Sending reports on WhatsApp feels easy — but it may cost you.
Many small clinics send blood reports on WhatsApp. It feels fast and helpful. But under the new DPDPA law, sharing a patient's health information without proper care is a serious mistake. Clinics can face fines up to ₹250 crore. You do not need to be a big hospital for this law to apply to you. If you store or send patient information digitally, this law is for you.
Think about your daily work. You collect patient names, phone numbers, and Aadhaar details. You send reports by WhatsApp or SMS. Your lab software is run by an outside company. All of this touches the new privacy law. You must tell patients why you collect their information. You must keep records safe. If a patient says their name is wrong in your file, you must fix it. If your software company leaks data, you are also in trouble.
Stop sending patient reports on WhatsApp without written permission first.
Ask your lab software vendor if they keep patient data safe and private.
Check if your business is ready. Takes 3 minutes. Visit saralprivacy.com/assessment
“In clinics privacy risk often enters through convenience channels.”
Free — takes 3 minutes
Answer a few simple questions. Get your free Readiness Score — sent to your email or WhatsApp.
Check My Readiness →Take our free 3–5 minute industry assessment to find out your compliance risk level.
Take Free Assessment →Free Download
The Complete DPDPA Compliance Guide
Plain English. Everything your business needs to understand the DPDP Rules 2025 — written for founders, not lawyers. Now in 7 Indian languages.
Download the Guide →5 Ready-to-Use Templates
Start complying — not just reading
Privacy Notice, Consent Language, Data Inventory, DSR SOP, Vendor Register. Delivered free to your email.
2-min reads, plain English, every morning. Free forever.
