From Firewalls To Forensics: The Legal Duty Of Corporations After A Data Breach
- IJLLR Journal
- 5 days ago
- 1 min read
Samyak Sinha, NFSU
ABSTRACT
Data breaches have become an unavoidable risk of the digital economy. As organizations collect, process, and monetize vast quantities of personal and sensitive data, cyber incidents now pose not only technical challenges but also profound legal, ethical, and governance questions. This article examines the evolving legal duties of corporations after a data breach, tracing responsibilities from preventive cybersecurity measures to post-incident forensic investigation, notification, remediation, and accountability. By analysing comparative legal frameworks—particularly India’s Digital Personal Data Protection Act, 2023 (DPDPA), the EU’s General Data Protection Regulation (GDPR), and selected common-law principles—the article argues that corporate obligations after a breach extend far beyond installing firewalls. They encompass prompt forensic response, transparency toward affected individuals and regulators, and long-term institutional reforms aimed at resilience and trust restoration.
