Most owners don't start because they don't know where to start.
Don't know where to start? Read this.
Most small business owners say the same thing. "I know I need to do something. But I don't know what to do first." That feeling stops everything. Today we give you a simple plan for your first month. It covers five things. Each one is easy to do. You don't need a lawyer. You just need one hour a week.
5 steps for your first month of DPDPA readiness
1Week 1: Write down all the information your business collects. Phone numbers, Aadhaar, PAN, resumes — list everything.
2Week 2: Check who in your team can see customer or staff information. Remove access if not needed.
3Week 3: Make a list of all vendors who handle people's information. Your CA, courier partner, software app — all of them.
4Week 4: Update your consent notice and check how long you keep old data. Delete what you no longer need.
What does this mean for YOUR business?
Say you run a small school. In Week 1, you list student Aadhaar cards, parent phone numbers, and fee receipts. In Week 2, you check that only the principal and accountant can see this. In Week 3, you note down your SMS vendor and fee software company. In Week 4, you update your admission form to ask permission before using parent WhatsApp numbers. That's it. Four weeks. Five steps. Your business is already ahead of most.
Who Is Affected
3 things you can do this week
1
Write down every type of information your business collects today.
2
List all vendors and apps that touch your customers' or staff's information.
3
Check if your business is ready. Takes 3 minutes. Visit saralprivacy.com/assessment
“Examples reduce hesitation faster than advice.”
Free — takes 3 minutes
Is YOUR business ready for DPDPA?
Answer a few simple questions. Get your free Readiness Score — sent to your email or WhatsApp.
Disclaimer: This briefing is for educational purposes only and does not constitute formal legal advice. Consult a qualified data protection lawyer for formal legal opinions specific to your business.
