What The Board Gets First
Without delay: nature, extent, timing, location, likely impact
Read the full guide: Rule 7(2)(a) — DPDP Act compliance guide
Watch in English
Summary
The Board hears too, and hears wider.
Without delay: nature, extent, timing, location, likely impact
Full transcript
The Board hears too, and hears wider.
Rule 7(2)(a) is the immediate one.
Without delay, a description of the breach:
nature, extent, timing and location.
Pause. Anything your email does not get?
The location of occurrence, for a start.
Your intimation never names that.
So the regulator's first look is wider.
Same trigger: on becoming aware.
To the Board, in the same breath.
r.7(2)(a) — Digital Personal Data Protection Act, 2023 + Rules, 2025
In force from 13 May 2027