DPDP ACT ENFORCEMENT — COUNTDOWN ACTIVE

Your breach notification
process will be tested.
Is it ready?

A personal data breach now triggers three simultaneous regulatory clocks — CERT-In, DAKSH, and the Data Protection Board. Most Indian enterprises have no workflow for any of them. We change that in 90 minutes.

DPDP ACT — FULL ENFORCEMENT BEGINS
--Days
--Hours
--Mins
--Secs
May 13, 2027 — full enforcement begins.
A breach notification failure after this date attracts ₹200 CRORE PER VIOLATION
6 hrs
CERT-In + DAKSH deadline — simultaneous, not sequential
72 hrs
Data Protection Board notification window from detection
₹200 Cr
Maximum penalty per violation under DPDP Act 2023
3 portals
Three regulators. Three formats. One 90-minute workshop.

The gap most organisations discover too late

Knowing a compliance obligation exists is not the same as being able to execute it under pressure at 2am with the regulatory clock already running.

Three clocks. Three portals. No workflow.

CERT-In and DAKSH both require filing within 6 hours of detection — simultaneously, not one after the other. The DPB requires notification within 72 hours. Most compliance teams have never filed on any of them.

Templates that do not exist when you need them

When a breach occurs there is no time to draft submissions from scratch. You need pre-built, pre-approved documents that your team can activate immediately — before the clock starts, not after.

Deciding not to notify is also a legal act

A decision that an incident does not require notification must be documented with the same rigour as a decision to notify. The absence of that record is itself a compliance failure.

CERT-IN DIRECTIONS 2022
6 hours
File at incidents.cert-in.org.in within 6 hours of detection. In force today. Penalties under IT Act Section 70B.
RBI CTRRA DIRECTIONS 2026
6 hours
File on DAKSH at daksh.rbi.org.in. Effective July 31, 2026. Applies to all banks, NBFCs, and payment aggregators — immediately.
DPDP ACT 2023 — SECTION 8(6)
72 hours
Notify the Data Protection Board and then each affected Data Principal individually. A generic website announcement is not sufficient.

What you receive after the workshop

Six regulatory-grade documents delivered within 24 hours of your session. Pre-populated for your organisation. Ready to activate the moment an incident occurs.

D1

Breach Response Quick Reference Wall Card

Six-step laminated card for your compliance room. Portal URLs, incident commander contacts, countdown reminders. Activated the moment a breach is suspected.

Print
Laminate
Mount
D2

CERT-In Breach Notification Report

Pre-populated template aligned to CERT-In Directions 2022. All mandatory fields. Incident timeline. Certification declaration. File-ready within your 6-hour window.

6-Hour
Window
D3

DAKSH Incident Report — RBI CTRRA 2026

RBI taxonomy-aligned submission package for the DAKSH portal. Effective immediately under the July 31 Directions. For banks, NBFCs, and payment aggregators.

6-Hour
Window
D4

DPDP Act DPB Notification Template

Data Protection Board notification under Section 8(6) of the DPDP Act 2023. Plain language as required. Includes the individual Data Principal notification letter.

72-Hour
Window
D5

Personalised Gap Register and Remediation Roadmap

Your top five breach notification readiness gaps ranked by regulatory risk severity. Each with a specific remediation action, named owner, and timeline. Delivered within 24 hours.

Board
Ready
D6

Breach Notification Policy — ISO 27001:2022 Annex A 5.24

Board-approved policy governing your organisation's breach response. Direct ISO 27001 certification audit artefact. Dedicated Significant Data Fiduciary section.

ISO 27001
Audit

The 90-minute workshop

Delivered live over Google Meet by a CISM-certified, LLB-qualified practitioner with 15 years of enterprise security experience across India's largest IT services firms.

  • A simulated breach scenario specific to your industry sector and data profile
  • Structured facilitation through the intake questions that populate all six regulatory documents
  • Live threshold assessment — do you need to notify CERT-In, DAKSH, and the DPB for this incident?
  • Review of all three draft regulatory submissions before the session closes
  • Identification and ranking of your top five readiness gaps with specific remediation actions
  • All six deliverables in your inbox within 24 hours of the session

Available as an individual session, a Significant Data Fiduciary enhanced session, or a cohort format for 8–12 organisations from the same sector. Full payment is required before the session date is confirmed. Contact us to discuss format and availability.

Book a workshop

Complete this form. We will respond within 24 hours.

Full payment is required before the session date is confirmed. A payment link and GST invoice will be sent to your email within 24 hours. Your details are not shared with any third party.

✓ Received. You will hear from us within 24 hours with a payment link and session confirmation.

DPDP ACT ENFORCEMENT — MAY 2027

Do not let the first time your team runs this workflow be during an actual breach.

90 minutes. Six regulatory documents. The readiness your team needs before the clock starts.

