The new DPDP Rules 2025 mandates that companies must report a data breach to the Data Protection Board within 72 hours.