OctoCred Consent Governance Dashboard

This governance report is compiled pursuant to Section 5, 6, 8, and 11 of the Digital Personal Data Protection (DPDP) Act, 2023. It certifies the integrity of authorization preferences, grievance turnaround SLA performance, Azure WORM storage audits, and legal-holds on erasure requests.

1. Key Fiduciary Statistics

Metric	Value	Compliance Standard Status
Total Registered Data Principals	1	🟢 Active Directory Logged
Active Consents Retained	0	🟢 Itemized Purposes Mapped
Withdrawn Authorization Prefs	2	🟢 Processing Suspended
Pending Grievance Petitions	2	🔵 Processing Queue active

2. Compliance Standards & Audits

• 🛡️ Eighth Schedule Support: Supported switchable notice languages: English, हिन्दी, தமிழ், తెలుగు, मराठी, ಕನ್ನಡ.
• 🔒 Append-Only Audit Ledger: 100% Cryptographically signed. Consent transactions SHA-256 hashed and matched with active Azure Blob Storage WORM policy.
• 🏛️ Section 11(2)(b) Legal-Hold: Rules Engine active. Intercepts erasure requests for accounts with outstanding loan liability (e.g. Rohit Sharma, active home loan).

3. Executive Attestation

TO, THE SECRETARY, DATA PROTECTION BOARD OF INDIA, NEW DELHI. SUBJECT: NOTIFICATION OF PERSONAL DATA BREACH UNDER SECTION 8(6) OF THE DPDP ACT, 2023 1. NAME OF DATA FIDUCIARY: Third Octopus (OctoCred Finance Private Limited) 2. ADDRESS: Times Square, Mumbai 3. INCIDENT CATEGORY: 4. SEVERITY LEVEL: 5. TIME OF DETECTION: 6. NUMBER OF AFFECTED PRINCIPALS: 7. SUMMARY OF COMPROMISED DATA: Personal Identifiers, KYC Credentials, and Account Statuses. 8. NATURE OF TRIGGER: 9. MITIGATION MEASURES ADOPTED: Immediate rotation of credentials, network firewall quarantine, active principal alerts, and audit trail validation. 10. GRIEVANCE OFFICER FOR CONTACT: - Name: Ms. Priya Sharma - Email: grievance.officer@octocredfinance.com - Phone: +91-22-61234567 PREPARED BY: Compliance & Governance Desk, Third Octopus.

Dear Data Principal,

In compliance with Section 8(6) of the Digital Personal Data Protection (DPDP) Act, 2023, Third Octopus (OctoCred Finance) is writing to formally notify you of a security incident that may have affected some of your personal information.

Initial Remediation Steps Taken:

Upon detection of this incident, our security response team immediately quarantined the affected system interfaces, revoked credentials, patched the underlying vulnerabilities, and locked down our database logs to prevent further exposure.

Recommended Actions For You:

• Change passwords for any external accounts that share matching details.
• Monitor your credit scores and look for unauthorized inquiries.
• Be alert to unsolicited emails, messages, or calls asking for credentials or OTPs.

If you have any questions or require support, you can contact our Grievance Desk directly at grievance.officer@octocredfinance.com or +91-22-61234567.

Sincerely,
Ms. Priya Sharma
Grievance Redressal Officer
Third Octopus