On 28 April 2022, the Indian Computer Emergency Response Team (CERT-In) issued a directive introducing cybersecurity obligations. The directive includes obligations regarding the notification and mitigation of data breaches, data storage and user id…