Client calls, resumes, timesheets — all of these collect people's information.
You think your sales team collects the most information. But that is wrong. Your delivery team collects even more. Every client call, every resume, every timesheet — all of these hold people's information. If you run a consultancy or BPO, this law applies to you right now. You may already be breaking it without knowing.
Say you run a small BPO in Pune. Your team collects client phone numbers during onboarding. Your HR team receives resumes with Aadhaar copies. Your ops team tracks timesheets with employee names and salaries. Your support staff chats with customers on WhatsApp. Each of these steps collects people's information. The new law says you must tell people what you are collecting and why. If you do not, you can face a fine. Most small businesses miss these steps completely.
List every place your team collects people's information this week.
Add a simple notice to your resume form and client onboarding sheet.
Check if your business is ready. Takes 3 minutes. Visit saralprivacy.com/assessment
“Service delivery often hides more data collection than sales.”
Free — takes 3 minutes
Answer a few simple questions. Get your free Readiness Score — sent to your email or WhatsApp.
Check My Readiness →Take our free 3–5 minute industry assessment to find out your compliance risk level.
Take Free Assessment →Free Download
The Complete DPDPA Compliance Guide
Plain English. Everything your business needs to understand the DPDP Rules 2025 — written for founders, not lawyers. Now in 7 Indian languages.
Download the Guide →5 Ready-to-Use Templates
Start complying — not just reading
Privacy Notice, Consent Language, Data Inventory, DSR SOP, Vendor Register. Delivered free to your email.
2-min reads, plain English, every morning. Free forever.
