Data Breach? 72 Hours. DPDP Breach Notification Explained | DPDP Masterclass Ep 7

Wrong email, stolen laptop, ransomware — are they all personal data breaches? And who do you tell, and when? 👇 In Episode 7 of the DPDP Masterclass, we cover what counts as a breach, Rule 7 notices to the Board and every affected person, the 72-hour report, CERT-In's 6-hour rule, a playbook for the first 48 hours, and penalties — with 3 quizzes. 📌 In this episode: ✅ A breach includes accidents and loss of access ✅ No harm threshold in India ✅ Rule 7: notices without delay + a 72-hour Board report ✅ CERT-In: 6 hours ✅ Lessons from Air India/SITA and AIIMS ✅ A 48-hour playbook + ₹200 crore / ₹250 crore penalties ⏱️ Chapters 0:00 Intro 0:42 Today's plan 1:10 Part 1: What counts as a breach 1:14 Section 2(u) definition 1:56 The CIA triad 2:27 Everyday breaches 3:15 No harm threshold in India 4:08 Vendor breaches: Air India / SITA 4:54 Availability: AIIMS ransomware 5:34 When the clock starts 6:10 Quiz 1: wrong email 7:14 Part 2: Who, what, when 7:18 Two DPDP audiences 7:54 What to tell each person 8:37 How to reach people 9:29 Board: initial intimation 10:12 The 72-hour report 10:53 Extensions 11:22 CERT-In: 6 hours 12:06 Other reports 12:58 The breach clock 13:35 Quiz 2: report deadline 14:41 Part 3: The first 48 hours 14:46 Triage and assemble 15:26 Contain and preserve evidence 16:04 Assess 16:35 Notifications 17:13 Communications 17:50 Privilege and experts 18:43 Part 4: After the breach 18:47 How the Board weighs penalties 19:26 ₹250 cr and ₹200 cr 20:04 No compensation under DPDP 20:49 Voluntary undertakings 21:31 Lessons learned 22:17 Revisit contracts 22:55 Tabletop exercises 23:27 Quiz 3: ransomware, no theft 24:28 Five common mistakes 25:08 In-house checklist 25:51 Key takeaways 26:33 Next: Episode 8 ▶️ Full DPDP Masterclass playlist:    • DPDP Act Masterclass | Hindi + English | F...   ▶️ Previous episode – Ep 6, Company Obligations:    • ₹250 Crore Security Gap? DPDP Company Obli...   🔔 Subscribe to In-House Edge for practical legal career and compliance content for young lawyers and corporate lawyers. ⚠️ Disclaimer: General information only, not legal advice. Based on the DPDP Act, 2023 and DPDP Rules, 2025, as of October 2026. #DPDPAct #DataProtection #InHouseEdge