Mandatory breach response timeline under Rule 9 of DPDP Rules 2025, from detection through Board notification and Data Principal communication.
Unauthorised access, disclosure, or loss of personal data identified.