DPDP Act 2023 & Lost and Found — Private Return

The privacy problem with printed numbers

Write your mobile number on a sticker and anyone who sees the item — on a bus, in a lost-and-found box, in a school hallway — can capture and reuse it. Under the DPDP Act 2023, personal data should only be processed for a legitimate purpose and with meaningful notice. A public number fails that test the moment it is photographed.

How a QR tag keeps data end-to-end hidden

The QR code is not your number and does not contain it. It opens a neutral return page: the finder sends a masked call or message, the owner decides how to respond, and the number is never disclosed to the finder. No publication, no processing, no leak.

• Owner number is never rendered to the finder
• Finder shares only their own message content
• Society, school and retail administrators stay out of the number-sharing loop

What this means for organisations

Schools that print parent numbers on bags, RWAs that post owner numbers on parking lists, and retailers whose lost-and-found books expose customer contacts can all switch to a QR-based flow — helping them align with the Act’s purpose-limitation and minimisation principles without losing returns.

The privacy-first alternative still gets the item home

Privacy is not an excuse for losing items. With a QR tag, return rates improve because finders engage with a neutral, low-commitment action (tap, message, done) instead of dialling a stranger’s number.