A data breach happened. You have 72 hours to notify the Data Protection Board of India. Generate your notification letters in 3 minutes.
When must a data breach be notified under the DPDP Act? Under the Digital Personal Data Protection Act 2023, a Data Fiduciary must notify the Data Protection Board of India of a personal data breach 'as soon as possible' — anticipated to mean within 72 hours in the draft rules. The notification must include the nature of the breach, the categories and approximate number of data principals affected, likely consequences, and measures taken or proposed. Affected data principals must also be notified where the breach is likely to result in high risk to their rights.
Review each letter below. Fill in the blank fields (name, designation, contact) before sending. These are legally structured templates — verify with your legal counsel before submission.
These templates are provided for guidance only and do not constitute legal advice. Please review with your legal counsel before submission to the DPBI.
Our DPDP specialists can help you navigate the breach response process — from DPBI submission to individual communications and post-breach remediation.
One real DPDP development explained in plain English, one practical how-to, one number from our own assessment data. Nothing else — no daily noise, no sales pitch.
No spam. Unsubscribe with one click, anytime.
