Every field you ask for is your responsibility under DPDPA.
You made a Google Form or WhatsApp broadcast list. You asked for name, phone, email, maybe date of birth. Seemed harmless, right? But under the new DPDPA law, every field you collect is your responsibility. If you cannot explain WHY you need it, you should not be collecting it. This applies to your shop, your school, your small office — everyone.
Say you run a coaching class. Your admission form asks for Aadhaar number. Do you really need it? Probably not. Or your shop collects customer phone numbers for billing. Then you use that list for Diwali offers. That is not allowed without permission. Even your email tool or WhatsApp broadcast list counts. If an agency runs ads for you and collects leads, you are still responsible. Check every form. Ask: why is this field here?
Open every form you use and remove fields you cannot explain.
Add a simple YES checkbox before adding anyone to your broadcast list.
Check if your business is ready. Takes 3 minutes. Visit saralprivacy.com/assessment
“The form is where data discipline begins.”
Free — takes 3 minutes
Answer a few simple questions. Get your free Readiness Score — sent to your email or WhatsApp.
Check My Readiness →Take our free 3–5 minute industry assessment to find out your compliance risk level.
Take Free Assessment →मुफ़्त डाउनलोड
संपूर्ण DPDPA अनुपालन गाइड
आसान भाषा में। DPDP Rules 2025 समझने के लिए आपके व्यवसाय को जो कुछ चाहिए — फ़ाउंडर्स के लिए लिखा गया, वकीलों के लिए नहीं। अब 7 भारतीय भाषाओं में।
गाइड डाउनलोड करें →5 तैयार टेम्पलेट
सिर्फ़ पढ़िए नहीं — अनुपालन शुरू कीजिए
प्राइवेसी नोटिस, सहमति की भाषा, डेटा इन्वेंटरी, DSR SOP, वेंडर रजिस्टर। आपके ईमेल पर, मुफ़्त।
2-min reads, plain English, every morning. Free forever.
