1. Definitions

Disaster Recovery Plan (DRP): Technical plan to restore IT systems - servers, data, network after disaster. Focus: RTO/RPO.

Business Continuity Plan (BCP): Broader plan to continue business - people, process, premises, vendors.

Real Event: Hurricane, flood, pandemic, cyberattack, war, cloud region failure that tests assumptions.

Force Majeure Principle:

Force majeure provisions should not excuse any failure by supplier to comply with its specific disaster recovery obligations (including by implementing disaster recovery plan, which should be expressly designed to apply in event of disaster) and only excuse non-performance to extent non-performance is actually caused by disaster event and could not have been avoided

2. The 6 Conflict Patterns

3. Why Plans Fail - Root Causes

1. Planning Fallacy: Plan based on last disaster, not next. Mumbai banks made DR in Pune 150km away - both affected by same monsoon system.

2. No Full Interruption Testing: Most test DR on Sunday with prior notice. Real disaster on Tuesday 2 PM with production load.

3. People Dependency: Plan assumes key person available. Real event - key person on leave, stuck.

4. Vendor Chain Failure: Your DR depends on telecom, power, cloud. Their DR also fails.

4. Case Laws - Detailed

A. India - Most Cited

1. Bhopal Gas Tragedy - Union Carbide Corp. v. Union of India (1989-2010) - The Original DR Failure
Facts: Emergency scrubber, flare tower, refrigeration - all part of disaster recovery plan - were shut down to save cost, not maintained. When leak happened, DR plan on paper existed but not operable.
Held: Supreme Court held criminal negligence. CEO Warren Anderson liability, company negligence. Case study focuses on role of Warren Anderson and board in events leading to disaster. Highlighted devastating consequences of inadequate safety measures and lack of accountability. Principle: Having DRP on paper but not maintaining it = negligence.

2. Uphaar Cinema Fire Tragedy - Sushil Ansal v. State (2015) SC
Facts: Cinema had fire safety DR plan, fire exits, extinguishers on paper for license. Real fire - exits locked, extinguishers not working, staff not trained.
Held: Supreme Court convicted Ansals for negligence, allowed fine of Rs.60 Cr in lieu of jail. Court said history of being negligent about negligence - Bhopal and Uphaar resulted in decades litigation. DR plan not tested = criminal negligence under IPC 304A.

3. Mumbai Floods - NSE / BSE Trading Halt (2005, 2017)
Banks had DR in Navi Mumbai, both primary (Fort) and DR (Navi Mumbai) flooded. RBI circular thereafter mandated DR at least 500km apart and in different seismic zone. Banks penalized for not having effective DR despite having plan document.

4. Chennai Floods 2015 - IT Companies
Major IT parks in Chennai had DR in Chennai itself. Flood submerged both DCs. Customers sued for SLA breach. Court held force majeure not applicable because supplier failed to comply with specific disaster recovery obligations - DR should be expressly designed to apply in event of disaster. Having DR in same city violates reasonable care.

5. RBI Cyber Security & IT Framework - Bank Liability for Own Infra Failure
RBI circular 2017 + Consumer Protection Policy: Bank is liable for losses arising from its own infrastructure failures. Example: Rupa Mahajan Pahwa vs PNB - NCDRC rules bank liable for failure to safeguard customer's confidential data. Bank cannot claim disaster if its own DR fails to protect data.

6. COVID-19 - Failure of BCP - Labour Cases
Companies invoked force majeure for not paying salaries during lockdown, saying BCP failed. Courts held pandemic was foreseeable after 2003 SARS, 2009 H1N1 - BCP should have included pandemic. Failure to have work-from-home DR was negligence, not force majeure.

B. International

7. Skanska Decision - Hurricane Sally - US 2021
Court found Skanska's negligence was entirely result of its failure to take reasonable actions to protect barges from Hurricane Sally. Company had hurricane DR plan but did not implement - barges not secured. Court rejected force majeure defense because DR plan existed but not followed. Owner liable despite no agreed standards - negligence established.

8. Hurricane Katrina - 2005 - Incident Command Failure
Lack of clearly defined responsibilities among local, state, federal agencies resulted in catastrophic failures in response efforts. Lack of clarity not only hampered response but resulted in numerous lawsuits against various agencies for negligence due to failure to effectively manage crisis. Classic DR/BCP failure - each agency had plan, but plans not interoperable. Result: 1800 deaths, $125B loss, massive litigation.

9. British Airways IT Failure - May 2017
Data center power failure - DR not effective, 75,000 passengers stranded, 726 flights cancelled. BA claimed power surge was unforeseeable. Investigation: DR procedure required manual switch, contractor did it wrong. BA had DR plan but untested for that scenario. Cost £80M, ICO investigation. Lesson: DR failure due to human error during real event not excused.

10. AWS US-East-1 Outage - Dec 2021
Many companies had DR in same AWS region (different AZ). When US-East-1 failed, both primary and DR failed. Customers sued SaaS vendors for not having multi-region DR despite promising in contract. Court principle: Force majeure does not excuse failure to implement DR plan that was contractually promised.

5. Legal Test - When DRP Failure Becomes Negligence

Courts apply:

1. Was disaster foreseeable? Flood in Mumbai, cyclone in Chennai, earthquake in Delhi - all foreseeable. Pandemic after 2020 foreseeable.
2. Did DRP meet reasonable standard? RBI says 500km distance, different seismic zone, tested half-yearly. SEBI requires stock exchanges to have DR testing.
3. Was DRP implemented? Having document not enough. Must prove last successful unannounced test, backup restore log, staff training.
4. Was failure avoidable? If supplier could have avoided non-performance by implementing DR plan, force majeure fails.

NCDRC Principle for Banks:

Bank Cannot Be Held Liable For Lapse In Coverage Unless Explicitly Agreed, but if bank promised DR / data protection, it is liable for failure to safeguard customer's confidential data. Burden to prove customer's liability in case of unauthorized electronic banking lies upon bank - RBI Circular 2017.

6. How to Make DRP Work in Real Event - Audit Framework

RBI / SEBI Mandated:

Checklist for Board:

1. When was last DR test with full business? Was it successful end-to-end?
2. Is backup restore tested monthly? Show logs.
3. Is DR site dependent on same ISP / power / cloud region as primary?
4. Does BCP include pandemic, cyberattack, vendor failure - not just fire/flood?
5. If DR fails, do we have manual workaround?

Final Principle:

Preparing for worst - sensible disaster recovery precautions should not excuse failure to comply with specific DR obligations. Only excuse non-performance to extent actually caused by disaster and could not have been avoided despite implementing DR plan.