A company in Ludhiana leaked my personal data including Aadhaar and phone number in a breach. What is my remedy?

Detailed Legal Analysis

If a company in Ludhiana has leaked your personal data, including Aadhaar and phone number, you have several remedies available under Indian law, particularly under the Information Technology Act, 2000, and the Aadhaar Act, 2016.

Here are the steps you can take to seek redress:

• File a Complaint with the Company: Start by notifying the company about the data breach. Provide details of the breach and request them to take corrective measures.
• Contact the Data Protection Authority: As per the proposed Personal Data Protection Bill, 2019, you can lodge a complaint with the Data Protection Authority of India (DPA) once it is enacted. This authority will be responsible for ensuring compliance with data protection norms.
• File a Cyber Crime Complaint: You can file a complaint with the Cyber Crime Cell of the local police or through the National Cyber Crime Reporting Portal (cybercrime.gov.in). Mention the specifics of the breach and provide evidence if possible.
• Seek Legal Recourse: If the company fails to address your complaint satisfactorily, you may file a civil suit under the provisions of the Indian Contract Act, 1872, or the Consumer Protection Act, 2019. Under these acts, you can seek damages for any loss caused due to negligence in handling your personal data.
• File a Complaint under the Aadhaar Act: If your Aadhaar information has been leaked, you can lodge a complaint under Section 47 of the Aadhaar (Targeted Delivery of Financial and Other Subsidies, Benefits, and Services) Act, 2016. This section provides for penalties for unauthorized disclosure of Aadhaar information.
• Raise Awareness: Consider informing consumer rights organizations or forums that can help amplify your issue and seek accountability from the company.

In terms of legal provisions, the Information Technology Act, 2000, particularly Section 43A, imposes liability on companies for failure to protect sensitive personal data. Additionally, under the Consumer Protection Act, 2019, consumers have the right to seek compensation for deficiencies in services, which can include data breaches.

It is essential to document all your communications and actions taken regarding the breach, as this will support your case if you proceed with legal action.