A data breach response plan template runs two Indian clocks: six hours to CERT-In, in force today, and 72 hours to the Data Protection Board from May 2027
The FTC Safeguards Rule binds the US firm, not you, but section 314.4(f) forces it into your contract. Here is what an offshore firm must actually prove