A company in Kolkata leaked my personal data including Aadhaar and phone number in a breach. What is my remedy?

Detailed Legal Analysis

If a company in Kolkata has leaked your personal data, including Aadhaar and phone number, you have several remedies available under Indian law.

Firstly, it is crucial to understand that the protection of personal data is governed by the Information Technology Act, 2000 and its associated rules, particularly the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. Additionally, the Aadhaar Act, 2016 provides specific provisions regarding the protection of Aadhaar data.

Here are the steps you can take to seek remedies for the data breach:

• File a Complaint with the Company:
  • Contact the company to notify them about the data breach.
  • Request them to take immediate corrective action and secure your data.
  • Maintain a record of all communications regarding your complaint.
• File a Complaint with the Data Protection Authority:
  • Under the proposed Personal Data Protection Bill (still in process), you can lodge a complaint with the Data Protection Authority of India (DPA).
  • The DPA can investigate the complaint and impose penalties for non-compliance with data protection norms.
• File a Police Complaint:
  • Approach the local police station in Kolkata to file a First Information Report (FIR) regarding the data breach.
  • Provide all relevant details and evidence to support your claim.
• Seek Legal Recourse:
  • If the company fails to address the issue satisfactorily, consider filing a civil suit for damages under Section 43 and Section 66 of the Information Technology Act, 2000.
  • You may also seek remedies under the Consumer Protection Act, 2019 for deficiency in service.
• Monitor for Identity Theft:
  • Keep an eye on your financial transactions and online accounts for any unauthorized activity.
  • Consider enrolling in identity theft protection services if necessary.

In summary, the legal framework provides several avenues for redress in case of a data breach, including direct complaints to the company, law enforcement, and potential civil litigation. It is recommended to consult a legal professional specializing in cyber law for tailored advice and assistance.