Breach Notification Letter to Affected Data Principals

[Organization Letterhead / Email Template]

Date: [DD-MM-YYYY]

Subject: Important Notice Regarding a Data Security Incident Affecting Your Personal Data

Dear [Data Principal Name / "Valued Customer"],

We are writing to inform you, in accordance with our obligations under Section 8(6) of the Digital Personal Data Protection Act, 2023, of a data security incident that may have affected some of your personal data held by [Organization Name].

1. WHAT HAPPENED

On [DD-MM-YYYY], we detected [brief, plain-language description of the incident - e.g. "unauthorized access to a database containing customer account information"]. We took immediate steps to contain the incident and began a thorough investigation with the support of [internal team / external experts, if applicable].

2. WHAT INFORMATION WAS INVOLVED

Based on our investigation to date, the following categories of your personal data may have been affected: [e.g. name, email address, phone number, order history]. [State clearly if financial credentials, passwords, or government ID numbers were or were not involved.]

3. WHAT WE ARE DOING

We have taken the following steps in response:
- [Contained the incident by disabling the affected access point / resetting relevant credentials]
- [Engaged independent security specialists to investigate the scope and cause]
- [Intimated the Data Protection Board of India as required under Section 8(6)]
- [Strengthened relevant security controls to prevent recurrence]

4. WHAT YOU CAN DO

We recommend that you take the following precautions:
- [Change your password for your account with us, and for any other account where you use the same password]
- [Remain alert to unsolicited emails, calls, or messages asking for personal or financial information]
- [Monitor your account statements for any unfamiliar activity]

5. HOW TO REACH US

If you have questions or wish to exercise any of your rights under the Digital Personal Data Protection Act, 2023 - including the right to access or correct your information - please contact our Grievance Officer / DPO:

Name: [DPO / Grievance Officer Name]
Email: [Email]
Phone: [Phone]

We take the protection of your personal data seriously and sincerely regret any concern this incident may cause. We will keep you informed if our investigation reveals any material change to the information provided above.

Sincerely,

[Authorized Signatory Name]
[Designation]
[Organization Name]