A company in Hyderabad leaked my personal data including Aadhaar and phone number in a breach. What is my remedy?

Detailed Legal Analysis

If a company in Hyderabad has leaked your personal data, including Aadhaar and your phone number, you have various legal remedies under Indian law to address this breach.

Key steps to take include:

• File a Complaint with the Company: Start by reporting the incident to the company responsible for the data breach. Most companies have a grievance redressal mechanism in place.
• Report to Cyber Crime Cell: You can file a complaint with the Cyber Crime Cell in your state. The complaint can be lodged online or in person, detailing the breach and its implications on your privacy.
• Contact the Data Protection Authority: Under the proposed Personal Data Protection Bill, once enacted, you will be able to approach the Data Protection Authority of India (DPA) regarding the violation of your data rights.
• File a Police FIR: If the breach involves identity theft or any criminal intent, you can file a First Information Report (FIR) under the Indian Penal Code (IPC) and the Information Technology Act, 2000.
• Seek Legal Recourse: You may consider filing a civil suit for damages in a competent court under Section 43 and Section 66 of the Information Technology Act, 2000, which deals with compensation for damage caused to a computer resource.
• File a Complaint with the UIDAI: Since Aadhaar data is involved, you can lodge a complaint with the Unique Identification Authority of India (UIDAI), which oversees the protection of Aadhaar data.

Relevant laws and acts include:

• Information Technology Act, 2000: Provides a legal framework for cyber crimes and electronic commerce in India.
• Section 43: Addresses compensation for damage caused to a computer resource.
• Section 66: Deals with computer-related offenses, including identity theft.
• Personal Data Protection Bill: Although not yet enacted, it will provide comprehensive data protection rights and remedies for individuals once passed.

It is advisable to consult a legal expert specializing in cyber law to help navigate the complexities of your specific case and ensure that your rights are protected effectively.