Complied AIComplied AI
Compliance calendar
e-GazetteExchanges and other

DPDP personal data breach notification

A Data Fiduciary notifies affected Data Principals and the Data Protection Board after a personal data breach.

How this is timed

Standing duty, no filing date

Regulator
e-Gazette
Category
Exchanges and other
Form
Not specified
Last verified
2026-09-01
Read statutory basis

This duty starts on 13 May 2027. Notify each affected Data Principal and give the Board an initial description without delay. Give the Board the detailed report within 72 hours, unless the Board extends that period on a written request.

What changed

Rule 4 starts on 2026-11-13 only for Consent Managers. The breach duties in section 8(6) and rule 7 start on 2027-05-13.

Deadlines counted from an event

These have no calendar date. The clock starts when the event happens.

Standing duty

Notify affected Data Principals and give the Board the initial description without delay.

Applies when: A personal data breach occurs on or after 13 May 2027.

72 hoursfrom becoming aware of the personal data breach

Give the detailed report to the Board within 72 hours, unless the Board grants more time on written request.

Applies when: A personal data breach occurs on or after 13 May 2027.

The rule

Stated as the law states it, so you can work out any period yourself.

Initial notices without delay

Notify affected Data Principals and give the Board the initial description without delay.

Applies when: A personal data breach occurs on or after 13 May 2027.

Detailed report to the Board within 72 hours

Give the detailed report to the Board within 72 hours, unless the Board grants more time on written request.

Applies when: A personal data breach occurs on or after 13 May 2027.

Who must comply

  • A listed company acting as a Data Fiduciary that suffers a personal data breach

Statutory basis

Read the provision here where we hold it, or on the regulator's site.

Recent changes affecting this

From the regulator's own circulars and notifications.

Last verified 2026-09-01. Confirm against the official source before you rely on it.