A personal data breach under DPDP is not only a hacker breaking in. It is also your own employee accessing data they were never supposed to see. Section 2(u) of the DPDP Act, 2023 defines a personal data breach as any unauthorised processing of personal data — not just external attacks. If a customer service … Continue reading dPDP & tech 1.4: Access Control & Identity Management — Who Can See What?