Patient records, WhatsApp reports — health data needs extra care now.
A patient shares their blood test report on WhatsApp. Your receptionist saves it on her personal phone. Another staff member sees it by mistake. This happens every day in small clinics and hospitals across India. But under the new DPDPA law, health information is the most protected type of information. One mistake can cost your clinic heavily.
If you run a clinic, lab, pharmacy, or small hospital — this applies to you. When a patient gives their Aadhaar, phone number, or test reports — you are responsible. Sending reports on WhatsApp groups is risky. Keeping patient files in open drawers is risky. Billing staff seeing medical records they do not need — also risky. You must store patient information safely. You must delete it when it is no longer needed. Patients can ask you to remove their data anytime.
Stop sharing patient reports on open WhatsApp groups immediately.
Lock all patient files — paper and digital — from open access.
Check if your business is ready. Takes 3 minutes. Visit saralprivacy.com/assessment
“In healthcare trust is part of the service itself.”
Free — takes 3 minutes
Answer a few simple questions. Get your free Readiness Score — sent to your email or WhatsApp.
Check My Readiness →Take our free 3–5 minute industry assessment to find out your compliance risk level.
Take Free Assessment →Free Download
The Complete DPDPA Compliance Guide
Plain English. Everything your business needs to understand the DPDP Rules 2025 — written for founders, not lawyers. Now in 7 Indian languages.
Download the Guide →5 Ready-to-Use Templates
Start complying — not just reading
Privacy Notice, Consent Language, Data Inventory, DSR SOP, Vendor Register. Delivered free to your email.
2-min reads, plain English, every morning. Free forever.
