The draft Digital Personal Data Protection Rules, 2025 provide businesses with wide-ranging baseline security requirements, from encryption to breach detection. For organisations that would have to mandatorily notify breaches within 72 hours to regulators as well as to the affected parties, a multi-layered approach will be necessary to manage…