4

Breach intimation

On becoming aware of a personal data breach, intimate the Board and each affected Data Principal, in the form and manner prescribed.

Section 8(6)DPDP Act, 2023Data FiduciaryUp to ₹200 Cr
What this requires

On becoming aware of a personal data breach, intimate the Board and each affected Data Principal, in the form and manner prescribed.

Up to ₹200 crore for failure to notify a personal data breach.

Evidence a regulator would accept

  • Board notification filings
  • Data Principal notification dispatch records
  • Incident timeline

How this product discharges it

breach (primary)
Our position

Changing this recalculates the readiness score immediately.

Current
Compliant
Residual risk
Low
Owner
Vikram Saxena
Last reviewed
24 Jun 2026
Next review due
16 Oct 2026

Open gaps (0)

Gaps raised against this obligation. Closing one moves this clause forward.

No gaps recorded against this clause.

Evidence (2)

Documents indexed against this obligation in the evidence vault.

History

  1. Clause status updated following remediationyesterday
    06 Aug 2026, 00:30Deepika Joshi
  2. Clause status updated following remediation4 days ago
    03 Aug 2026, 17:30Rohit Verma
  3. Clause status updated following remediation6 days ago
    01 Aug 2026, 10:30Naveen Kulkarni
  4. Clause status updated following remediation8 days ago
    30 Jul 2026, 06:30Vikram Saxena
  5. Clause status updated following remediation10 days ago
    28 Jul 2026, 00:30Imran Sethi
  6. Clause status updated following remediation13 days ago
    25 Jul 2026, 16:30System
  7. Position reviewed and recordedlast month
    24 Jun 2026, 11:55Vikram Saxena

Related obligations