Keeping old worker and visitor records too long is now a legal risk.
Many factory owners keep old files forever — just in case. Old contractor Aadhaar copies. Visitor entry logs from 2019. Medical records of workers who left years ago. But India's new data law says: once the work is done, delete the file. Keeping it longer is now a risk. If something goes wrong, that old file becomes your problem. Does this sound like your factory?
Think about your factory right now. You may have a register with visitor phone numbers from two years ago. You may have Aadhaar copies of contractors who finished work last year. You may have salary slips and resumes of workers who left long back. All of this is sitting in a file or a hard drive. The law says: if you do not need it anymore, delete it. Also, if your factory has a data leak, you must report it fast. You need a plan ready before that day comes.
List all old contractor and visitor files. Delete what is no longer needed.
Write a simple one-page plan for what to do if a data leak happens.
Check if your business is ready. Takes 3 minutes. Visit saralprivacy.com/assessment
“Operational data becomes liability when it outlives its purpose.”
Free — takes 3 minutes
Answer a few simple questions. Get your free Readiness Score — sent to your email or WhatsApp.
Check My Readiness →Take our free 3–5 minute industry assessment to find out your compliance risk level.
Take Free Assessment →Free Download
The Complete DPDPA Compliance Guide
Plain English. Everything your business needs to understand the DPDP Rules 2025 — written for founders, not lawyers. Now in 7 Indian languages.
Download the Guide →5 Ready-to-Use Templates
Start complying — not just reading
Privacy Notice, Consent Language, Data Inventory, DSR SOP, Vendor Register. Delivered free to your email.
2-min reads, plain English, every morning. Free forever.
