Article series
Breach under the DPDP Act
3 longer pieces, best read in order.
Part 1 · 18 min
Meeting the reasonable security safeguards
Rule 6 of the DPDP Rules sets out what reasonable security safeguards means. Each measure has a practical form in an ordinary Indian company's systems and vendor contracts.
Learn morePart 2 · 18 min
Discovering a personal data breach
You can only report what you can see. Detection rests on what the DPDP Act counts as a breach, the logs Rule 6 asks for and how those logs are monitored, and the moment of awareness needs a timestamp.
Learn morePart 3 · 18 min
Reporting to the Board and your users
After a personal data breach you owe two sets of notices: one to the people affected and two to the Data Protection Board. Each has required contents, and the work has to fit inside the 72 hour window.
Learn moreSee it with your data
Show us where your personal data lives. We will show you TrustOS running on it.
A 30 minute walkthrough on Google Meet with someone who knows the Act and the product. You leave with a view of your first phase, the owners and the effort.
Or get a rollout proposal in two minutes- Step 1A 30 minute demo on Google MeetWith someone who knows the Act and the product.
- Step 2Your systems and purposesWe walk one product's personal data through TrustOS.
- Step 3A first phase you can planModules, owners and effort, written down for you to keep.