- SBI data leak exposes 3,897 customers but DPDPA breach notification rules won't kick in until May 2027, leaving affected users without a legal right to be told.
- DPDPA penalty risk: SBI's dark web leak raises questions about reasonable security safeguards under Section 8(5), with potential fines up to ₹250 crore once the law is fully operational.
- SBI breach highlights DPDPA enforcement gap customers whose PII leaked on the dark web have no statutory notification protection yet, as Section 8(6) awaits the May 2027 deadline
ISSUE #115Published: 10/25/2026
SBI DATA LEAK from DPDPA Perspective
Ankur Srivastava
Deputy-CISO / CISSPCyber Security & Business Continuity Expert with over 15 years of experience orchestrating InfoSec Governance, risk mitigation frameworks, and disaster recovery architectures. CISSP | M.S. in Cyber Laws & Information Security (IIIT).
Access Price
₹0.00