Incident Response Plan

Rule 9, DPDP Rules 2025

Documented procedures for detecting, containing, investigating, and notifying personal data breaches within the 72-hour timeline prescribed under DPDP Rules 2025.