In an article discussing the data and privacy issues of facebook, Mishi Choudhary was quoted as saying “They (users) can proceed under sections 43a and 72 of IT ACT. Section 43A of the IT Act explicitly provides that whenever a corporate body possesses or deals with any sensitive personal data or information, and is negligent in maintaining a reasonable security to protect such data or information, which thereby causes wrongful loss or wrongful gain to any person, then such body corporate shall be liable to pay damages to the person(s)”
Indians worried about data misuse on Facebook