Breach register

The breach register records every personal data breach, counts down the deadline for the detailed report to the Data Protection Board of India, and drafts the notices.

Recording a breach

Choose Breaches in the client’s menu, then Record a breach, as soon as the organisation becomes aware of one, even if the facts are still unclear. Record:

• a short name, the status, and when the organisation became aware: the clock starts here;
• what happened, where, the type of breach, and the inventory activities affected;
• the personal data and people affected, and whether children or places outside India are involved;
• the likely consequences, what has been done to contain it and reduce harm, and what people can do to protect themselves;
• the cause, the steps to stop it happening again, and when the Board and the people affected were told.

Clients in some sectors see a list of breaches commonly seen in their sector, to help recognise one.

The 72-hour countdown

Each open breach shows how many hours are left for the detailed report to the Board, due within 72 hours of becoming aware, and its next steps. The menu badge turns red when a report is overdue.

Draft notices

Choose Notices to see three drafts written from the record: the first intimation to the Board, the detailed report, and the notice to the people affected. Anything in [square brackets] is still to be completed: fill it in on the breach and the drafts update. Copy each draft, check it, and send the Board’s through the channel the Board specifies. The drafts print in full.