Most small businesses panic. Here is how to not do that.
Imagine this. Someone sends you a WhatsApp message. Your customer list — with phone numbers and Aadhaar details — has leaked. What do you do first? Who do you call? Most small business owners freeze. They do nothing for hours. That is the worst thing you can do. Under the new DPDPA law, you have only 72 hours to report a data leak. Without a plan, those hours disappear fast.
Say your staff member loses a phone. That phone has customer names and numbers saved on WhatsApp. Or your computer gets hacked. Salary slips and PAN card copies are now exposed. Without a plan, nobody knows what to do. Your staff will call each other. Time will be wasted. The law says you must report this in 72 hours. If you miss that, you can get a heavy fine. A simple written plan saves you from all this confusion.
Write down four names: who notices, who tells boss, who checks, who talks.
Tell your staff: if data leaks, call the owner immediately — no delay.
Check if your business is ready. Takes 3 minutes. Visit saralprivacy.com/assessment
“In a data incident confusion becomes the second breach.”
Free — takes 3 minutes
Answer a few simple questions. Get your free Readiness Score — sent to your email or WhatsApp.
Check My Readiness →Take our free 3–5 minute industry assessment to find out your compliance risk level.
Take Free Assessment →Free Download
The Complete DPDPA Compliance Guide
Plain English. Everything your business needs to understand the DPDP Rules 2025 — written for founders, not lawyers. Now in 7 Indian languages.
Download the Guide →5 Ready-to-Use Templates
Start complying — not just reading
Privacy Notice, Consent Language, Data Inventory, DSR SOP, Vendor Register. Delivered free to your email.
2-min reads, plain English, every morning. Free forever.
