What are my legal rights regarding data protection under the Personal Data Protection Bill, 2019, if my personal information is leaked online?

Detailed Legal Analysis

Your legal rights regarding data protection under the Personal Data Protection Bill, 2019, are comprehensive and provide you with several avenues for redress if your personal information is leaked online.

The Personal Data Protection Bill, 2019 (PDP Bill) aims to protect the personal data of individuals and establishes a framework for the processing of such data. Although it is yet to be enacted as law, it proposes significant rights for individuals whose data may be compromised.

• Right to Access: Under the proposed Section 15, individuals have the right to access their personal data processed by data fiduciaries. This includes the right to request information about how their data was collected, processed, and the purposes for which it was used.
• Right to Correction: Individuals can correct or rectify their personal data if it is inaccurate or incomplete, as per Section 16. This is crucial if your data is leaked and contains erroneous information.
• Right to Erasure: Section 17 provides the right to request the deletion of personal data. This means if your data is leaked, you can demand its removal from the databases of the data fiduciary if it is no longer necessary for the purposes for which it was collected.
• Right to Data Portability: Under Section 20, you have the right to receive your personal data in a structured format, allowing you to transfer it to another data fiduciary if required.
• Right to Object: Section 19 grants you the right to object to the processing of your personal data in certain circumstances, particularly when you believe your rights and interests outweigh the legitimate interests of the data fiduciary.
• Right to Grievance Redressal: The Bill mandates the establishment of a Data Protection Authority (DPA), which will address grievances related to data breaches, as stipulated in Section 41. You can file complaints regarding any violations of your rights under this authority.
• Right to Compensation: If your data is leaked due to negligence by the data fiduciary, you may be entitled to compensation for damages as per Section 62 of the Bill.

In addition to the rights outlined in the PDP Bill, the Information Technology Act, 2000 (IT Act), particularly Section 66E, also provides protection against violation of privacy concerning personal data. This includes penal provisions for unauthorized access and disclosure of personal information.

In summary, if your personal information is leaked online, you have substantial rights under the Personal Data Protection Bill, 2019, which are designed to protect your personal data and provide you with mechanisms for redress and compensation.