If everyone is responsible, no one really is. Fix this today.

A patient shares their Aadhaar, phone number, and health reports at your hospital. Later, that information leaks. The police ask: who was in charge? Your team says 'everyone'. That answer will get your hospital in serious trouble. Under the new DPDPA law, hospitals must clearly decide who owns which information. No clear owner means no protection — and big fines.
Think of your hospital like a shop with many counters. The front desk collects patient names and Aadhaar. The lab holds test reports. The billing counter has payment slips. The admin team talks to vendors. Each counter must have one named person responsible. That person decides who can see the information. If a vendor asks for patient data, only one person can say yes or no. If a patient complains on WhatsApp, one person must reply and fix it. Without this split, your hospital breaks the law.
Write down one name for each type of patient information your hospital holds.
Tell your billing, registration, and lab teams what information only they can share.
Check if your business is ready. Takes 3 minutes. Visit saralprivacy.com/assessment
“A hospital cannot protect data with a job title called everyone.”
Free — takes 3 minutes
Answer a few simple questions. Get your free Readiness Score — sent to your email or WhatsApp.
Check My Readiness →Take our free 3–5 minute industry assessment to find out your compliance risk level.
Take Free Assessment →मुफ़्त डाउनलोड
संपूर्ण DPDPA अनुपालन गाइड
आसान भाषा में। DPDP Rules 2025 समझने के लिए आपके व्यवसाय को जो कुछ चाहिए — फ़ाउंडर्स के लिए लिखा गया, वकीलों के लिए नहीं। अब 7 भारतीय भाषाओं में।
गाइड डाउनलोड करें →5 तैयार टेम्पलेट
सिर्फ़ पढ़िए नहीं — अनुपालन शुरू कीजिए
प्राइवेसी नोटिस, सहमति की भाषा, डेटा इन्वेंटरी, DSR SOP, वेंडर रजिस्टर। आपके ईमेल पर, मुफ़्त।
2-min reads, plain English, every morning. Free forever.