Donors, volunteers, staff, beneficiaries — each one needs a different privacy notice.
Most NGO founders think privacy rules are only for big companies. But your NGO collects PAN numbers from donors, Aadhaar from beneficiaries, phone numbers from volunteers, and salary slips from staff. That is four different types of people. Each one needs a separate notice under the new DPDPA law. If you use one form for everyone, you may already be breaking the rules.
Say your NGO runs a school or a health camp. You collect a child's name and parent's Aadhaar at entry. You collect a donor's PAN for their tax receipt. You add a volunteer to your WhatsApp group. You store a staff member's salary slip on Google Drive. Each of these is a separate privacy point. You must tell each person what you are collecting and why. One common notice is not enough. You need four different notices.
List all four groups: donors, beneficiaries, volunteers, and staff.
Add a simple one-line privacy note to each form or WhatsApp message.
Check if your business is ready. Takes 3 minutes. Visit saralprivacy.com/assessment
“A donation form can carry as much privacy duty as a sales form.”
Free — takes 3 minutes
Answer a few simple questions. Get your free Readiness Score — sent to your email or WhatsApp.
Check My Readiness →Take our free 3–5 minute industry assessment to find out your compliance risk level.
Take Free Assessment →Free Download
The Complete DPDPA Compliance Guide
Plain English. Everything your business needs to understand the DPDP Rules 2025 — written for founders, not lawyers. Now in 7 Indian languages.
Download the Guide →5 Ready-to-Use Templates
Start complying — not just reading
Privacy Notice, Consent Language, Data Inventory, DSR SOP, Vendor Register. Delivered free to your email.
2-min reads, plain English, every morning. Free forever.
