A company in Bokaro leaked my personal data including Aadhaar and phone number in a breach. What is my remedy?

Detailed Legal Analysis

If your personal data including Aadhaar and phone number has been leaked by a company in Bokaro, you have several legal remedies available under Indian law.

Here are the steps you can take to address the data breach:

• File a Complaint with the Company:
  • Contact the company's customer service or data protection officer to report the breach.
  • Request details about how your data was leaked and the actions they are taking to rectify the situation.
• Report to the Data Protection Authority:
  • Under the proposed Personal Data Protection Bill, 2019, individuals can approach the Data Protection Authority of India (DPA) for violations of their data rights.
  • You may need to file a formal complaint, providing evidence of the data breach.
• File a Police Report:
  • File a First Information Report (FIR) at the local police station in Bokaro under relevant sections of the Indian Penal Code (IPC) for identity theft (Section 66C) and cheating (Section 420).
  • You can also approach the Cyber Crime Cell for assistance.
• Seek Legal Recourse:
  • If you suffer financial loss or emotional distress due to the data breach, you can file a civil suit against the company for damages.
  • Refer to Section 43 of the Information Technology Act, 2000, which provides for compensation for damage caused by wrongful loss or gain due to a breach of data.
• Inform the Aadhaar Authority:
  • Report the breach to the Unique Identification Authority of India (UIDAI) as they regulate Aadhaar-related matters.
  • Request guidance on how to protect your Aadhaar information further.
• Monitor Your Financial Accounts:
  • Keep an eye on your bank accounts and credit reports for any suspicious activity.
  • Consider placing a fraud alert on your credit report.

In summary, it is essential to document all communications and actions taken regarding the breach. Legal avenues under the IT Act and the IPC provide a framework for seeking redress for data breaches in India.