Data enters your CA firm from the very first form a client fills.
Think about the last new client your CA firm took on. Before any tax return was filed, you already had their PAN card, Aadhaar, phone number, and salary slips. That is personal information — and the new data law covers all of it. Many CA firms do not realise data collection starts at the very first step. If this sounds like your firm, keep reading.
Your CA firm touches personal information many times a day. A client sends their Aadhaar on WhatsApp — that is data. A company shares employee salary slips for payroll — that is data. An audit request comes with director details and PAN cards — that is data. All this happens before you even start the actual work. Under the new data law, your firm must handle all this information carefully from day one. Not after the work is done. From the very first message.
List every place your firm receives client information today.
Tell your team: WhatsApp documents with PAN or Aadhaar must be stored safely.
Check if your business is ready. Takes 3 minutes. Visit saralprivacy.com/assessment
“Data collection starts before service delivery starts.”
Free — takes 3 minutes
Answer a few simple questions. Get your free Readiness Score — sent to your email or WhatsApp.
Check My Readiness →Take our free 3–5 minute industry assessment to find out your compliance risk level.
Take Free Assessment →Free Download
The Complete DPDPA Compliance Guide
Plain English. Everything your business needs to understand the DPDP Rules 2025 — written for founders, not lawyers. Now in 7 Indian languages.
Download the Guide →5 Ready-to-Use Templates
Start complying — not just reading
Privacy Notice, Consent Language, Data Inventory, DSR SOP, Vendor Register. Delivered free to your email.
2-min reads, plain English, every morning. Free forever.
