A company in Ahmedabad leaked my personal data including Aadhaar and phone number in a breach. What is my remedy?

Detailed Legal Analysis

If a company in Ahmedabad has leaked your personal data, including your Aadhaar number and phone number, you have several remedies available under Indian law.

Firstly, the primary legislation governing data protection in India is the Information Technology Act, 2000 (IT Act) and the rules framed under it, specifically the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. Additionally, the Aadhaar Act, 2016 governs the use and protection of Aadhaar data.

Your remedies include:

• Filing a Complaint with the Data Protection Authority: If you believe that your rights have been violated, you can file a complaint with the Data Protection Authority of India (DPA) once the Personal Data Protection Bill is enacted, which is expected to establish a more robust framework. Until then, you can approach the Cyber Crime Cell in your area.
• Approaching the Cyber Crime Cell: You can lodge a complaint with the local Cyber Crime Cell under Section 66E of the IT Act, which deals with violation of privacy. This section states that capturing, publishing, or transmitting the image of a private area of a person without consent is punishable.
• Filing a Suit for Damages: Under Section 43 of the IT Act, if a person suffers damage due to a breach of data, they can sue for damages. You may file a civil suit in a competent court for compensation due to the breach of your personal data.
• Contacting the Company: Initially, you may also reach out to the company that leaked your data, demanding an explanation and seeking remediation. They may have internal grievance redressal mechanisms.
• Registering a Complaint with the UIDAI: If your Aadhaar data has been compromised, you should also report the incident to the Unique Identification Authority of India (UIDAI), which manages Aadhaar data. They can take steps to secure your Aadhaar number.
• Monitoring for Identity Theft: Consider monitoring your accounts for any signs of identity theft. If you notice any unauthorized transactions, report them immediately to your bank and the relevant authorities.

It is crucial to document all communications and keep records of your complaints and any responses received. This documentation may be necessary if you choose to escalate the matter legally.