More people touch client records than you think — and that's a problem.
A client shares their Aadhaar copy, salary slip, and court documents with their lawyer. They think only the lawyer sees it. But by the time the case moves forward, five or six other people may have already read those files. Partners, interns, clerks, and even outside helpers all get access. Your client never knew. Under India's new data law, that is your responsibility — not theirs.
Think about your law office. A client gives you their PAN card, Aadhaar, and WhatsApp messages as evidence. Your associate shares it on email. An intern prints it. A clerk files it. An outside agency scans it. Now six people hold that client's private information. If any one of them leaks it or misuses it, your firm is answerable. The new law says you must know who has access. You must keep a record. You must limit who can see what.
Make a list of everyone who can open client files right now.
Tell interns and clerks in writing — do not share client papers without permission.
Check if your business is ready. Takes 3 minutes. Visit saralprivacy.com/assessment
“The privilege of the profession does not remove the burden of discipline.”
Free — takes 3 minutes
Answer a few simple questions. Get your free Readiness Score — sent to your email or WhatsApp.
Check My Readiness →Take our free 3–5 minute industry assessment to find out your compliance risk level.
Take Free Assessment →Free Download
The Complete DPDPA Compliance Guide
Plain English. Everything your business needs to understand the DPDP Rules 2025 — written for founders, not lawyers. Now in 7 Indian languages.
Download the Guide →5 Ready-to-Use Templates
Start complying — not just reading
Privacy Notice, Consent Language, Data Inventory, DSR SOP, Vendor Register. Delivered free to your email.
2-min reads, plain English, every morning. Free forever.
