My personal financial data was leaked in a massive data breach from a company whose services I used. The breach has led to financial fraud against me. Can a company and its officers be held criminally liable for a data breach resulting from negligent security practices and what remedies are available to affected individuals in Kolkata?
If a company in Kolkata has suffered a data breach that exposed your personal information, you may have grounds to pursue action against the company itself, though it's important to understand how corporate liability works in this context and what remedies are genuinely available. Under the Information Technology Act, 2000, particularly Section 43A, companies that possess or handle sensitive personal data are required to maintain reasonable security practices, and failure to do so, resulting in wrongful loss or wrongful gain due to negligent handling of data, can attract liability, primarily in the form of compensation to affected individuals, which is pursued through adjudication mechanisms rather than a traditional criminal prosecution route in the first instance.
Where the data breach involves more deliberate conduct, such as the company or its employees knowingly and intentionally accessing, disclosing, or misusing personal data beyond mere negligent security failure, criminal liability under Section 66 and related provisions of the IT Act can indeed apply, and company officials who were responsible for the specific conduct can face individual prosecution alongside any corporate liability, following similar principles to how other corporate criminal liability is established under Indian law.
With the Digital Personal Data Protection Act, 2023 now in force, companies also face a more structured regulatory framework specifically addressing data protection obligations, including significant financial penalties for breaches, giving affected customers in Kolkata an additional regulatory avenue to pursue alongside any IT Act remedies, particularly where the breach reflects a clear failure to implement the safeguards this newer law requires.
Because pursuing action for a data breach often involves navigating multiple overlapping legal frameworks, from compensation claims to potential criminal liability to regulatory complaints, it helps to have a clear strategy identifying which combination of remedies best fits your specific situation. Aapka Legal Advice can help you understand and pursue the most effective route for your data breach concerns.
If you've been affected by a data breach at a company in Kolkata, you have multiple potential avenues for recourse. Speak with experienced criminal lawyers in Kolkata about pursuing the remedies available to you.