👤
Debashis
Founder, breachnotify.in
Senior Security Architect
  • CISM — Certified Information Security Manager
  • MSc Cybersecurity
  • LLB with Cyber Law Diploma
  • AWS Solutions Architect Associate
  • Microsoft Azure Certified
  • 15+ years enterprise security
  • Wipro · Genpact · HCL · Sonata
  • Bhubaneswar, Odisha

The practitioner behind breachnotify

I built breachnotify.in because I watched too many Indian enterprises discover their breach notification gap at the worst possible moment — when an incident was already in progress and the regulatory clocks were already running.

After 15 years as a Senior Security Architect across Wipro, Genpact, HCL, and Sonata Software, I have seen how the gap between knowing a compliance obligation exists and being able to execute it under pressure is the most dangerous gap in any organisation's security posture.

The DPDP Act 2023, RBI CTRRA Directions 2026, and the CERT-In Directions 2022 together create a three-framework breach notification obligation that most Indian compliance teams have never operationalised. My LLB and Cyber Law Diploma give me the legal depth to build regulatory templates that will withstand scrutiny. My 15 years of enterprise security give me the operational depth to make those templates work at 2am.

breachnotify.in is India's dedicated breach notification intelligence platform — built specifically for DPDP Act, CERT-In, and RBI CTRRA simultaneous compliance.

Areas of expertise

DPDP Act 2023 — Section 8 breach notification obligations
CERT-In Directions 2022 — incident reporting and compliance
RBI CTRRA 2026 — DAKSH portal and NBFC obligations
ISO 27001:2022 — Annex A 5.24 incident management
Zero Trust architecture and multi-cloud security
Enterprise GRC and regulatory compliance advisory
Security presales and solution architecture
Significant Data Fiduciary compliance frameworks

Speaking and industry engagement

Available for NASSCOM events, DSCI roundtables, CII cybersecurity summits, industry association workshops, and corporate in-house training on DPDP Act breach notification obligations. Contact via the form below to discuss speaking or facilitation engagements.


Volunteer with breachnotify

Are you a cybersecurity practitioner, lawyer, or compliance professional who wants to contribute to India's breach notification readiness ecosystem? We are building a network of surge response partners and regulatory advisory associates.

✓ Thank you. We will be in touch within five working days.

Events and Webinars

Live workshops, online sessions, and recorded webinars on DPDP Act, CERT-In, and RBI CTRRA 2026 compliance.

📅

Events will appear here

Upcoming workshops and webinars will be listed on this page. Once your first event is scheduled, add it here using the steps below. Visitors register with their name, email, and mobile — you forward the Google Meet link to them directly.

How to add an event — Hostinger File Manager

  1. Log in to Hostinger. Go to Hosting → Manage → File Manager for breachnotify.in.
  2. Open public_html/index.html and click Edit.
  3. Find the comment <!-- ADD EVENTS HERE --> inside the Events page section.
  4. Copy one of the event card templates below and paste it at that comment. Replace the date, title, description, time, and type fields with your event details.
  5. For paid events set the type badge to PAID — contact for pricing. Never show a price on the page.
  6. For recorded webinars copy the video card template and paste it in the recorded section. Add your YouTube embed URL.
  7. Click Save. The event appears on your site immediately.
Registration flow: When someone registers through the form, you receive an email with their name, organisation, email, and WhatsApp number. Forward the Google Meet link to their email and send the same link via WhatsApp to their mobile number at least 24 hours before the session. For paid events, send the payment link first — confirm registration only after payment clears.

Register interest for upcoming sessions

Leave your details and we will notify you when the next event is scheduled — by email and WhatsApp.

Your details will be used only to notify you of upcoming events and forward session links. We do not share your details with any third party.

✓ Registered. We will notify you by email and WhatsApp when the next session is scheduled.

Breach Notification Intelligence

Analysis, regulatory updates, and practical guidance on DPDP Act, CERT-In, and RBI CTRRA 2026 compliance for Indian enterprises.

✍️

Articles will appear here

Your breach notification intelligence articles will be published on this page. Add your first article using the Hostinger File Manager steps below. Each article is a card on this page linking to its full content.

How to publish an article — Hostinger File Manager

  1. Write your article in any text editor. Keep it focused — one regulatory topic per article, 600–1,200 words is the ideal length for your audience.
  2. Log in to Hostinger. Go to Hosting → Manage → File Manager for breachnotify.in.
  3. In public_html, create a new folder called articles if it does not exist.
  4. Inside articles, create a new HTML file — for example rbi-ctrra-2026-daksh-guide.html. Use short, descriptive, hyphenated names — these become your URLs and affect Google ranking.
  5. Paste the article HTML template (see below) into that file, replacing the title, date, tag, and body with your content. Save it.
  6. Back in public_html/index.html, find the comment <!-- ADD BLOG CARDS HERE --> in the Blog page section.
  7. Copy an article card template, fill in the title, tag, date, and excerpt, and set the link to articles/your-article-filename.html. Save.
  8. The article card appears on the blog page immediately and links to the full article.
SEO tips for breachnotify.in: Every article should include the words "DPDP Act," "breach notification," "CERT-In," and "India" naturally in the first paragraph. Your target readers are CISOs and compliance heads searching for these exact terms. Post at least one article before your first workshop — it establishes credibility before the prospect checks the site. LinkedIn post first, article page second — copy the article to your LinkedIn newsletter the same day you publish it on the site.

