Compliance Guidance

Do you know where your customers' info is?

29 April 20263 min read·DPDPA Editorial Team

General Business

If you can't find it, you can't protect it — and that's a big problem.

Do you know where your customers' info is?

Can you find your customer data right now?

Think about this. Your shop has customer phone numbers in WhatsApp. Salary slips in a drawer. Resumes on someone's laptop. Aadhaar copies in a folder. Do you know where all of it is? Most small business owners don't. And that is exactly where trouble starts. If you don't know what information you have, you cannot protect it. The DPDPA law expects you to know.

4 things every small business must know about data inventory

1A data inventory is just a simple list of all information you hold.
2Write down what info you have, where it is, and who uses it.
3Also write down which outside vendors — like your CA or courier — see this info.
4This is not a legal paper. Think of it as a map of your business.

What does this mean for YOUR business?

Say you run a small school. You have student Aadhaar copies in a file. Parent phone numbers in a WhatsApp group. Fee receipts on a laptop. Staff salary slips in email. All of this is people's information. Now ask yourself — if something goes wrong, can you find it all quickly? A data inventory helps you do that. It is just a simple list. No lawyer needed. You write it yourself. Once you have it, you can protect it.

Who Is Affected

A data inventory is just a simple list of all information you hold.
Write down what info you have, where it is, and who uses it.
Also write down which outside vendors — like your CA or courier — see this info.
This is not a legal paper. Think of it as a map of your business.

3 things you can do this week

Write down every place you store people's information — phone, laptop, paper, WhatsApp.

Ask your staff who outside your business sees customer or employee information.

Check if your business is ready. Takes 3 minutes. Visit saralprivacy.com/assessment

“You cannot govern a ghost.”

Free — takes 3 minutes

Is YOUR business ready for DPDPA?

Answer a few simple questions. Get your free Readiness Score — sent to your email or WhatsApp.

Check My Readiness →

Disclaimer: This briefing is for educational purposes only and does not constitute formal legal advice. Consult a qualified data protection lawyer for formal legal opinions specific to your business.

Free checkCheck your readinessGet your free Readiness Score →Free resourceDownload the GuideComplete DPDPA guide →