A company in Siliguri leaked my personal data including Aadhaar and phone number in a breach. What is my remedy?

Detailed Legal Analysis

If a company in Siliguri has leaked your personal data, including your Aadhaar and phone number, you have several remedies available to you under Indian law.

Firstly, you can file a complaint with the appropriate authorities, and pursue legal action under relevant data protection and cybersecurity laws.

• File a complaint with the Data Protection Authority: As per the proposed Personal Data Protection Bill, 2019, individuals can lodge a complaint with the Data Protection Authority of India (DPA) regarding data breaches. Although the Bill is yet to be enacted, it reflects the direction of Indian data privacy laws.
• Cyber Crime Complaint: You can file a complaint with the Cyber Crime Cell of the local police or through the National Cyber Crime Reporting Portal (https://cybercrime.gov.in). This is in accordance with the Information Technology Act, 2000, which governs cybercrimes and electronic commerce.
• Section 66E of the IT Act: This section protects against violation of privacy, including the unauthorized capturing, publishing, or transmitting of personal data. If your personal data has been compromised, you can invoke this section.
• File a civil suit: You may also consider filing a civil suit for damages against the company under the law of torts, specifically for breach of privacy and negligence. The Supreme Court of India recognizes the right to privacy as a fundamental right under Article 21 of the Constitution of India, as established in the Puttaswamy judgment (Justice K.S. Puttaswamy (Retd) vs. Union of India (2017)).

To strengthen your case, you should:

• Gather evidence: Collect all relevant information regarding the data breach, including communications from the company, screenshots, and any other pertinent documentation.
• Document damages: If you have suffered any losses due to the breach, document these losses meticulously, as they will be crucial in asserting your claims for damages.
• Consult a legal expert: Seek advice from a lawyer who specializes in cyber law or data protection to navigate through the legal process effectively.

By following these steps, you can seek remedies and hold the responsible parties accountable for the breach of your personal data.