4

Board Correspondence

SL-07

Everything exchanged with the Data Protection Board of India in connection with incidents — notifications filed, acknowledgements received, information called for, and show-cause proceedings. The same record is available in the DPO workspace.

DischargesS.8(6)R.7S.27R.22
Open in DPO workspace
Correspondence
6
Incident-related
4
Open
3
Show-cause
1
Notifications filed
1

6 records

DPBI/IR/2026/0881
Information called for regarding the object store exposure (INC-2026-0040)
The Board sought the full timeline, the classification of exposed data, and the remedial measures taken.
Information called forINC-2026-0040Responded 26 Jun 2026closed2 months ago
DPBI/ACK/2026/4471
Acknowledgement of breach notification — INC-2026-0038
Receipt of the detailed 72-hour report acknowledged; no further action indicated.
AcknowledgementINC-2026-0038No deadlineclosed3 months ago
DPBI/SC/2026/0142
Show-cause regarding delayed Data Principal notification (INC-2026-0034)
Notification to affected Data Principals was dispatched 61 hours after the department became aware. The Board sought an explanation.
Show causeINC-2026-0034Responded 23 Mar 2026closed5 months ago
CS/DPBI/2026/0219
Initial notification — INC-2026-0042 (bulk extraction, Family ID registry)
Draft initial notification prepared. Detailed report due within 72 hours of becoming aware.
Breach notificationINC-2026-0042--:--:--open2 hours ago
MEITY/CIR/2026/0033
Circular on verifiable consent mechanisms for children's data
Departments are directed to confirm the verification mechanism in use for children's data and report coverage.
Direction—--:--:--open22 days ago
DPBI/IR/2026/0902
Information called for on cross-border processing arrangements
Details sought of all personal data processed outside India, the recipients, and the safeguards applied.
Information called for—--:--:--open12 days ago
Evidences:S.8(6)R.7S.27S.28R.22Records must be retained for at least seven years from the end of the rate contract.