A company in Patna leaked my personal data including Aadhaar and phone number in a breach. What is my remedy?

Detailed Legal Analysis

If a company in Patna has leaked your personal data, including your Aadhaar number and phone number, you have several remedies available under Indian law.

Firstly, you can approach the relevant authorities and take legal action against the company for violating data protection laws and your privacy rights. Here are the steps you can take:

• File a Complaint with the Data Protection Authority: Under the proposed Personal Data Protection Bill, 2019, once it is enacted, you can file a complaint with the Data Protection Authority of India (DPA), which will address breaches of personal data protection.
• Register a Complaint with Cyber Crime Cell: You can lodge a complaint with the Cyber Crime Cell in Patna. This can be done through the National Cyber Crime Reporting Portal (cybercrime.gov.in).
• File an FIR: If you believe that the leak has caused significant harm, you may consider filing a First Information Report (FIR) under relevant sections of the Indian Penal Code (IPC) such as Section 66E (Violation of privacy) and Section 72 (Breach of confidentiality and privacy).
• Seek Legal Recourse: You may also consider filing a civil suit for damages under Section 43 of the Information Technology Act, 2000, which deals with compensation for damage to a person’s property, including data, due to negligence.
• Contact the Unique Identification Authority of India (UIDAI): Since your Aadhaar information is involved, you should also report the breach to UIDAI. They provide mechanisms to report misuse of Aadhaar data.
• Monitor Your Financial Accounts: Since sensitive data has been leaked, it’s advisable to monitor your bank accounts and credit reports for any unauthorized transactions or identity theft.

Additionally, you can seek remedies under the Consumer Protection Act, 2019, if the data leak is deemed to be a deficiency in service by the company, allowing you to claim compensation for the harm caused.

It is essential to gather all evidence regarding the data breach, including communications and documentation, to support your claims. Consulting with a legal professional specializing in cyber law may also provide you with tailored advice and assistance in pursuing your case.