A company in Coimbatore leaked my personal data including Aadhaar and phone number in a breach. What is my remedy?

Detailed Legal Analysis

If a company in Coimbatore has leaked your personal data, including Aadhaar and phone number, you have several remedies under Indian law, primarily governed by the Information Technology Act, 2000, and the Aadhaar Act, 2016.

Here are the steps you should consider taking:

• File a Complaint with the Company: Start by notifying the company about the data breach. Request them to take immediate action to protect your data and inform you about the measures they are implementing.
• Report to the Cyber Crime Cell: If the company fails to respond adequately, you may file a complaint with the local Cyber Crime Cell. Under Section 66E of the Information Technology Act, 2000, the unauthorized use of personal information can lead to criminal liability.
• File a Complaint with the Data Protection Authority: The proposed Personal Data Protection Bill, 2019, aims to establish a Data Protection Authority (DPA). Although this bill is still under consideration, you may still seek redress under the existing framework of the Information Technology Act, 2000, and the rules made thereunder.
• File a Complaint with the UIDAI: Since your Aadhaar information has been leaked, you can lodge a complaint with the Unique Identification Authority of India (UIDAI). They have mechanisms in place to address breaches of Aadhaar data as per the Aadhaar Act, 2016.
• Seek Legal Recourse: If the company’s negligence led to significant harm, consider consulting a lawyer to explore the possibility of filing a lawsuit for damages. You may invoke provisions under the Consumer Protection Act, 2019, especially if you are a consumer of that company's services.
• Monitor Your Personal Information: Regularly check your financial accounts and online presence for any unauthorized use of your leaked personal data. Consider subscribing to identity theft protection services if necessary.

You may want to keep records of all communications and actions taken regarding the incident, as they will be useful for any formal complaints or legal actions you may pursue. Protecting your data is essential, so consider taking additional steps like changing passwords and utilizing two-factor authentication for your accounts.