Understanding the Domino's Data Breach Incident and Its Implications

Slide Note

The recent data breach at Domino's India has raised concerns over consumer data protection. With personal information of millions compromised, the need for a uniform Data Protection Law is emphasized. Users are advised to take precautions, while the accountability of companies under existing regulations is discussed. It highlights the impact on consumer trust and the necessity for stringent security measures. Proactive disclosure of breaches is crucial for maintaining transparency and trust.

yasmine Follow

Uploaded on Jul 24, 2024 | 0 Views

Download Presentation

Please find below an Image/Link to download the presentation.

The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author. Download presentation by click this link. If you encounter any issues during the download, it is possible that the publisher has removed the file from their server.

E N D

Presentation Transcript

DOMINOS DATA BREACH Submitted By- Sakshi Nathani SIP-36 Year of study- 3rdyear , BBA LLB Hons. College- Alliance University, Bangalore

PURPOSE OF STUDY The recent incident of Domino s has put everyone's concern over social media and cyberspace a dark impression. The present study is to understand the impact of data breach on consumers and the need for uniform Data Protection Law for curbing these dangerous occurrence.

BACKGROUND Pizza delivery service Dominos India is the latest victim of a massive data breach incident. The information was first reported by Alon Gal, the co-founder and CTO at cybercrime intelligence firm Hudson Rock. As per security experts, the data of 18 crore orders is available on the dark web. Wherein, the hackers have created a search engine and seize the personal information of the customers which includes their name, email, phone number and even the GPS location of users. On April 18, expert Alon Gal revealed that the data allegedly been compromised include 10 Lakh credit card details and even addresses of people who ordered Pizza from Dominos.

CAN COMPANIES BE HELD ACCOUNTABLE? Those users whose data has been leaked can file a suit against these companies for damages under the Consumer Protection (e-commerce) Rules, 2019, also, companies can be held accountable under Section 43A of the IT Rules 2011if they fail to protect personal data of users. The information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data of Information) Rules, 2011 (SPDI Rules) currently governs the protection of personal data collected by corporates in India.

WHAT SHOULD USERS DO? Users are not happy with the response received from Domino s and Air India post data leak and many have demanded accountability. In India, there has not been any instance where the company was held accountable. However, experts suggest that users can block their cards and get them reissued from banks and reset the passwords.

IMPLICATIONS OF DATA BREACH The customers are highly exploited affecting their confidence and reliance over the company's genuineness and responsibility. Thus, there is need for institution of data protection law for regulating, auditing and stringent security control over customers personal data

WHY SHOULD COMPANIES PROACTIVELY DISCLOSE BREACHES? Because it not only helps in maintaining trust and transparency amongst customers, but reduces the cost incurred by such data breaches. Privacy alone is not enough, there is crucial need to have regulator for controlling, and auditing and regulating the data available on website as end-to-end encryption. There is need for empowered regulators who can penalize people and debar them from doing such cyber security fraud.

WHAT CAN YOU DO TO PROTECT YOUR DATA? Mandatorily turning on two-factor authentication for all accounts and recommends apps such as Authy. And people should have a secondary email address that doesn't contain personal information. If a breach involves financial information, notify banks where you hold account Change your passwords if you receive any security alerts.