Privacy Policy

Effective: October 2026 · Applies to breachnotify.in

1. Who We Are

breachnotify.in is India's breach notification intelligence platform operated by BreachNotify Technologies Private Limited (CIN: [UPDATE POST INCORPORATION]), registered in India. This Privacy Policy describes how we collect, use, and protect personal data provided through our website.

We are a Data Fiduciary under the Digital Personal Data Protection Act 2023 in respect of personal data you provide to us through this website.

2. What Data We Collect

We collect only the personal data you voluntarily provide through our forms:

  • Name, designation, organisation name, and industry sector — from workshop booking and event registration forms
  • Email address and mobile number — for confirming bookings, sending event session links, and follow-up communications
  • Notes you provide in booking forms regarding your compliance context
  • Name and contact details — from the volunteer expression of interest form

We do not collect payment card details directly. Payments are processed through Razorpay under Razorpay's own privacy policy. We do not use tracking cookies, third-party analytics, or behavioural tracking on this website.

3. How We Use Your Data

  • To confirm workshop bookings and send payment links
  • To send event session links via email and WhatsApp before registered events
  • To follow up on workshop booking enquiries
  • To notify you of upcoming events if you have registered interest
  • To process volunteer expressions of interest

We do not sell, rent, or share your personal data with any third party except as required by applicable Indian law.

4. Your Rights Under the DPDP Act 2023

As a Data Principal under the Digital Personal Data Protection Act 2023, you have the right to access your data, correct inaccurate data, request erasure, withdraw consent, and raise a grievance with the Data Protection Board of India. To exercise any of these rights, contact: privacy@breachnotify.in. We will respond within 72 hours.

5. Data Retention

Workshop booking data is retained for three years for GST compliance purposes. Event registration data is retained for 12 months. You may request deletion at any time subject to our legal retention obligations.

6. Security

This website is delivered over HTTPS. All form submissions are transmitted securely. We do not store your personal data in unsecured formats.

7. Contact

For privacy queries: privacy@breachnotify.in · Bhubaneswar, Odisha, India.

Terms of Use

Effective: October 2026 · Governing law: Bhubaneswar courts, India

1. Acceptance

By accessing breachnotify.in you accept these Terms. If you do not accept them, do not use this website.

2. Advisory Nature — Not Legal Advice

All content on this website and all workshop deliverables are advisory materials aligned to applicable Indian regulatory frameworks. They do not constitute legal advice. All regulatory filing documents must be reviewed by qualified legal counsel before submission to any regulator.

3. Payment Terms

Workshop fees are payable in full before the session date is confirmed. Fees are exclusive of GST unless stated otherwise. GST is charged at the prevailing rate and shown on your tax invoice. See our Refund Policy for cancellation terms.

4. Intellectual Property

All templates, frameworks, and documents delivered by breachnotify.in are the intellectual property of BreachNotify Technologies Private Limited, licensed to the purchasing organisation for internal use only. Resale, redistribution, or white-labelling without written permission is prohibited.

5. Limitation of Liability

Our total liability arising from any workshop engagement is limited to the fee paid for that engagement. We are not liable for any regulatory penalties, third-party claims, or consequential losses arising from the use or non-use of our deliverables.

6. Governing Law

These Terms are governed by the laws of India. All disputes are subject to the exclusive jurisdiction of the courts at Bhubaneswar, Odisha.

Refund Policy

Effective: October 2026

Standard Policy

Workshop fees are payable in full before the session date is confirmed. Because significant preparation time is invested before each workshop, fees are non-refundable once a session date has been confirmed.

Rescheduling

We will accommodate one rescheduling request at no charge provided you notify us at least 5 business days before the confirmed session date. Requests received with less than 5 business days notice will be treated as cancellations.

Cancellations

  • More than 10 business days before the session: 80% refund.
  • 5–10 business days before the session: 50% refund.
  • Less than 5 business days before the session: no refund. All six deliverables will still be delivered within 24 hours of the originally confirmed session date.

Cancellation by breachnotify.in

If we cancel a confirmed session for any reason, a full refund will be issued within 7 working days, or you may reschedule at your preference.

Refund Requests

Email hello@breachnotify.in with your booking reference. Approved refunds are processed within 7 working days to the original payment method.