◐ Press reported
CERT-In & Breach Enforcement
All body corporates & intermediaries — CERT-In
6-hour breach reporting mandate · 2022-04-28
Key facts
- Entity
- All body corporates & intermediaries
- Authority
- CERT-In
- Date
- 2022-04-28
- Sector
- Government
- Legal provision
- IT Act §70B(6) — CERT-In 2022 Directions
- Penalty
- Penalty / imprisonment (framework)
- Outcome
- Enacted
- Violation
- 6-hour breach reporting mandate
What happened
CERT-In issued directions requiring cyber-incident reporting within 6 hours and 180-day log retention, effective 28 June 2022 — India's first strictly enforced breach-notification regime.
Sources & provenance
Reported by named news sources. No primary document has been attached to this entry yet.
Related enforcement actions
← All enforcement actions
Record ID: IND-CERT-001 · updated 2026-09-20