# Data Breach Response Plan

## 1. Definition of a Personal Data Breach
A breach of personal data includes any unauthorized processing, disclosure, alteration, or destruction of personal or health data that compromises the confidentiality, integrity, or availability of the information.

## 2. Immediate Response Steps
1. **Identification:** Isolate the affected system and stop the ongoing breach.
2. **Assessment:** Determine the nature and scale of the data affected (Identity vs. Health Data).
3. **Documentation:** Record the time of discovery and the specific data fields compromised.

## 3. Mandatory Notifications (DPDP Act Section 8(6))
In the event of a personal data breach, the Consultation Service will:
1. **Notify the Board:** Report the breach to the Data Protection Board of India in the prescribed form.
2. **Notify Affected Users:** Inform impacted Data Principals (Clients) about the breach and steps taken to mitigate harm.

### 3.1 Notification Content Checklist
When notifying the Data Protection Board and affected Data Principals, the communication must include:
*   **Nature of the breach:** What happened, how it occurred, and what data was affected.
*   **Categories of personal data involved:** E.g., Identity Data, Health Data, Financial Data.
*   **Number of Data Principals affected:** Estimated count of individuals whose data was compromised.
*   **Consequences of the breach:** Potential harm to Data Principals.
*   **Measures taken or proposed to be taken:** Steps to mitigate the breach and prevent recurrence.
*   **Contact information:** Details of the Grievance Officer or other point of contact for inquiries.


## 4. Remediation
* Review server logs (`writeLog` output) to identify the entry point.
* Reset passwords or revoke tokens if session data is compromised.
* Patch the vulnerability identified in the assessment.

## 5. Timeline
All notifications to the Board and affected users must be made without undue delay, and in any case within **72 hours** of the discovery of the breach.

## Contact Point
**Breach Response Coordinator:** Madhav Joshi (madhavjoshi02@gmail.com)