That gap is a technology architecture problem — solved only by logs, continuous monitoring, and SIEM. What the law mandates Rule 6(1)(c), DPDP Rules 2025 requires visibility on the accessing of personal data through appropriate logs, monitoring and review — to enable detection of unauthorised access, investigation and remediation. Rule 6(1)(e) mandates that logs and … Continue reading dPDP & tech 1.5: Most breach studies show the average time to detect a breach is over 200 days. Under DPDP, you have 72 hours to report one.