Data-Breach Notification Draft
The notices you must send after a personal-data breach — to affected customers and to the Data Protection Board / CERT-In — what happened, what data, what you did, what they should do.
Data-Breach Notification (customers + authority)
The notices to affected customers and to the Data Protection Board / CERT-In after a personal-data breach — what happened, what data, what you did, what they should do. Fill in the details and download the clean copy — free.
Questions people ask
Who must be told, and when?
Under the DPDP Act, 2023 every affected data principal and the Data Protection Board; CERT-In directions require cyber incidents to be reported within six hours of noticing. The generator dates the notice and lists both.
Been hit and need a human?
Our team helps you draft, file and follow up with the bank and the cyber cell — leave your number for a free callback.
More on the Cyber Desk
- 📝 Complaint generatorA ready-to-file complaint for the Cyber Crime Cell and the National Cyber Crime Reporting Portal — dated facts, the transactions, the provisions of the IT Act and the BNS, and the reliefs sought. Free, clean copy, editable Word.
- 🏦 Bank dispute letterThe letter to your bank for an unauthorised transaction — the RBI limited-liability rule, the three-day window, the transactions, and the request for a block and a reversal.
- 👮 Police complaintA formal complaint to the Station House Officer for online fraud, extortion, impersonation or hacking — facts in order, the provisions, the evidence list and the request for an FIR.
- 🛡️ IT security policyA one-signature policy every employee signs — passwords and 2FA, devices and USBs, e-mail and phishing, payments and vendor changes, social media, personal data under the DPDP Act, incident reporting.
- 📒 Incident logA dated, numbered log of the incident — what was noticed, when, by whom, what was done, evidence preserved — the record banks, police and insurers ask for first.
- 🖼️ Awareness posterA print-ready A4 poster for the shop floor or office — the ten rules (never share an OTP, verify bank changes by call, no scanning to receive…) with your business name and the 1930 helpline.
The Cyber Desk provides educational tools, checklists and self-help drafts — not legal advice. For serious or high-value fraud, also consult the police and a qualified lawyer.