A resume you sent once may now be sitting in 10 different places.
You send a candidate's resume to one client. But before that person gets hired, their Aadhaar copy, phone number, and address have passed through your recruiter, your account manager, a BGV company, a payroll team, and maybe a staffing software tool. That candidate never said yes to all of this. Under the new DPDPA law, this is your problem to fix — not theirs.
Say you run a small placement firm in Pune. You collect resumes on WhatsApp. You forward them to three clients. One client sends it to their HR. Their HR sends it to a BGV company. Now that candidate's Aadhaar copy is in six places. The candidate only gave it to you. Under DPDPA, you are responsible for where it goes. If something goes wrong, the law looks at you first. Every extra forward is extra risk.
Stop forwarding resumes on WhatsApp. Use a secure folder or link instead.
Make a list of who gets candidate data — recruiters, BGV firms, clients.
Check if your business is ready. Takes 3 minutes. Visit saralprivacy.com/assessment
“Every forwarded resume creates a new data control problem.”
Free — takes 3 minutes
Answer a few simple questions. Get your free Readiness Score — sent to your email or WhatsApp.
Check My Readiness →Take our free 3–5 minute industry assessment to find out your compliance risk level.
Take Free Assessment →Free Download
The Complete DPDPA Compliance Guide
Plain English. Everything your business needs to understand the DPDP Rules 2025 — written for founders, not lawyers. Now in 7 Indian languages.
Download the Guide →5 Ready-to-Use Templates
Start complying — not just reading
Privacy Notice, Consent Language, Data Inventory, DSR SOP, Vendor Register. Delivered free to your email.
2-min reads, plain English, every morning. Free forever.
