free →
Many shop owners think: 'I am small. This law is not for me.' But that is not true. If you collect a customer's phone number, a worker's Aadhaar, or a student's name — this law applies to you. It does not matter if you have 5 employees or 500. The new DPDPA law covers almost every business in India that stores people's information digitally.
You run a small school and collect parents' phone numbers on WhatsApp. That is covered. You own a factory and keep workers' salary slips and Aadhaar copies. That is covered. You have a shop and store customer PAN card details for GST billing. That is covered too. A privacy policy on your website is a good start. But you also need to ask permission before collecting information. You need to keep that information safe. And you must delete it when you no longer need it.
Write down every type of information your business collects from people.
Check if you are asking permission before saving customer or staff information.
Check if your business is ready. Takes 3 minutes. Visit saralprivacy.com/assessment
“People save content that removes fear without hiding the truth.”
Free — takes 3 minutes
Answer a few simple questions. Get your free Readiness Score — sent to your email or WhatsApp.
Check My Readiness →Take our free 10-minute industry assessment to find out your compliance risk level.
Take Free Assessment →2-min reads, plain English, every morning. Free forever.
