If you can't find it, you can't protect it — and that's a big problem.
Think about this. Your shop has customer phone numbers in WhatsApp. Salary slips in a drawer. Resumes on someone's laptop. Aadhaar copies in a folder. Do you know where all of it is? Most small business owners don't. And that is exactly where trouble starts. If you don't know what information you have, you cannot protect it. The DPDPA law expects you to know.
Say you run a small school. You have student Aadhaar copies in a file. Parent phone numbers in a WhatsApp group. Fee receipts on a laptop. Staff salary slips in email. All of this is people's information. Now ask yourself — if something goes wrong, can you find it all quickly? A data inventory helps you do that. It is just a simple list. No lawyer needed. You write it yourself. Once you have it, you can protect it.
Write down every place you store people's information — phone, laptop, paper, WhatsApp.
Ask your staff who outside your business sees customer or employee information.
Check if your business is ready. Takes 3 minutes. Visit saralprivacy.com/assessment
“You cannot govern a ghost.”
Free — takes 3 minutes
Answer a few simple questions. Get your free Readiness Score — sent to your email or WhatsApp.
Check My Readiness →Take our free 3–5 minute industry assessment to find out your compliance risk level.
Take Free Assessment →Free Download
The Complete DPDPA Compliance Guide
Plain English. Everything your business needs to understand the DPDP Rules 2025 — written for founders, not lawyers. Now in 7 Indian languages.
Download the Guide →5 Ready-to-Use Templates
Start complying — not just reading
Privacy Notice, Consent Language, Data Inventory, DSR SOP, Vendor Register. Delivered free to your email.
2-min reads, plain English, every morning. Free forever.
