Filing ITRs and running payroll? DPDPA is already watching your work.
Every day your CA firm handles PAN cards, salary slips, and Aadhaar numbers. You think this is just normal work. But under the new privacy law, every time you touch someone's information — you have a responsibility. Most CA firms do not know this. The risk is not in some big policy document. It is hiding inside your everyday tax, payroll, and audit work.
Say your firm handles payroll for a factory. You have 50 employees' salary slips, Aadhaar numbers, and bank details. Your junior staff can open all of it. You share files on WhatsApp. You never delete old resumes or ITR folders. Under the new law, all of this is a problem. Your client can ask you to fix or delete their information. You must have one person to handle such requests. You must not keep files longer than needed.
Stop sharing client PAN, Aadhaar, or salary files on WhatsApp.
Limit staff access — one person should not see all client files.
Check if your business is ready. Takes 3 minutes. Visit saralprivacy.com/assessment
“Most privacy risk in a CA firm hides inside normal work.”
Free — takes 3 minutes
Answer a few simple questions. Get your free Readiness Score — sent to your email or WhatsApp.
Check My Readiness →Take our free 3–5 minute industry assessment to find out your compliance risk level.
Take Free Assessment →Free Download
The Complete DPDPA Compliance Guide
Plain English. Everything your business needs to understand the DPDP Rules 2025 — written for founders, not lawyers. Now in 7 Indian languages.
Download the Guide →5 Ready-to-Use Templates
Start complying — not just reading
Privacy Notice, Consent Language, Data Inventory, DSR SOP, Vendor Register. Delivered free to your email.
2-min reads, plain English, every morning. Free forever.
