240,679+ questions
↑↓ navigate ↵ select esc close
Home / Cyber Law / Question
Cyber Law India · Just now · 566 views

A company in Rohini leaked my personal data including Aadhaar and phone number in a breach. What is my remedy?

SA Asked by Sanjay Mishra from India

Quick Answer

File a complaint with the cyber crime police station in Rohini under Section 43A of the IT Act, 2000 (read with the SPDI Rules, 2011) for failure to implement reasonable security practices.

Detailed Legal Analysis

File a complaint with the cyber crime police station in Rohini under Section 43A of the IT Act, 2000 (read with the SPDI Rules, 2011) for failure to implement reasonable security practices. Section 66 of the IT Act applies if the breach involved unauthorised access.

The company can be held liable to compensate under Section 43A for negligence in protecting sensitive personal data. You may also approach the Adjudicating Officer under the IT Act for damages up to ₹5 crore, or Delhi High Court under Article 226 for higher claims.

Preserve breach notifications and correspondence as evidence under Section 63B BSA, 2023. Once the Digital Personal Data Protection Act, 2023 is fully notified, additional penalties and compensation apply.

Check Delhi Rent Control Act 1958 for any state data protection or grievance mechanism.

Last updated: October 3, 2026 LPReviewed by LawPucho Legal Team

Disclaimer: AI-generated for educational purposes only. Does not constitute legal advice. Consult a qualified practitioner.

Share: