OBL-18: Dual-Clock Breach Incident Workflow (Rule 7)
Executes dual reporting clocks: CERT-In 6-hour intimation and DPDP Rule 7 Board breach dossiers.
Statutory scope: Rule 7 — breach content/clocks · Assigned to Incident commander / Legal · Systems: SIEM & Security Telemetry Store (SYS-012)
Recommended interface: Remove required notice content or assume an unallowed extension; expected outcome is validation failure and the original detailed deadline preserved.
Remove required notice content or assume an unallowed extension; expected outcome is validation failure and the original detailed deadline preserved.
Governance & Architecture
Verification Specification & Workpaper
proposed per-row review/acceptance specification; not a claim of executed statutory coverage
populated hypothetical decision/specimen; not actual enterprise execution
Canonical Statutory Grounding
Source references verified against the official Gazette of India publication baseline.
Data Fiduciary
Awareness of any personal-data breach
Without-delay notices to each affected principal and initial Board notice; 72-hour detailed update; prescribed fields.
Board may allow longer update period on written request; no severity exemption stated.