DPDPA in Action
Course
Jagannath Sahoo, Yask Sharma and Neilmani Sahu examine the practical challenges of meeting DPDPA's 72-hour breach notification requirement and why existing cyber response playbooks fall short.
The Digital Personal Data Protection Act, DPDPA, has fundamentally changed the breach response game for Indian enterprises. With a mandatory 72-hour breach notification window to the Data Protection Board, CISOs can no longer afford fragmented playbooks, slow forensics or siloed decision-making.
In this session, the panelists share hard-earned lessons on building breach response programs that meet DPDPA's aggressive timeline without sacrificing investigative rigor, legal defensibility or stakeholder trust.
This session will cover:
- How privacy incidents differ from cyber incidents in their triggers, accountability chains and regulatory consequences;
- Why breach notification under DPDPA demands multilingual communication, translation pipelines and human-in-the-loop validation that cannot be handled manually within a 72-hour window;
- How organizations must build and test fallback mechanisms - separate from their primary IT systems - to ensure notification capability survives the very attack that triggers the obligation.
Here is the course outline:
DPDPA in Action: Designing a 72-Hour Breach Response That Actually Works |
Completion
The following certificates are awarded when the course is completed:
 |
CPE Credit Certificate |
