A company in Jaipur leaked my personal data including Aadhaar and phone number in a breach. What is my remedy?

Detailed Legal Analysis

If a company in Jaipur has leaked your personal data, including your Aadhaar and phone number, you have several legal remedies available under Indian law.

Firstly, the breach of personal data is governed by various laws in India, including the Information Technology Act, 2000 (IT Act) and the Aadhaar Act, 2016. Here are the steps you can take:

• File a Complaint with the Company: Start by formally notifying the company about the data breach. Send a letter or email detailing the breach and request them to take corrective actions.
• File a Complaint with the Data Protection Authority: If the response from the company is unsatisfactory, you may lodge a complaint with the Data Protection Authority of India (DPA), once the Personal Data Protection Bill is enacted. The DPA will investigate your complaint.
• File a Police Complaint: Under Section 66E of the IT Act, the unauthorized capture, publication, or transmission of the images of a private area of a person is punishable. You can file a First Information Report (FIR) at the nearest police station regarding the data leak.
• Civil Suit for Damages: You may file a civil suit for damages against the company under Section 43 of the IT Act, which provides for compensation for damage to a person’s property, including data. You can seek compensation for the emotional distress and potential financial loss caused by the breach.
• Contact the Unique Identification Authority of India (UIDAI): Since Aadhaar data is involved, you should report the breach to UIDAI. They have mechanisms to respond to complaints regarding Aadhaar-related data breaches.
• Monitor Your Accounts: Regularly monitor your bank accounts and credit reports for any unauthorized transactions or identity theft, as personal data leaks can lead to fraud.
• Seek Legal Assistance: Consult with a legal professional specializing in cyber law to explore your options further. They can guide you on the appropriate legal actions to take.

Additionally, under the upcoming Personal Data Protection Bill, 2021, individuals will have enhanced rights concerning their personal data, including the right to seek compensation for breaches. It is advisable to stay updated on the enactment of this legislation for further remedies.