A company in Nagpur leaked my personal data including Aadhaar and phone number in a breach. What is my remedy?

Detailed Legal Analysis

If a company in Nagpur has leaked your personal data, including Aadhaar and phone number, you have several remedies available under Indian law, particularly under the Information Technology Act, 2000, and the Aadhaar Act, 2016.

Here are the steps you can take to seek redress:

• File a Complaint with the Company: Start by formally notifying the company about the data breach. Document your communication for future reference.
• Report to the Data Protection Authority (DPA): Under the proposed Personal Data Protection Bill, the DPA will oversee data privacy. While this bill is not yet enacted, you can still report the incident to the Ministry of Electronics and Information Technology (MeitY) or the Cyber Crime Cell.
• File a Complaint with the Police: You can lodge a First Information Report (FIR) at your local police station in Nagpur under Section 66E of the Information Technology Act, 2000, which deals with violation of privacy.
• Seek Compensation: Under Section 43 of the Information Technology Act, if a company fails to protect your data, you can claim compensation for damages caused by negligence.
• Contact the Unique Identification Authority of India (UIDAI): If your Aadhaar data is compromised, reach out to UIDAI to report the breach and seek guidance on securing your Aadhaar number.
• Involve Consumer Forums: You can approach the consumer forum under the Consumer Protection Act, 2019, as a data leak can be deemed an unfair trade practice.
• Consult a Legal Expert: It may be beneficial to consult with a lawyer specializing in cyber law to better understand your rights and potential actions.

Key legal provisions relevant to your situation include:

• Information Technology Act, 2000: Sections 43 and 66E deal with compensation for failure to protect data and invasion of privacy.
• Aadhaar Act, 2016: Section 47 provides that only UIDAI can prosecute under the Act, which may be relevant if Aadhaar data is involved.
• Consumer Protection Act, 2019: Provides rights to consumers and a mechanism for redressal of grievances.

Taking these steps can help you seek appropriate remedies for the data breach and secure your personal information against further misuse.