DPDP 72-Hour Breach Notification Failure
Under DPDP Act Rule 7, personal data breaches must be reported to the Data Protection Board and affected individuals within 72 hours.
Overview
DPDP Act 2023 requires Data Fiduciaries to notify the Data Protection Board and affected Data Principals within 72 hours of a personal data breach.
Impact
Penalties up to 250 crore INR, loss of customer trust, regulatory action by Data Protection Board of India.
Remediation
Implement automated breach detection, create notification templates, establish IR procedures with 72-hour SLA.
Implement real-time breach detection systems
Create notification templates for DPB and affected individuals
Establish incident response SLA of under 72 hours
Conduct tabletop exercises for breach scenarios
Related SuperClue scanner checks
These scanner checks look for signs of DPDP 72-Hour Breach Notification Failure. What a scan can confirm from outside depends on your application.
Scan a domain you have verified with up to 350 modules, paid in credits.
See how website scanning works