Free Runbook

The DPDP Breach Response Runbook

Almost every summary of the DPDP breach duty leads with 72 hours. That clock belongs to one communication -- the detailed submission to the Board. The intimation to each affected Data Principal is due without delay, a tighter standard attached to a larger penalty band, and a runbook built around 72 hours will be late on the communications that matter most. This runbook is written to be read before an incident, not during one.

• Three drafted intimations with worked example content: to affected Data Principals, the first intimation to the Board, and the 72-hour detailed submission
• An awareness-determination checklist, because both clocks run from becoming aware and that is a decision someone has to make and record
• A role card covering the eight jobs an incident needs filled, including the affected-population owner and the named contact
• The preparation that cannot be done during an incident -- data inventory, log retention, reachable channels and processor contracts