Breach response
डेटा ब्रीच हो जाए तो क्या करें? DPDP नियम 7 और 2 समयसीमाएँ
डेटा ब्रीच के बाद भारत में 2 समयसीमाएँ हैं: CERT In को 6 घंटे, जो आज लागू है, और DPDP नियम 7, जो अभी लागू नहीं है। आधिकारिक हिंदी राजपत्र के पाठ के साथ।
Category
DPDP articles on breach response
4 articles on this site are filed here. Open any of them for the source documents behind their legal claims, with a claim type label on every source.
Breach response
A data breach just hit your organisation: the hour by hour response under DPDP
Rule 7 of the DPDP Rules 2025 is not in force, and when it commences 2 clocks start the moment your organisation becomes aware of a personal data breach. Computed commencement is 13 May 2027, interpretation until officially confirmed. Contain and anchor the clock, run the 2 Rule 7 duties in parallel, file the 72 hour Board submission, then stabilise.
Breach response
DPDP breach notification: 72 hours to the Board, 6 hours to CERT In
India runs 2 breach clocks and only 1 is in force today: CERT In, 6 hours. DPDP Rule 7 gives 72 hours for the detailed Board submission, and its computed commencement is 13 May 2027, interpretation until officially confirmed, after which one organisation can be on both. Who reports what, to whom, on which clock.
Breach response
DPDP data breach reporting: what Rule 7 actually requires
DPDP Rule 7, not in force yet, starts 2 clocks on awareness of a breach: intimation without delay, then detailed information to the Board within 72 hours. Computed commencement is 13 May 2027, interpretation until officially confirmed, and the intimation goes to each affected Data Principal and to the Board.
The provisions these articles point to
Each page carries the official text of the provision, its commencement status and the sources behind it.
Tools for this topic
Free, no login, and each one shows the provisions its answers rest on.