Your vendor might be handling customer info — and you don't even know it.

Your CA has your GST files. Your HR software has salary slips. Your courier partner has customer phone numbers. These are all vendors. If any one of them misuses that information, the law can still come to YOU. Under the new DPDPA law, you are responsible for what your vendors do with people's information. Most small business owners do not even have a list of their vendors. That is a big problem.
Think about your daily work. Your accountant has PAN card and Aadhaar details. Your WhatsApp bulk message service has customer phone numbers. Your background check company has employee resumes. All of these people touch your customers' or workers' information. The DPDPA law says you must check each vendor. You must ask: what information do they have? Do they really need it? Is it safe with them? If you cannot answer these questions, you are not ready.
Write a list of all vendors who handle customer or staff information.
For each vendor, write what information they hold and why they need it.
Check if your business is ready. Takes 3 minutes. Visit saralprivacy.com/assessment
“Vendors are part of your system not outside it.”
Free — takes 3 minutes
Answer a few simple questions. Get your free Readiness Score — sent to your email or WhatsApp.
Check My Readiness →Take our free 3–5 minute industry assessment to find out your compliance risk level.
Take Free Assessment →मुफ़्त डाउनलोड
संपूर्ण DPDPA अनुपालन गाइड
आसान भाषा में। DPDP Rules 2025 समझने के लिए आपके व्यवसाय को जो कुछ चाहिए — फ़ाउंडर्स के लिए लिखा गया, वकीलों के लिए नहीं। अब 7 भारतीय भाषाओं में।
गाइड डाउनलोड करें →5 तैयार टेम्पलेट
सिर्फ़ पढ़िए नहीं — अनुपालन शुरू कीजिए
प्राइवेसी नोटिस, सहमति की भाषा, डेटा इन्वेंटरी, DSR SOP, वेंडर रजिस्टर। आपके ईमेल पर, मुफ़्त।
2-min reads, plain English, every morning. Free forever.