72-Hour Breach Notification

Rule 9(1), DPDP Rules 2025

Under DPDP Rules 2025, Data Fiduciaries must notify the Data Protection Board of a personal data breach within 72 hours of becoming aware of it, unless a longer period is permitted.