A company in Visakhapatnam leaked my personal data including Aadhaar and phone number in a breach. What is my remedy?

Detailed Legal Analysis

If a company in Visakhapatnam has leaked your personal data, including your Aadhaar and phone number, you have several remedies under Indian law, primarily through the Information Technology Act, 2000, and the Personal Data Protection Bill (if enacted). Here are the steps you can take:

• File a Complaint with the Company:
  • Contact the company directly to report the data breach.
  • Request them to take immediate action to secure your data and inform you about the measures they are implementing.
  • Keep a record of all communications for future reference.
• File a Complaint with the Cyber Crime Cell:
  • Contact the local Cyber Crime Cell in Visakhapatnam and file a formal complaint about the data breach.
  • Provide evidence of the breach, including any correspondence with the company.
  • This action is supported under Section 66E of the Information Technology Act, which addresses violation of privacy.
• Report to the Data Protection Authority:
  • If the Personal Data Protection Bill is enacted, you can approach the Data Protection Authority of India (DPA) to seek redress.
  • The DPA may impose penalties on the company for failing to protect your personal data as per Section 26 of the Bill.
• Seek Legal Recourse:
  • Consult with a lawyer specializing in cyber law to discuss potential civil suits against the company for damages caused by the breach.
  • You may also consider filing a case under the Consumer Protection Act, 2019, if you are a consumer of the services provided by the company.
• Monitor for Identity Theft:
  • Keep a close watch on your financial accounts and personal information for any unauthorized usage.
  • Consider subscribing to an identity theft protection service.

It is important to act swiftly to mitigate any potential harm resulting from the breach and to assert your rights under the applicable laws. Always ensure that you maintain documentation of all actions taken in response to the data breach.