Why Sharing Your Mobile Number at Stores Could Be Illegal Now: Everything You Need to Know About India’s New Data Protection Law

—

by

Himanshu
in

The way businesses in India collect and use your personal data is changing forever. With the implementation of the Digital Personal Data Protection (DPDP) Act, one of the most talked-about changes is regarding your mobile number. For years, retail outlets, supermarkets, and even small shops have routinely asked customers to provide their phone numbers at billing counters. But now, this common practice is under the scanner and may actually be illegal if done without proper safeguards.

In this detailed guide, let’s break down what the new law says, how it impacts you as a consumer, what businesses must change, and why the debate around privacy is bigger than just giving out your number at a store.

Why Mobile Numbers at Billing Counters Are a Problem

Until now, it was normal for cashiers to ask for your mobile number, sometimes even loud enough for everyone around to hear. This was mostly done for:

  • Linking loyalty points
  • Sending digital invoices
  • Tracking consumer purchases
  • Pushing promotional SMS campaigns

However, your phone number is a personal data identifier, and under the new law, businesses cannot collect or use it without your explicit, informed, and unambiguous consent.

Key Highlights of the Digital Personal Data Protection Law

ProvisionWhat It Means for ConsumersWhat It Means for Businesses
Explicit ConsentYour data cannot be taken without clear approval.Must ask permission and explain the purpose.
No Forced SharingYou can refuse to give your mobile number.Cannot deny service if you refuse (unless essential).
Privacy ProtectionNo more announcing your phone number in public.Must provide private and secure methods of data entry.
Right to WithdrawYou can withdraw your consent anytime.Must delete the number if the customer asks.
Heavy PenaltiesYou are protected by law with fines up to ₹250 crore on violators.Non-compliance can lead to massive penalties.

What Happens If You Refuse to Share Your Number?

Under the new framework, you as a customer have the right to refuse giving your number at the billing counter. Retailers can no longer make it mandatory to proceed with your purchase unless the mobile number is absolutely required for the service, such as delivery or telecom services.

For example:

  • Allowed: A courier service needs your number to confirm delivery.
  • Not Allowed: A clothing store forces you to provide your number just to generate a bill.

Why Public Verbal Disclosure Is Risky

Think about the number of times you had to say your phone number aloud in a crowded store. Not only could the cashier hear it, but also the people standing in line behind you. This may expose you to risks like:

  • Spam calls and SMS campaigns
  • Misuse of your personal number
  • Identity theft or fraud attempts

The DPDP Act makes it clear that businesses must take reasonable safeguards to ensure your personal data is not publicly exposed.

How Shops and Retailers Must Adapt

Businesses need to redesign their processes to stay compliant. Here’s how:

  1. Digital Keypad Entry – Instead of saying the number aloud, customers may be asked to type it on a screen or POS machine.
  2. Optional Data Sharing – Numbers should only be requested when necessary, and refusal must not block the service.
  3. Clear Notice – Shops must explain why they are collecting the number, how long it will be stored, and how it will be used.
  4. Data Deletion on Request – Customers can demand deletion, and businesses must comply.
  5. Privacy Training – Staff must be educated to handle customer data responsibly.

The Bigger Picture: Your Privacy Comes First

The new law is not just about mobile numbers—it’s about giving power back to individuals over their personal data. For years, customers in India have had little control over how their data is collected, stored, or sold. With the DPDP Act in force, the balance is shifting in favor of transparency, accountability, and consumer rights.

This also marks India’s entry into the global club of nations with strong privacy laws, following models like Europe’s GDPR.

What Consumers Should Do Now

Here are a few simple steps you can take as a responsible consumer:

  • Politely refuse to share your mobile number if it isn’t required.
  • Ask businesses why they are collecting your number.
  • If forced, remind them that the DPDP Act protects your rights.
  • Be careful about giving numbers in public places where others can overhear.
  • Exercise your right to withdraw consent if you no longer want your number in their records.

Conclusion

The Digital Personal Data Protection Act has introduced a new era of data privacy in India. While businesses will need time to adapt, as a consumer, you already have the right to refuse unfair demands for your personal details. What was once a casual act—sharing your number at billing counters—can now be a matter of legality and compliance.

This is a landmark moment for digital rights in India, reminding us that our data is our property, and businesses must respect it.

Disclaimer

This article is for informational purposes only and should not be considered legal advice. For specific cases or compliance requirements, please consult a qualified legal professional.