When Data Leaks: Breach Reporting and Incident Response in India

AI Governance, Risk & Compliance Track · Certified DPDP Incident Response Specialist

India's breach regime is more demanding than most teams realise. There is no materiality threshold: every personal data breach must be notified to the Data Protection Board and to every affected individual, with no "unlikely to result in high risk" exception of the kind GDPR provides. The clock starts on awareness, not on completion of investigation, and for organisations also subject to CERT-In Directions the first clock is six hours, not seventy-two. This course builds the operational capability to meet those clocks: a tested runbook, pre-drafted notification templates, a decision structure that works at 2am, and the discipline to distinguish awareness from certainty. It is taught primarily through simulation, because breach response is a skill, not knowledge.