A company in Bhopal leaked my personal data including Aadhaar and phone number in a breach. What is my remedy?
SM Asked by Smriti Dubey from India
Quick Answer
File a complaint with the cyber crime police station in Bhopal under Section 43A of the IT Act, 2000 (read with the SPDI Rules, 2011) for failure to implement reasonable security practices.
Detailed Legal Analysis
File a complaint with the cyber crime police station in Bhopal under Section 43A of the IT Act, 2000 (read with the SPDI Rules, 2011) for failure to implement reasonable security practices. Section 66 of the IT Act applies if the breach involved unauthorised access.
The company can be held liable to compensate under Section 43A for negligence in protecting sensitive personal data. You may also approach the Adjudicating Officer under the IT Act for damages up to ₹5 crore, or Madhya Pradesh High Court under Article 226 for higher claims.
Preserve breach notifications and correspondence as evidence under Section 63B BSA, 2023. Once the Digital Personal Data Protection Act, 2023 is fully notified, additional penalties and compensation apply.
Check Madhya Pradesh Rent Control Act 1960 for any state data protection or grievance mechanism.
Legal Provisions Referenced
Verify the current statutory text at India Code (the official repository of Indian legislation) or the Legislative Department. This answer is general legal information, not advice on your specific matter.
Disclaimer: AI-generated for educational purposes only. Does not constitute legal advice. Consult a qualified practitioner.