If no one owns the complaint, the complaint owns you.

Imagine a job candidate calls your BPO. She says her resume and Aadhaar copy are still in your system. She wants them deleted. Your HR says talk to operations. Operations says talk to the client team. Client team says talk to HR. Nobody acts. Under the new DPDPA law, this loop is not allowed. Someone must own the answer. And they must reply fast.
Say a client's customer calls your BPO. She wants her phone number removed from your records. If your team does not know who handles this, the complaint sits in WhatsApp chats for weeks. That is a DPDPA violation. Same thing happens when a job applicant asks for his resume back. Or when an employee wants to see his salary slip data. Each of these needs a named person and a clear process. Not a group chat. Not a forwarded email.
Name one person in your team who owns all data complaints.
Write a simple one-page flow: complaint comes in, who handles it, by when.
Check if your business is ready. Takes 3 minutes. Visit saralprivacy.com/assessment
“A response channel is only useful if teams know whose job it is.”
Free — takes 3 minutes
Answer a few simple questions. Get your free Readiness Score — sent to your email or WhatsApp.
Check My Readiness →Take our free 3–5 minute industry assessment to find out your compliance risk level.
Take Free Assessment →Free Download
The Complete DPDPA Compliance Guide
Plain English. Everything your business needs to understand the DPDP Rules 2025 — written for founders, not lawyers. Now in 7 Indian languages.
Download the Guide →5 Ready-to-Use Templates
Start complying — not just reading
Privacy Notice, Consent Language, Data Inventory, DSR SOP, Vendor Register. Delivered free to your email.
2-min reads, plain English, every morning. Free forever.