A company in Belgaum leaked my personal data including Aadhaar and phone number in a breach. What is my remedy?

Detailed Legal Analysis

If a company in Belgaum has leaked your personal data, including Aadhaar and phone number, you have several remedies under Indian law, primarily under the Information Technology Act, 2000, and the Aadhaar Act, 2016.

Here are the steps and options available for you to seek redress:

• File a Complaint with the Company:
  • Contact the company to report the data breach and request immediate action to secure your data.
  • Document your communication for future reference.
• Lodge a Complaint with Cyber Crime Authorities:
  • File a complaint with the Cyber Crime Cell of your local police station. You can also approach the National Cyber Crime Reporting Portal (https://cybercrime.gov.in).
  • Provide all necessary evidence and documentation, including details of the data breach and any correspondence with the company.
• Approach the Data Protection Authority:
  • The Personal Data Protection Bill, 2019 (still in draft form as of October 2023) proposes the establishment of a Data Protection Authority of India (DPA). You can file a complaint with the DPA once the law is enacted.
  • Under the proposed legislation, the DPA has the authority to impose penalties on entities that fail to protect personal data.
• Seek Legal Recourse:
  • You may file a civil suit against the company for damages due to breach of privacy under Section 43 of the Information Technology Act, 2000, which deals with penalties for damage to computer systems.
  • Additionally, under Section 66E of the IT Act, you can seek legal action for violation of privacy, which includes unauthorized access to personal information.
• File a Complaint with the Unique Identification Authority of India (UIDAI):
  • If your Aadhaar data has been compromised, report the incident to UIDAI via their official website or helpline.
  • UIDAI has provisions to handle such complaints and can take action against the entity responsible for the data leak.

It is important to act promptly to preserve your rights and ensure your personal data is protected.