If a donor or volunteer asks about their data, do you have an answer ready?

Imagine a donor calls your NGO. She says her Aadhaar number was shared without her permission. You have no one to answer her. No process. No timeline. She tells ten other donors. Your reputation is gone in one week. This is happening to NGOs across India right now. The DPDPA law says every person whose information you hold has the right to ask questions — and you must answer them properly.
Your NGO holds a lot of sensitive information. Think about it — beneficiary Aadhaar cards, volunteer phone numbers, donor PAN details, staff salary slips, field survey photos. Any of these people can ask: why do you have my information? Who did you share it with? Can you delete it? If you have no answer ready, trust breaks fast. Set up a simple WhatsApp number or email just for these questions. Write down who handles it. Write down how many days you will take to reply.
Decide one person in your NGO to handle all information complaints.
Write a simple 3-step reply process for donor or volunteer questions.
Check if your business is ready. Takes 3 minutes. Visit saralprivacy.com/assessment
“In mission-led organisations, trust can be lost through process failure not intention.”
Free — takes 3 minutes
Answer a few simple questions. Get your free Readiness Score — sent to your email or WhatsApp.
Check My Readiness →Take our free 3–5 minute industry assessment to find out your compliance risk level.
Take Free Assessment →मुफ़्त डाउनलोड
संपूर्ण DPDPA अनुपालन गाइड
आसान भाषा में। DPDP Rules 2025 समझने के लिए आपके व्यवसाय को जो कुछ चाहिए — फ़ाउंडर्स के लिए लिखा गया, वकीलों के लिए नहीं। अब 7 भारतीय भाषाओं में।
गाइड डाउनलोड करें →5 तैयार टेम्पलेट
सिर्फ़ पढ़िए नहीं — अनुपालन शुरू कीजिए
प्राइवेसी नोटिस, सहमति की भाषा, डेटा इन्वेंटरी, DSR SOP, वेंडर रजिस्टर। आपके ईमेल पर, मुफ़्त।
2-min reads, plain English, every morning. Free forever.