A company in Noida leaked my personal data including Aadhaar and phone number in a breach. What is my remedy?

Detailed Legal Analysis

If a company in Noida has leaked your personal data, including Aadhaar and phone number, you have several remedies under Indian law.

Firstly, you may file a complaint with the Data Protection Authority of India (DPAI) as per the provisions of the Personal Data Protection Bill, 2019, which is aimed at safeguarding personal data. Although this Bill is yet to be enacted into law, it is essential to be aware of the rights it proposes.

Here are the steps and options you can take:

• File a Complaint with DPAI:
  • Gather evidence of the data breach, including screenshots, emails, or any correspondence with the company.
  • Prepare a formal complaint detailing how your data was misused and the potential harm caused.
  • Submit your complaint through the official website of the DPAI once it is established (the Bill proposes the establishment of such an authority).
• File a Complaint with the Cyber Crime Cell:
  • Visit the local Cyber Crime Cell in Noida or file an online complaint through the Indian Cyber Crime Reporting Portal.
  • Include all relevant details and documentation regarding the breach.
  • This may lead to an investigation into the cyber crime and possible action against the offending company.
• Seek Legal Remedies:
  • You can file a civil suit for damages under Section 43 of the Information Technology Act, 2000, which deals with penalties and compensation for damage to computer systems.
  • Consider a suit for breach of privacy under Article 21 of the Indian Constitution, which upholds the right to privacy, as recognized by the Supreme Court in Justice K.S. Puttaswamy v. Union of India (2017).
• Inform the Company:
  • Contact the company that leaked your data to formally notify them about the breach and demand corrective action.
  • Request for the immediate cessation of the use of your data and a clear explanation of how they will handle such breaches in the future.

Additionally, staying vigilant about your personal information and monitoring for any misuse, such as fraudulent activities, is crucial. You may also consider enrolling in credit monitoring services to safeguard your financial identity.