Companies must inform the Data Protection Board of the likely impact of a data breach and its description, including its nature, extent, timing, and location of occurrence, without delay, as per the Digital Personal Data Protection Rules 2025 (DPDP Rules, 2025).

Read more at Medianama