Most small businesses keep old data forever. That is a big mistake.
You collected a customer's phone number two years ago. You never deleted it. Now it is just sitting there — doing nothing. Under the new DPDPA law, keeping data longer than needed is not allowed. Many small business owners do not even know what data they have stored. If you have old resumes, Aadhaar copies, or customer lists lying around — this applies to you.
Think about the resumes you collected last year. You hired someone. The others are still on your phone or laptop. Delete them. Think about customer Aadhaar copies taken for a one-time delivery. That job is done. Delete the copy. Old salary slips, WhatsApp messages with PAN card photos, GST forms with personal details — all of these need a clear end date. Make a simple list. Write what data you have, why you have it, and when to delete it.
List all types of data your business holds right now.
Set a delete date for resumes, Aadhaar copies, and old customer numbers.
Check if your business is ready. Takes 3 minutes. Visit saralprivacy.com/assessment
“Retention discipline prevents digital hoarding.”
Free — takes 3 minutes
Answer a few simple questions. Get your free Readiness Score — sent to your email or WhatsApp.
Check My Readiness →Take our free 3–5 minute industry assessment to find out your compliance risk level.
Take Free Assessment →Free Download
The Complete DPDPA Compliance Guide
Plain English. Everything your business needs to understand the DPDP Rules 2025 — written for founders, not lawyers. Now in 7 Indian languages.
Download the Guide →5 Ready-to-Use Templates
Start complying — not just reading
Privacy Notice, Consent Language, Data Inventory, DSR SOP, Vendor Register. Delivered free to your email.
2-min reads, plain English, every morning. Free forever.
