Breach response
DPDP data breach reporting: what Rule 7 actually requires
Rule 7 of the DPDP Rules 2025 sets two clocks after a personal data breach: immediate intimation to affected individuals and to the Board, then detailed information to the Board within seventy two hours.