Drafting guide and model procedure for personal data breach notification, keeping the Data Principal and Board streams separate: reporting, triage, containment, breach determination, intimation to each affected person, initial and 72 hour detailed Board submissions, processors and closure.
- Prepared by
- Shubhank Suman
- Jurisdiction
- India · DPDPA 2023 & DPDP Rules 2025
- Legal basis
- Section 2(u) · Section 8(6) · Rule 7(1), 7(2)(a) & 7(2)(b) · Rule 6(1)(c) & 6(1)(e)
- Format
- PDF · 15 pages
This is a drafting guide for general guidance only and not legal advice. Adapt it to your organisation before use.