Every lead form and landing page is now a compliance moment.
Imagine you run a marketing agency. You create a landing page for a client. Someone fills in their name and phone number. That is personal information. Under the new DPDPA law, you must tell that person why you are collecting it. Most agencies skip this step. If you collect leads for clients — this applies to you today.
Say your agency runs a Google ad for a coaching class. Someone clicks the ad. They land on a form asking for their name, phone, and city. That form must now show a clear notice. It must say what the information is for. It must say who will use it. If you then upload those leads to your client's CRM, that upload is also covered. Even event registration forms at trade fairs count. Every step where you touch someone's information needs a clear reason.
Add a simple notice to every lead form and landing page you run.
Check all WhatsApp campaign lists — confirm you have permission from each contact.
Check if your business is ready. Takes 3 minutes. Visit saralprivacy.com/assessment
“The landing page is often the first compliance moment in the campaign.”
Free — takes 3 minutes
Answer a few simple questions. Get your free Readiness Score — sent to your email or WhatsApp.
Check My Readiness →Take our free 3–5 minute industry assessment to find out your compliance risk level.
Take Free Assessment →Free Download
The Complete DPDPA Compliance Guide
Plain English. Everything your business needs to understand the DPDP Rules 2025 — written for founders, not lawyers. Now in 7 Indian languages.
Download the Guide →5 Ready-to-Use Templates
Start complying — not just reading
Privacy Notice, Consent Language, Data Inventory, DSR SOP, Vendor Register. Delivered free to your email.
2-min reads, plain English, every morning. Free forever.
