Businesses & Professionals
Collecting Data Compliantly
How to collect personal data the compliant way under India's Digital Personal Data Protection Act — consent and notice at the point of capture, only the data you need, and a record you can stand behind. Practical guides for the forms, documents and KYC your business handles every day.
How to collect personal data compliantly under DPDPCollecting customer data under India's DPDP Act comes down to a repeatable recipe: notice at capture, valid consent, collect only what you need, secure it, and set retention. A practical guide.Is Google Forms DPDP-compliant for collecting customer data?Google Forms is a form tool, not a compliance solution. Under India's DPDP Act the duties are yours — notice, consent, proof. Where Forms falls short, and how to close the gap.Is WhatsApp Business DPDP-compliant for collecting customer data?WhatsApp Business is a channel, not a compliance layer. Under India's DPDP Act, consent, notice and proof stay your job. Where WhatsApp falls short for customer data, explained.How to collect customer documents and KYC with valid consentCollecting documents or KYC from customers? Under India's DPDP Act you need notice, specific consent, minimisation, and a secure channel. A step-by-step guide that holds up.Consent-at-capture: getting consent at the point of collectionUnder India's DPDP Act, consent belongs at the moment you collect data — not buried in a policy. What consent-at-capture means, why it matters, and how to build it in.What makes a data-collection form DPDP-compliant? A checklistA data-collection form needs more than fields under India's DPDP Act — notice, purpose-split consent, minimisation, security and a consent record. A practical checklist.Is a Google Drive or Dropbox upload link DPDP-compliant for collecting documents?A shared Drive or Dropbox upload link is convenient — but under India's DPDP Act it leaves notice, consent and control gaps for document collection. Where it falls short, explained."Just email it to me" — why email document collection breaks DPDP, and what to do"Just email me your Aadhaar and PAN" is the most common intake habit — and one of the weakest under India's DPDP Act. Why email breaks the rules, and what to do instead.Collecting Aadhaar, PAN and KYC from customers: what you can ask for and howCan you ask customers for Aadhaar and PAN? Under India's DPDP Act — only what the purpose needs, masked where possible, with notice and consent. What you can collect, and how.Collecting a customer's name, phone or email: what DPDP actually requiresEven a name and phone number are personal data under India's DPDP Act. What you actually need to collect basic contact details — and when you don't need a consent box.