Asking for extra details feels safe. But it can get you in trouble.
You made a new customer form. You added every field you could think of. Name, phone, Aadhaar, date of birth, father's name, religion, income. Feels thorough, right? Wrong. The new data law says — collect only what you truly need. If you collect extra, you are breaking the rules. And if that data leaks, you are in big trouble.
Think about your customer form or job application form. Do you really need a job applicant's Aadhaar number before hiring? Do you need a customer's date of birth just to sell them a saree? Probably not. Remove fields that are just nice to know. Your delivery form needs name, phone, and address. That is it. Your salary slip needs bank details. Not the employee's caste or religion. Keep only what your work actually needs.
Look at every form you use. Remove fields you do not truly need.
Tell your staff: do not ask for Aadhaar or PAN unless it is required.
Check if your business is ready. Takes 3 minutes. Visit saralprivacy.com/assessment
“Less data collected means less data to defend.”
Free — takes 3 minutes
Answer a few simple questions. Get your free Readiness Score — sent to your email or WhatsApp.
Check My Readiness →Take our free 3–5 minute industry assessment to find out your compliance risk level.
Take Free Assessment →Free Download
The Complete DPDPA Compliance Guide
Plain English. Everything your business needs to understand the DPDP Rules 2025 — written for founders, not lawyers. Now in 7 Indian languages.
Download the Guide →5 Ready-to-Use Templates
Start complying — not just reading
Privacy Notice, Consent Language, Data Inventory, DSR SOP, Vendor Register. Delivered free to your email.
2-min reads, plain English, every morning. Free forever.
