Free template · Breach

Data breach notification template

A free data breach notification template for DPDPA Section 8: notices to the Data Protection Board and to affected data principals, with the facts to capture.

In short

This breach notification template gives you two ready notices, one to the Data Protection Board and one to affected data principals, plus the facts to capture (what happened, data involved, impact, mitigation), so you can notify within the DPDP Rules' timelines.

Facts to capture first

• What happened and when discovered: [SUMMARY, DATES]

• Personal data and number of data principals affected: [CATEGORIES, COUNT]

• Likely consequences / impact: [DESCRIPTION]

• Mitigation taken and planned: [ACTIONS]

• Contact for follow-up: [NAME, EMAIL]

Notice to the Data Protection Board

To: Data Protection Board of India

[COMPANY NAME], as Data Fiduciary, is reporting a personal data breach discovered on [DATE]. Nature of breach: [DESCRIPTION]. Personal data affected: [CATEGORIES] of approximately [COUNT] data principals. Likely consequences: [IMPACT]. Measures taken: [MITIGATION]. Point of contact: [NAME, EMAIL]. We will provide updates as the investigation progresses.

Notice to affected data principals

Subject: Important notice about your personal data

Hello [NAME], we are writing to let you know about a security incident on [DATE] that may have affected your [DATA CATEGORIES]. Here is what happened: [PLAIN DESCRIPTION]. What we have done: [MITIGATION]. What you can do: [GUIDANCE, e.g. reset password, watch for phishing]. For help, contact [NAME, EMAIL].

Get the full template

Enter your email to unlock the complete, copy-ready data breach notification template.

Automate this with ConsentX All templates

Data breach notification template FAQs

Who must I notify after a breach under the DPDP Act?+

Both the Data Protection Board and each affected data principal, in the form and manner the DPDP Rules prescribe.

When should breach notices go out?+

Without undue delay and within the timelines set by the DPDP Rules. Have this template and an incident runbook ready in advance.