A company in Bangalore leaked my personal data including Aadhaar and phone number in a breach. What is my remedy?

Detailed Legal Analysis

If your personal data, including Aadhaar and phone number, has been leaked by a company in Bangalore, you have several remedies available to you under Indian law.

Here are the steps you may take to seek redress:

• File a Complaint with the Company:
  • Contact the company and report the data breach, demanding that they take corrective measures.
  • Keep a record of all communications for future reference.
• Lodge a Complaint with the Data Protection Authority:
  • Under the Personal Data Protection Bill, 2019 (pending enactment as of October 2023), you can file a complaint with the Data Protection Authority of India (DPA) concerning the unauthorized processing of your data.
• File a Complaint with the Cyber Crime Cell:
  • Approach the local Cyber Crime Cell and file a First Information Report (FIR) under the Information Technology Act, 2000, specifically Sections 66E (violation of privacy) and 66B (punishment for dishonestly receiving stolen computer resource or communication device).
• Seek Legal Recourse:
  • If the company fails to take adequate action, you may file a civil suit for damages under Section 43 of the Information Technology Act, 2000, which covers compensation for failure to protect data.
  • Consult with a lawyer specializing in cyber law to understand your rights and potential claims.
• Notify Aadhaar Authority:
  • Since your Aadhaar data is involved, report the breach to the Unique Identification Authority of India (UIDAI) to mitigate risks associated with identity theft.

It's important to act quickly and document all evidence related to the breach. Additionally, consider monitoring your personal accounts for any unauthorized activity following the breach to further safeguard your identity.