How to file complaints for online data theft during shopping?

The rise of online shopping has brought increased convenience, but it has also led to a rise in data theft. Cybercriminals are targeting online shoppers to steal sensitive personal information, payment details, and credit card numbers during transactions. This can lead to identity theft, financial fraud, and other serious issues. Consumers who fall victim to data breaches or online fraud during shopping need to know how to file a complaint, seek compensation, and protect themselves from further harm. This article outlines the complaint procedure and legal steps for consumers dealing with online data theft.

Steps to File Complaints for Online Data Theft During Shopping

Notify the E-Commerce Website

• The first step is to notify the e-commerce platform where the data theft occurred. Most platforms like Amazon, Flipkart, or eBay have customer service teams or fraud departments to handle complaints about data breaches or fraudulent transactions.
• Provide the following details when reporting the issue:
• Order number, transaction ID, or any purchase details that can help identify the transaction.
• A description of the suspicious activity, such as unauthorized payments or login attempts.

Contact Your Bank or Payment Service Provider

• If your credit card, debit card, or digital wallet information was compromised, immediately contact your bank or payment provider (e.g., PayPal, Google Pay) to report the fraudulent transaction.
• Request that the bank block your card or freeze your account to prevent further unauthorized transactions.
• Banks often have fraud protection services and can issue chargebacks or refunds for unauthorized transactions.
• Ask for a transaction dispute to be raised if unauthorized charges were made.

Report the Incident to the Cybercrime Department

• Data theft is a form of cybercrime. In many countries, including India, you can report such incidents to the cybercrime police or a cybercrime reporting portal.
• In India, you can file a complaint at the cybercrime.gov.in portal, which is run by the Ministry of Home Affairs (MHA) and provides a platform for reporting cyber fraud, data theft, identity theft, and other online crimes.
• Provide all relevant details when reporting the crime:
• The website URL where the theft occurred.
• The type of data that was compromised (e.g., personal details, payment information).
• The date and time of the incident, along with any supporting evidence.

File a Complaint with the Consumer Forum

• If the e-commerce platform fails to act on the complaint or resolve the issue, you can file a consumer complaint in a consumer forum.
• Under the Consumer Protection Act, 2019, online sellers are obligated to protect consumer data and ensure the security of transactions. If they fail to do so and a breach occurs, the seller can be held liable for negligence.
• The District Consumer Forum or National Consumer Disputes Redressal Commission (NCDRC) can assist in resolving the dispute.
• In your complaint, you can seek:
• Refund for unauthorized transactions.
• Compensation for financial losses and emotional distress caused by the data theft.
• Reimbursement for any costs incurred to mitigate the impact of the breach (e.g., credit monitoring).

File a Complaint with Data Protection Authorities

• In some countries, there are specific data protection authorities that regulate how personal data should be handled by businesses. For example:
• India: The Personal Data Protection Bill, 2019 (currently under review) is designed to protect personal data and hold entities accountable for data breaches.
• EU: The General Data Protection Regulation (GDPR) allows consumers to report data breaches to the Data Protection Authority (DPA) within 72 hours of the breach.
• Filing a complaint with these authorities may help ensure that the e-commerce platform or third-party vendor responsible for the breach is penalized for mishandling consumer data.

Notify Credit Bureaus

• If you suspect that your credit card information or personal identity has been compromised, contact the credit bureaus (e.g., CIBIL, Experian, Equifax) to notify them of the potential identity theft.
• Request a fraud alert to be placed on your credit report. This alert warns creditors to take extra steps to verify your identity before extending credit in your name.

Seek Legal Action

• If the e-commerce platform or seller refuses to resolve the issue or you face significant financial loss due to data theft, you may consider filing a lawsuit for negligence and breach of privacy.
• Consumers can seek compensation for the harm caused, including financial losses and distress, under the Consumer Protection Act or Indian Penal Code (IPC), which covers cybercrimes.

Legal Protections Against Online Data Theft

Consumer Protection Act, 2019

• This law ensures that consumers have the right to safe and secure transactions online. Online retailers are obligated to protect consumers’ personal data. If a company fails to provide adequate protection and a data breach occurs, consumers can seek compensation.

Information Technology Act, 2000 (IT Act)

• The IT Act governs cybercrimes and defines offenses like data theft, hacking, and identity fraud. Under this law, the victim of a data breach has the right to approach the cybercrime cell and file a criminal complaint.

General Data Protection Regulation (GDPR)

• For consumers in the European Union (EU), GDPR provides strong protection against data breaches. It requires companies to notify customers of a breach within 72 hours. It also gives consumers the right to demand compensation for the misuse of their data.

Personal Data Protection Bill, 2019 (India)

• This bill, once enacted, will provide stronger protection for personal data and impose penalties on organizations that fail to secure consumer data. Consumers will have more control over their personal information and the right to seek redress for data theft.

Example:

Scenario:

A consumer orders a smartphone from an online store. After completing the transaction, the consumer notices suspicious charges on their credit card and suspects that their payment details were stolen during the transaction.

Steps Taken:

• The consumer contacts the e-commerce platform and reports the suspicious charges.
• The consumer notifies the bank and requests to block the card and dispute the unauthorized charges.
• The consumer files a complaint with the cybercrime department through cybercrime.gov.in.
• The consumer approaches the consumer forum for compensation and reports the data breach to the Data Protection Authority.

Outcome:

The e-commerce platform is investigated for negligence in protecting consumer data, and the consumer receives a refund for the fraudulent charges and compensation for emotional distress.

Conclusion

Online data theft during shopping is a serious issue that can lead to significant financial and emotional harm for consumers. By promptly notifying the e-commerce platform, banks, cybercrime authorities, and consumer forums, individuals can take steps to protect themselves, seek compensation, and hold companies accountable for mishandling personal data. Legal protections such as the Consumer Protection Act, IT Act, and data protection laws offer avenues for consumers to get justice and prevent further identity fraud.