Your lead form already collects private info — here's what the law says.
A customer fills your insurance lead form. They give their name, phone number, age, and health details. You have not even sold them a policy yet. But you already have their private information. Under the new DPDP law, this counts. You must tell them why you are collecting it. You must get their permission. This applies to every insurance broker in India — big or small.
Think about your daily work. A customer messages you on WhatsApp asking about health insurance. You ask for their age, income, and medical history. That is private information. The law says you must tell them what you will do with it. Same when you fill their proposal form with Aadhaar and PAN details. Same when you share their file with the insurance company. Same at renewal time. Every step where you touch someone's information — you need to give them a clear notice.
Add a short notice to your lead form explaining why you collect data.
List every step where you collect customer info — form, WhatsApp, KYC, renewal.
Check if your business is ready. Takes 3 minutes. Visit saralprivacy.com/assessment
“The proposal stage is already a privacy stage.”
Free — takes 3 minutes
Answer a few simple questions. Get your free Readiness Score — sent to your email or WhatsApp.
Check My Readiness →Take our free 3–5 minute industry assessment to find out your compliance risk level.
Take Free Assessment →Free Download
The Complete DPDPA Compliance Guide
Plain English. Everything your business needs to understand the DPDP Rules 2025 — written for founders, not lawyers. Now in 7 Indian languages.
Download the Guide →5 Ready-to-Use Templates
Start complying — not just reading
Privacy Notice, Consent Language, Data Inventory, DSR SOP, Vendor Register. Delivered free to your email.
2-min reads, plain English, every morning. Free forever.
