Intimation of a personal data breach
Notify each affected Data Principal without delay, in plain language, with the nature, extent and timing of the breach, the likely consequences, mitigation measures and contact details. Notify the Board without delay, and give a detailed report within 72 hours of becoming aware.
Notify each affected Data Principal without delay, in plain language, with the nature, extent and timing of the breach, the likely consequences, mitigation measures and contact details. Notify the Board without delay, and give a detailed report within 72 hours of becoming aware.
Evidence a regulator would accept
- Board initial and detailed notifications
- Data Principal notification content and dispatch log
- Impact assessment
How this product discharges it
Changing this recalculates the readiness score immediately.
- Current
- Compliant
- Residual risk
- Low
- Owner
- Priya Nair
- Last reviewed
- 25 Apr 2026
- Next review due
- 24 Jan 2027
Open gaps (0)
Gaps raised against this obligation. Closing one moves this clause forward.
Evidence (2)
Documents indexed against this obligation in the evidence vault.
History
- Clause status updated following remediationyesterday06 Aug 2026, 00:30Deepika Joshi
- Clause status updated following remediation4 days ago03 Aug 2026, 17:30Rohit Verma
- Clause status updated following remediation6 days ago01 Aug 2026, 10:30Naveen Kulkarni
- Clause status updated following remediation8 days ago30 Jul 2026, 06:30Vikram Saxena
- Clause status updated following remediation10 days ago28 Jul 2026, 00:30Imran Sethi
- Clause status updated following remediation13 days ago25 Jul 2026, 16:30System
- Position reviewed and recorded3 months ago25 Apr 2026, 11:55Priya Nair