From booking calls to WhatsApp reports — patient data flows everywhere.
A patient calls to book a blood test. You take their name and phone number. That is already patient data. Then they come in, fill a form, share their Aadhaar, get a report on WhatsApp, and pay by UPI. Every single step creates more data. If you run a clinic, lab, or diagnostic centre — this law applies to you. Today.
Think about one patient visit. They call you — data collected. They fill a form at your desk — more data. The doctor writes notes — more data. You send the report on WhatsApp — data shared. You send a bill — data stored. That is six or more data points from one patient. Under the new DPDPA law, you must protect all of it. You must also tell patients why you are collecting it. Small clinics and labs are not exempt.
List every place your clinic collects patient information today.
Check if WhatsApp reports are sent safely and only to the patient.
Check if your business is ready. Takes 3 minutes. Visit saralprivacy.com/assessment
“A patient journey creates data at every step not just at registration.”
Free — takes 3 minutes
Answer a few simple questions. Get your free Readiness Score — sent to your email or WhatsApp.
Check My Readiness →Take our free 3–5 minute industry assessment to find out your compliance risk level.
Take Free Assessment →Free Download
The Complete DPDPA Compliance Guide
Plain English. Everything your business needs to understand the DPDP Rules 2025 — written for founders, not lawyers. Now in 7 Indian languages.
Download the Guide →5 Ready-to-Use Templates
Start complying — not just reading
Privacy Notice, Consent Language, Data Inventory, DSR SOP, Vendor Register. Delivered free to your email.
2-min reads, plain English, every morning. Free forever.
