A company in Panipat leaked my personal data including Aadhaar and phone number in a breach. What is my remedy?

Detailed Legal Analysis

If a company in Panipat has leaked your personal data, including your Aadhaar and phone number, you have several legal remedies available under Indian law.

Firstly, it is essential to understand the legal framework surrounding data protection and privacy in India. The primary legislation governing data protection is the Information Technology Act, 2000 (IT Act), along with the rules framed under it and the Personal Data Protection Bill, which is currently in discussion. The Aadhaar Act also provides specific provisions regarding the handling of Aadhaar data.

Here are the steps you can take to seek remedies:

• File a Complaint with the Company:
  • Contact the company’s grievance officer, as mandated under the IT Rules, 2011.
  • Submit a formal complaint regarding the data breach, outlining the specifics of the incident and the impact on your privacy.
• Report to the Data Protection Authority:
  • If the company fails to address your complaint, you can escalate the matter to the Data Protection Authority (DPA) once the Personal Data Protection Bill is enacted.
  • Currently, you can approach the Cyber Crime Cell of your local police or the Ministry of Electronics and Information Technology (MeitY).
• File a Police Complaint:
  • Under Section 66E of the IT Act, unauthorized disclosure of personal information is an offense.
  • You can file an FIR against the company for violating your privacy rights and for data breach.
• Civil Remedies:
  • You may consider filing a civil suit for damages in a civil court under relevant provisions of the Indian Penal Code (IPC), 1860, especially under Section 499 (defamation) or Section 500 (punishment for defamation).
  • Seek compensation for mental anguish, loss of reputation, and any financial losses incurred due to the breach.
• Consult a Lawyer:
  • Seek legal advice from a lawyer specializing in cyber law to understand your rights and the best course of action.
  • A lawyer can help draft formal complaints and represent you in legal proceedings if necessary.

It is crucial to act promptly and gather all evidence related to the data breach, including screenshots, emails, and any correspondence with the company.