Back to DPDPA Glossary Index
Sections 2(u) and 8(6); Rule 7Breach & Enforcement
Personal Data Breach
A personal data breach compromises confidentiality, integrity or availability through unauthorised processing, disclosure, alteration, destruction or loss of access.
Meaning and legal context
Rule 7 requires initial notification to affected people and the Board without delay, then additional Board details within 72 hours of awareness unless an extension is allowed. Do not wait 72 hours to start reporting.
Practical application
Record awareness, affected data, containment and notification decisions.
Related concepts
Official sources and editorial review
Prepared by DPDPA Shield. Explanations are plain-language summaries; the cited legislation controls. Last reviewed .
Put privacy knowledge into practice
Explore consent, data inventory and rights-request workflows with DPDPA Shield.