In a CA firm, 7 different people may see the same Aadhaar number.
In a CA firm, one client file can hold Aadhaar numbers, PAN cards, salary slips, and bank details. Think about how many people open that same file. The partner opens it. The article assistant works on it. The admin saves it. The IT person fixes it. That is already four people — and we have not counted the cloud vendor yet. If even one person is careless, your client's private information is at risk.
Imagine a client gives your firm their Aadhaar, PAN, and salary slips for ITR filing. The partner assigns it to an article assistant. The assistant saves it on a shared Google Drive. The admin also has access. An outside IT person fixes a laptop and sees the folder. Now five people hold your client's private information. If any one of them shares it — even by mistake on WhatsApp — your firm can face a complaint under the new data law. You are responsible for every hand that touches that file.
Make a list of every person who can open client files today.
Remove file access from anyone who does not need it right now.
Check if your business is ready. Takes 3 minutes. Visit saralprivacy.com/assessment
“The more people who touch the file the more discipline the file needs.”
Free — takes 3 minutes
Answer a few simple questions. Get your free Readiness Score — sent to your email or WhatsApp.
Check My Readiness →Take our free 3–5 minute industry assessment to find out your compliance risk level.
Take Free Assessment →Free Download
The Complete DPDPA Compliance Guide
Plain English. Everything your business needs to understand the DPDP Rules 2025 — written for founders, not lawyers. Now in 7 Indian languages.
Download the Guide →5 Ready-to-Use Templates
Start complying — not just reading
Privacy Notice, Consent Language, Data Inventory, DSR SOP, Vendor Register. Delivered free to your email.
2-min reads, plain English, every morning. Free forever.
