Every prescription order carries personal info — and the law is watching.
Think about this. When a customer orders medicine, you collect their name, phone number, address, and prescription photo. That is a lot of personal information sitting in your system. If you run a pharmacy — even a small one — this applies to you. Online orders, WhatsApp messages, delivery details — all of it is covered under India's new data protection law.
Say a customer sends their prescription on WhatsApp. You save their name, address, and medicine list. That information now sits on your phone or computer. If you use an app like PharmEasy or your own system, the data is stored there too. India's new law says you must protect all of this. You must tell customers what you collect. You must not share it without permission. A medicine order is not just a sale — it is a personal data event.
List every place you store customer medicine and order details.
Stop saving prescription photos on personal WhatsApp — use a safe system.
Check if your business is ready. Takes 3 minutes. Visit saralprivacy.com/assessment
“A medicine order is also a personal data event.”
Free — takes 3 minutes
Answer a few simple questions. Get your free Readiness Score — sent to your email or WhatsApp.
Check My Readiness →Take our free 3–5 minute industry assessment to find out your compliance risk level.
Take Free Assessment →Free Download
The Complete DPDPA Compliance Guide
Plain English. Everything your business needs to understand the DPDP Rules 2025 — written for founders, not lawyers. Now in 7 Indian languages.
Download the Guide →5 Ready-to-Use Templates
Start complying — not just reading
Privacy Notice, Consent Language, Data Inventory, DSR SOP, Vendor Register. Delivered free to your email.
2-min reads, plain English, every morning. Free forever.
