What are my rights as a user under Section 72A of the Information Technology Act, 2000, if my personal information has been shared without my consent?

Detailed Legal Analysis

As a user, if your personal information has been shared without your consent, you have specific rights under Section 72A of the Information Technology Act, 2000.

Section 72A addresses the breach of confidentiality and privacy. It penalizes any person who, while providing a service, discloses personal information without the consent of the person concerned. Here are your rights and the relevant points to consider:

• Right to Privacy: You have the right to maintain the confidentiality of your personal information. Unauthorized sharing of this information is a violation of your privacy rights.
• Grounds for Action: If your personal information has been shared without your consent, you can take action against the individual or entity that disclosed the information if:
  • They had access to your personal information while providing a service.
  • They disclosed this information without obtaining your consent.
• Legal Recourse: Under Section 72A, the offender may face:
  • Imprisonment for a term which may extend to three years.
  • A fine which may extend to five lakh rupees.
• Filing a Complaint: You can file a complaint with the police or cybersecurity authorities if you believe your rights have been violated. Provide them with:
  • Details of the unauthorized disclosure.
  • Proof of your identity and the context of the information shared.
• Seek Redressal: You may also approach the court for seeking damages or injunction against further disclosures. You should gather:
  • Evidence of unauthorized sharing.
  • Records demonstrating potential harm or damages incurred from the disclosure.
• Awareness of Digital Rights: Familiarize yourself with other provisions of the IT Act, such as Section 66E (violation of privacy) and Section 69 (power to issue directions for interception or monitoring), which may also protect your interests.

In summary, Section 72A provides a framework for users like you to protect your personal information and seek redressal in cases of unauthorized sharing. It is vital to act promptly and gather all necessary evidence to support your claims.