A company in Moradabad leaked my personal data including Aadhaar and phone number in a breach. What is my remedy?

Detailed Legal Analysis

If your personal data, including Aadhaar and your phone number, has been leaked by a company in Moradabad, you have several legal remedies available under Indian law.

Here are the steps you can take to seek redress:

• File a Complaint with the Company: Start by reporting the data breach to the company directly. They may have a grievance redressal mechanism in place.
• Contact the Data Protection Authority: If the company does not respond adequately, you can escalate the matter to the Data Protection Authority of India (DPAI) once the Personal Data Protection Bill (PDPB) becomes law. Currently, the IT Act 2000 governs data protection issues.
• File a Complaint with Cyber Crime Cell: You can file a complaint with the local Cyber Crime Cell under the Information Technology Act, 2000, specifically Section 66E, which deals with violation of privacy.
• Filing a Police Report: Report the incident to the local police station in Moradabad, as data breaches may also constitute a criminal offense under the Indian Penal Code (IPC) sections related to forgery and identity theft.
• Seek Civil Remedies: Consider filing a civil suit for damages against the company for breach of contract and violation of privacy under Section 43A of the IT Act, which pertains to compensation for failure to protect data.
• File a Complaint with the National Consumer Disputes Redressal Commission (NCDRC): If the data breach has caused you financial loss or mental harassment, you may file a complaint under the Consumer Protection Act, 2019.
• Monitor Your Credit and Identity: After reporting the breach, monitor your credit and identity for any unauthorized activity, as the leaked information can lead to identity theft.

Legal provisions relevant to your situation include:

• Information Technology Act, 2000: Specifically, Section 66E concerning violation of privacy and Section 43A regarding compensation for failure to protect personal data.
• Personal Data Protection Bill (PDPB): Once enacted, it will provide a comprehensive framework for data protection, including rights to data subjects and remedies for breaches.
• Consumer Protection Act, 2019: Provides rights to consumers and a mechanism for seeking redressal for any grievances, including data breaches.

Taking these steps can help you address the breach of your personal data effectively.