Five Things The Email Must Say
Description · consequences for you · mitigation · what you should do · a human contact
Read the full guide: Rule 7(1)(a) — DPDP Act compliance guide
Watch in English
Summary
Your breach email owes you five things.
Description · consequences for you · mitigation · what you should do · a human contact
Full transcript
Your breach email owes you five things.
Rule 7(1) lists them, and it is short.
A description: nature, extent, timing.
The consequences relevant to you.
Pause. What are the other three?
The measures they are taking to mitigate risk.
The safety measures you may take.
And a person who can answer your questions.
Concise, clear and plain, says the rule.
Five items. Count them next time.
r.7(1)(a)–(e) — Digital Personal Data Protection Act, 2023 + Rules, 2025
In force from 13 May 2027