A company in Kozhikode leaked my personal data including Aadhaar and phone number in a breach. What is my remedy?

Detailed Legal Analysis

If your personal data, including Aadhaar and phone number, has been leaked by a company in Kozhikode, you have several remedies available under Indian law.

In India, the primary legal framework governing data protection is the Information Technology Act, 2000, along with the rules framed under it, and the Aadhaar Act, 2016. Here are the steps you can take to seek redress:

• File a Complaint with the Company:
  • Immediately contact the company and inform them about the data breach.
  • Request them to take corrective measures and to inform you how they will protect your data in the future.
• Complaint to the Cyber Crime Cell:
  • If the company does not respond or rectify the issue, you can file a complaint with the local Cyber Crime Cell.
  • Provide them with all necessary details, including the nature of the breach, how you discovered it, and any communication with the company.
• File a Complaint with the Data Protection Authority:
  • If the breach involves your Aadhaar number, you can lodge a complaint with the Unique Identification Authority of India (UIDAI) under the Aadhaar Act, 2016.
  • Section 47 of the Aadhaar Act states that any person can file a complaint for violation of provisions related to the use of Aadhaar.
• Pursue Legal Action:
  • If you suffer damages due to the data breach, consider filing a civil suit for damages under the Indian Penal Code (IPC), 1860, or the Consumer Protection Act, 2019.
  • Section 66E of the IT Act, 2000, makes it an offense to violate the privacy of an individual, which could be applicable in your situation.
• Seek Compensation:
  • You may be entitled to compensation for any misuse of your data or financial loss incurred due to the breach.
  • Legal provisions under Section 43 of the IT Act can help you claim damages for failure to protect your data.

Additionally, it is advisable to keep records of all communications related to the breach and any actions taken, as this will be beneficial in pursuing your case. Consider consulting with a legal professional specializing in cyber law to guide you through the process effectively.