The Indian Computer Emergency Response Team (“CERT-In”), India’s cybersecurity regulator, released a set of directions on security incidents on April 28, 2022. Issued in the wake of rising cybersecurity incidents and attacks in India, the directions on “information security practices, procedure, prevention, response and reporting of cyber incidents for Safe & Trusted Internet” (hereafter, “Directions”) introduce strict breach notification and security requirements.

Scheduled to come into effect on June 27, 2022, these Directions – complimented by a set of frequently asked questions, issued by CERT-In on May 18, 2022 – overhaul existing security incident reporting and cybersecurity requirements.