Lesson 5.8: Security and breach practice and module test

Module 5 · Lesson 5.8 of 8 · About 30 minutes · Security and breach practice and

Check your readiness and take the module test. This DPDPA 2023 course page explains security and breach practice and in plain language.

security and breach practice and - DPDPA 2023 course lesson banner

What you will learn about security and breach practice and

Check Rule 6 readiness
Test your breach plan
Pass the module test

Readiness grid (security and breach practice and)

Area	Status
Encryption	Red / Amber / Green
Access	Red / Amber / Green
Logs	Red / Amber / Green
Backups	Red / Amber / Green
Plan	Red / Amber / Green

Practice checklist

0 of 8 done

MFA enabled on email and admin accounts
Disk encryption on all laptops
Access list reviewed
Logs switched on and kept a year
Backup restored in a test
Vendor contracts include safeguards
Breach plan written and drilled
Individual and Board templates ready

Key takeaway: Aim for all green on the first four before the 13 May 2027 deadline.

Check your understanding of security and breach practice and

Q1. Maximum penalty for failing security safeguards:

Q2. Minimum log retention under Rule 6:

Q3. Detailed report to the Board within:

Q4. Who must be told of a breach?

Q5. A breach includes loss of:

Q6. The fiduciary is liable for:

← Incident response plan and drills Module 6: Cross-Border Transfers & Exemptions →

Educational material for learning purposes, not legal advice. Check the official text of the DPDP Act, 2023, the DPDP Rules, 2025 and MeitY notifications for the latest position.

Official sources for security and breach practice and: Digital Personal Data Protection Rules, 2025 (MeitY, PDF) and DPDP Rules 2025, English text (PDF). Always check the latest official notifications.