Erasure and breach
Personal Data Breach Response
Respond to a personal data breach in five recorded stages and meet the 72 hour reporting rule, shown through a software company.
A support team finds customer records exposed on a misconfigured server. The DPDP Act requires the organisation to inform the Data Protection Board and every affected person, and the DPDP Rules add a detailed report to the Board within 72 hours.
TrustOS runs the response in five stages: detected, assessed, notified, remediated and evidence. It records the incident and likely impact, identifies affected people, tracks communications and control updates, and retains the full evidence package. Penalties for failing to report a breach go up to 200 crore rupees.
Key points
- Who must be informed
- The 72 hour detailed report
- Five stage response
- Evidence package and penalties
Transcript
Your support team finds customer records exposed on a misconfigured server. The DPDP Act requires you to inform the Data Protection Board and every affected person. The Rules add a detailed report to the Board within 72 hours. TrustOS runs the response in five stages. Detected: the incident, affected data and likely impact are recorded. Assessed: affected people are identified. Notified: communications are prepared and tracked. Remediated: controls are updated. Evidence: the full package is retained. Penalties for failing to report a breach go up to 200 crore rupees.
See it with your data
Show us where your personal data lives. We will show you TrustOS running on it.
A 30 minute walkthrough on Google Meet with someone who knows the Act and the product. You leave with a view of your first phase, the owners and the effort.
Or get a rollout proposal in two minutes- Step 1A 30 minute demo on Google MeetWith someone who knows the Act and the product.
- Step 2Your systems and purposesWe walk one product's personal data through TrustOS.
- Step 3A first phase you can planModules, owners and effort, written down for you to keep.