A company in Guwahati leaked my personal data including Aadhaar and phone number in a breach. What is my remedy?

Detailed Legal Analysis

If a company in Guwahati has leaked your personal data, including Aadhaar and phone number, you have several remedies available under Indian law.

1. **File a Complaint with the Data Protection Authority**: Under the proposed Personal Data Protection Bill, which is expected to be enacted, you can file a complaint with the Data Protection Authority of India (DPA). Although this bill is not yet law, its provisions indicate a framework for addressing data breaches.

• Gather evidence of the data breach, including any communications from the company.
• Prepare a formal complaint outlining how your data was leaked and the impact it has had on you.
• Submit your complaint to the DPA once it is operational.

2. **Approach the Cyber Crime Cell**: You can file a complaint with the Cyber Crime Cell under the Information Technology Act, 2000. Section 66E of this Act protects against violation of privacy.

• File an FIR (First Information Report) at your local police station or directly with the Cyber Crime Cell.
• Provide all relevant details including the nature of the breach, the data leaked, and any potential damages incurred.

3. **Lodge a Complaint Under the Aadhaar Act**: If your Aadhaar number has been compromised, you can approach the Unique Identification Authority of India (UIDAI). The Aadhaar Act prohibits unauthorized use of Aadhaar data under Section 29.

• Report the incident to UIDAI, detailing how your Aadhaar data was exposed.
• Request them to take necessary steps to secure your Aadhaar information.

4. **Civil Remedies**: You may also consider seeking civil remedies for any damages caused due to the breach. You can file a suit for damages under the Indian Contract Act, 1872 or the Consumer Protection Act, 2019.

• Consult with a lawyer specialized in cyber law to draft a legal notice or file a case.
• Demonstrate how the leak has caused you harm or distress.

5. **Seek Legal Advice**: It is advisable to consult a lawyer who specializes in cyber law to explore your options and help you navigate the legal process effectively.

Taking these steps can help you address the breach and seek redress for the unauthorized disclosure of your personal data.