What is the DPDP breach notification timeline?
The Act requires notifying the Data Protection Board and affected data principals of a personal data breach; draft Rules prescribe timelines—treat notification as urgent once a breach is confirmed.
Section 8 and the 2025 Rules framework expect prompt assessment, containment, and notification without undue delay.
Maintain an incident runbook, forensic logging, and templates before an event occurs.