A company in Kollam leaked my personal data including Aadhaar and phone number in a breach. What is my remedy?

Detailed Legal Analysis

If a company in Kollam has leaked your personal data, including your Aadhaar and phone number, you have several legal remedies available under Indian law.

Firstly, under the Information Technology Act, 2000, and its corresponding rules, particularly the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, organizations are required to maintain the confidentiality and security of sensitive personal data. A breach could lead to legal action against the company.

Here are the steps you should consider taking:

• Document the Breach: Collect all evidence related to the data leak, including emails, notifications from the company, and any other relevant information.
• Contact the Company: Reach out to the company that leaked your data. Inform them about the breach and request an explanation and details on how they intend to rectify the situation.
• File a Complaint with the Data Protection Authority: Under the proposed Personal Data Protection Bill, 2019, once enacted, you will be able to file a complaint with the Data Protection Authority of India regarding the unauthorized disclosure of your personal data.
• Notify the Cyber Crime Cell: You can file a complaint with the Cyber Crime Cell of your local police. This can be done under Section 66E of the Information Technology Act, which deals with violation of privacy.
• Seek Legal Redress: If the issue is not resolved through the above steps, you may consider filing a civil suit for damages in the appropriate civil court under the Indian Penal Code (IPC) and the Consumer Protection Act, 2019.
• Monitor Your Accounts: After a data breach, it's important to monitor your bank accounts, credit cards, and other personal information for any signs of identity theft or fraud.

Additionally, you may also refer to Section 72A of the Information Technology Act, which provides for punishment for disclosure of information in breach of a lawful contract. If the company failed to comply with its own privacy policy or terms of service, this could be a valid ground for a legal claim.

Taking these steps can help you seek remedy and protect your rights in the wake of a data breach.