If a donor or volunteer asks about their data, do you have an answer ready?
Imagine a donor calls your NGO. She says her Aadhaar number was shared without her permission. You have no one to answer her. No process. No timeline. She tells ten other donors. Your reputation is gone in one week. This is happening to NGOs across India right now. The DPDPA law says every person whose information you hold has the right to ask questions — and you must answer them properly.
Your NGO holds a lot of sensitive information. Think about it — beneficiary Aadhaar cards, volunteer phone numbers, donor PAN details, staff salary slips, field survey photos. Any of these people can ask: why do you have my information? Who did you share it with? Can you delete it? If you have no answer ready, trust breaks fast. Set up a simple WhatsApp number or email just for these questions. Write down who handles it. Write down how many days you will take to reply.
Decide one person in your NGO to handle all information complaints.
Write a simple 3-step reply process for donor or volunteer questions.
Check if your business is ready. Takes 3 minutes. Visit saralprivacy.com/assessment
“In mission-led organisations, trust can be lost through process failure not intention.”
Free — takes 3 minutes
Answer a few simple questions. Get your free Readiness Score — sent to your email or WhatsApp.
Check My Readiness →Take our free 3–5 minute industry assessment to find out your compliance risk level.
Take Free Assessment →Free Download
The Complete DPDPA Compliance Guide
Plain English. Everything your business needs to understand the DPDP Rules 2025 — written for founders, not lawyers. Now in 7 Indian languages.
Download the Guide →5 Ready-to-Use Templates
Start complying — not just reading
Privacy Notice, Consent Language, Data Inventory, DSR SOP, Vendor Register. Delivered free to your email.
2-min reads, plain English, every morning. Free forever.
