Recording a data breach
Log a personal-data incident and keep track of the CERT-In and Data Protection Board deadlines.
Updated 15 October 2026
What you’ll do: record an incident as soon as you find it, so the reporting clocks start and nothing is missed.
Who can do this: members of your privacy team.
Steps
- In Dexta Hub, open Privacy requests under Admin, then the Incidents tab.
- Click Record an incident. Write What happened, in a few words and When it was found, then click Record incident.
- Open the incident. It shows three clocks: CERT-In (6 hours), Board, first report and Board, full (72 hours).
- Add what you learn as you go and click Save incident.
- Move it from Open to Contained, and to Closed when it’s done.
Good to know
- The clocks run from when the incident was found, so record it straight away, even with few details.
- Dexta keeps the register. Sending the reports to CERT-In and the Board is done by your team on their own channels.