Your lead form already collects private info — here's what the law says.

A customer fills your insurance lead form. They give their name, phone number, age, and health details. You have not even sold them a policy yet. But you already have their private information. Under the new DPDP law, this counts. You must tell them why you are collecting it. You must get their permission. This applies to every insurance broker in India — big or small.
Think about your daily work. A customer messages you on WhatsApp asking about health insurance. You ask for their age, income, and medical history. That is private information. The law says you must tell them what you will do with it. Same when you fill their proposal form with Aadhaar and PAN details. Same when you share their file with the insurance company. Same at renewal time. Every step where you touch someone's information — you need to give them a clear notice.
Add a short notice to your lead form explaining why you collect data.
List every step where you collect customer info — form, WhatsApp, KYC, renewal.
Check if your business is ready. Takes 3 minutes. Visit saralprivacy.com/assessment
“The proposal stage is already a privacy stage.”
Free — takes 3 minutes
Answer a few simple questions. Get your free Readiness Score — sent to your email or WhatsApp.
Check My Readiness →Take our free 3–5 minute industry assessment to find out your compliance risk level.
Take Free Assessment →मुफ़्त डाउनलोड
संपूर्ण DPDPA अनुपालन गाइड
आसान भाषा में। DPDP Rules 2025 समझने के लिए आपके व्यवसाय को जो कुछ चाहिए — फ़ाउंडर्स के लिए लिखा गया, वकीलों के लिए नहीं। अब 7 भारतीय भाषाओं में।
गाइड डाउनलोड करें →5 तैयार टेम्पलेट
सिर्फ़ पढ़िए नहीं — अनुपालन शुरू कीजिए
प्राइवेसी नोटिस, सहमति की भाषा, डेटा इन्वेंटरी, DSR SOP, वेंडर रजिस्टर। आपके ईमेल पर, मुफ़्त।
2-min reads, plain English, every morning. Free forever.