If you collect Aadhaar or PAN for a loan, read this now.
Imagine a customer fills your loan form. They give their Aadhaar, PAN, and phone number. But nobody told them why you need it. Under India's new data law, that is a problem. You must tell the customer what data you are taking and why — before you take it. If you run an NBFC or give loans, this applies to you today.
Think about every step where a customer gives you information. They fill a lead form on WhatsApp. They submit their Aadhaar and PAN for KYC. They share salary slips for loan approval. They get calls from your collections team. At every one of these steps, you must show a simple notice. It should say what data you are taking and why. If you skip even one step, you are not following the law.
List every form or step where customers give you their information.
Add a simple one-line notice to each form before data is collected.
Check if your business is ready. Takes 3 minutes. Visit saralprivacy.com/assessment
“A notice is useful only if it appears where the data enters the business.”
Free — takes 3 minutes
Answer a few simple questions. Get your free Readiness Score — sent to your email or WhatsApp.
Check My Readiness →Take our free 3–5 minute industry assessment to find out your compliance risk level.
Take Free Assessment →Free Download
The Complete DPDPA Compliance Guide
Plain English. Everything your business needs to understand the DPDP Rules 2025 — written for founders, not lawyers. Now in 7 Indian languages.
Download the Guide →5 Ready-to-Use Templates
Start complying — not just reading
Privacy Notice, Consent Language, Data Inventory, DSR SOP, Vendor Register. Delivered free to your email.
2-min reads, plain English, every morning. Free forever.
