Skip to content
checkDPDP

Guide

The 72-hour breach report — a template for Indian Data Fiduciaries

Under the Rules, a detailed breach report to the Data Protection Board has to land within 72 hours. Here is a template, and the playbook for getting it filed without panicking.

12 Mar 2026 · 7 min read

Breach response is the highest-stakes test of your DPDP programme. Most teams will live or die by how quickly they can move from "we have an incident" to "we have notified the Board".

This template lists the fields the Board expects, with sample copy you can adapt. Combine it with a parallel template for the Data Principal notice and an incident commander rota.

Note. Guidance, not legal advice. For specific compliance decisions, please consult a qualified data-protection lawyer.

← All posts