Back to DPDPA Glossary Index
Section 8(6); Rule 7; CERT-In directionsBreach & Enforcement
Incident Response Plan (IRP)
An incident response plan assigns roles for detecting, containing, investigating and communicating incidents.
Meaning and legal context
Distinguish personal data breaches from other cyber incidents and track all applicable clocks. A plan does not replace fact-specific decisions during an incident.
Practical application
Run a tabletop exercise covering reporting decisions and evidence preservation.
Related concepts
Official sources and editorial review
Prepared by DPDPA Shield. Explanations are plain-language summaries; the cited legislation controls. Last reviewed .
Put privacy knowledge into practice
Explore consent, data inventory and rights-request workflows with DPDPA Shield.