Closed matters still hold client Aadhaar, PAN, and phone numbers. That's a problem.
Think about this. Your law firm has hundreds of old case folders. Each one has client Aadhaar copies, PAN cards, salary slips, and phone numbers. Your intern can open all of them. Your WhatsApp group has case documents shared freely. Under India's new data protection law, this is not okay. If something leaks, your firm is responsible.
Say your firm closed a divorce case two years ago. That folder has the client's Aadhaar, bank details, and personal messages. It is still sitting in a shared drive. Any staff member can open it. This is a real risk. Under DPDPA, you must not keep people's information longer than needed. Separate your folders by case. Lock old ones. Check who has access. Stop sharing case documents on WhatsApp groups with everyone.
Lock all closed case folders — only senior staff can open them.
Make a list of every outside tool used to share client documents.
Check if your business is ready. Takes 3 minutes. Visit saralprivacy.com/assessment
“A closed matter is not a free parking lot for old personal data.”
Free — takes 3 minutes
Answer a few simple questions. Get your free Readiness Score — sent to your email or WhatsApp.
Check My Readiness →Take our free 3–5 minute industry assessment to find out your compliance risk level.
Take Free Assessment →Free Download
The Complete DPDPA Compliance Guide
Plain English. Everything your business needs to understand the DPDP Rules 2025 — written for founders, not lawyers. Now in 7 Indian languages.
Download the Guide →5 Ready-to-Use Templates
Start complying — not just reading
Privacy Notice, Consent Language, Data Inventory, DSR SOP, Vendor Register. Delivered free to your email.
2-min reads, plain English, every morning. Free forever.
