If everyone is responsible, no one really is.
A customer's phone number got leaked from a small factory in Pune. The owner said HR should handle it. HR said the IT guy should. The IT guy said no one told him. Three people. Zero action. This is the most common mistake small businesses make under India's new data protection law. No owner means nothing gets done — until it is too late.
Think about your shop or office right now. Someone collects customer Aadhaar copies. Someone stores staff salary slips on WhatsApp. Someone keeps job resumes in a folder. But who is responsible if that information leaks? If your answer is 'everyone' — that means no one. Pick one person today. Give them a clear job. Add two or three helpers from HR, accounts, or operations. Write their names down. That small step stops big problems later.
Write down one person's name as your data owner today.
Add two helpers from HR or accounts to support that person.
Check if your business is ready. Takes 3 minutes. Visit saralprivacy.com/assessment
“Responsibility needs a name not a slogan.”
Free — takes 3 minutes
Answer a few simple questions. Get your free Readiness Score — sent to your email or WhatsApp.
Check My Readiness →Take our free 3–5 minute industry assessment to find out your compliance risk level.
Take Free Assessment →Free Download
The Complete DPDPA Compliance Guide
Plain English. Everything your business needs to understand the DPDP Rules 2025 — written for founders, not lawyers. Now in 7 Indian languages.
Download the Guide →5 Ready-to-Use Templates
Start complying — not just reading
Privacy Notice, Consent Language, Data Inventory, DSR SOP, Vendor Register. Delivered free to your email.
2-min reads, plain English, every morning. Free forever.
