A company in Gaya leaked my personal data including Aadhaar and phone number in a breach. What is my remedy?

Detailed Legal Analysis

If your personal data, including Aadhaar and phone number, has been leaked due to a breach by a company in Gaya, you have several legal remedies available under Indian law.

Key legal frameworks applicable in this scenario include:

• Information Technology Act, 2000: This act governs cyber laws in India. Under Section 43, if a company has failed to protect your data, you can claim damages.
• Personal Data Protection Bill (PDP Bill): Although not yet enacted, it is expected to provide robust protection for personal data once it becomes law. It emphasizes consent and requires organizations to report breaches.
• Aadhaar Act, 2016: The use of Aadhaar data is regulated under this act, and unauthorized use or breach can lead to penalties.

Here are the steps you should take to seek remedies:

• Document the Breach: Collect all relevant evidence of the data breach, including emails, screenshots, or any communication from the company acknowledging the breach.
• File a Complaint with the Company: Initially, approach the company directly. Send a formal complaint detailing the breach, requesting an explanation and action. Maintain a copy for your records.
• Contact the Data Protection Authority: If the company fails to address your complaint satisfactorily, you can escalate the matter to the Data Protection Authority (DPA) once the PDP Bill is enacted. Currently, you can approach the Cyber Cell of your local police.
• File a Police Complaint: Under Section 66E of the Information Technology Act, unauthorized access to personal information is punishable. You can file a First Information Report (FIR) at the local police station.
• Seek Legal Recourse: If necessary, consider filing a civil suit for damages against the company under Section 43 of the IT Act, which allows you to claim compensation for loss or damage.

It's crucial to act promptly, as there may be time limits for filing complaints or suits. Consulting with a lawyer specializing in cyber law can help you navigate the legal process effectively.