Accused of stealing company data in Delhi? Understand employee legal rights, cybercrime investigation, police complaints, IT Act provisions and legal defence options.

It often starts with a single email. An employee resigns, joins a competitor or starts a business, and a few weeks later receives a legal notice or a police call. The allegation: employee accused of stealing company data. For people working in Delhi’s IT firms, agencies, finance companies and start-ups, a data theft allegation can freeze a career overnight.

As advocates, we see both sides of these disputes. Some company data theft cases are genuine. Many others are weak complaints used to pressure a departing employee. This blog explains the legal rights of an employee in Delhi, what to do in the first 48 hours, and how a proper defence is built.

What Counts as Company Data Theft

Indian law has no single definition of “data theft”. In practice, a company data theft case is built on facts like these:

• Forwarding client lists, source code, pricing sheets or design files to a personal email or cloud account before resigning.
• Copying files to a pen drive or phone without permission.
• Using login access beyond what the job required.
• Sharing confidential information with a competitor or a new employer.
• Taking data after the employment contract has ended.

Not everything an employer calls “stolen” is legally protected. Delhi courts have refused to treat publicly available client details, or general knowledge gained on the job, as trade secrets. The information must have real confidential and commercial value, and the employer must have actually kept it confidential.

Laws That Employers Rely On

A complaint against an employee accused of stealing company data usually mixes criminal and civil law. Knowing which sections are invoked is the first step of any defence.

Law	What the employer alleges
IT Act, 2000, Section 43(b)	Unauthorised downloading, copying or extraction of data. This is a civil wrong with compensation
IT Act, Section 66	The same acts done dishonestly or fraudulently: criminal, up to three years or fine up to Rs 5 lakh, or both
IT Act, Section 72A	Disclosure of information in breach of a lawful contract
BNS Section 316	Criminal breach of trust, as an employee is “entrusted” with data
BNS Section 303	Theft. Whether intangible data is “movable property” is a contested legal question
BNS Section 318	Cheating, usually added when a competing business is alleged
Contract and confidentiality clauses	Breach of the NDA or employment agreement, with a civil suit for injunction and damages
Trade secret or confidential information law	Developed by courts, not by a statute. Civil injunctions in the Delhi High Court

The Bombay High Court has held that prosecution under both the IT Act and the general penal code is possible where the offences are not exactly the same. On the other hand, the Karnataka High Court has quashed criminal proceedings against former employees where the dispute was essentially commercial and better suited to civil remedies. Outcomes depend heavily on the facts.

Your Legal Rights as an Accused Employee

The legal rights of an employee do not disappear because a company has made an allegation. In Delhi, you are entitled to the following:

• Right to remain silent: Article 20(3) of the Constitution protects you from being compelled to be a witness against yourself.
• Right to a lawyer: You can consult and have an advocate with you during questioning.
• Right to know the allegation: Ask for the written complaint and the sections invoked before you respond.
• Presumption of innocence: The employer must prove the case. A bare accusation is not proof.
• Right to bail: Where an offence is bailable, bail is a right. For others, you can apply for anticipatory bail before the Sessions Court or the Delhi High Court.
• Protection against arbitrary seizure: Devices can be seized only through lawful process, and you should insist on a proper seizure memo and a hash or copy record.
• Right to challenge: A criminal case that is really a civil or commercial dispute can be challenged by a petition to quash the FIR.

An employer also cannot withhold your lawful dues or relieving documents merely to pressure you into a settlement. Whether dues can be adjusted depends on the contract and applicable law, so take advice before signing anything.

What to Do in the First 48 Hours

If you are an employee accused of stealing company data, what you do now can shape the entire case.

1. Do not delete anything. Deleting files, chats or emails after an allegation can look like destroying evidence and may be treated as a separate wrong.
2. Do not admit anything in writing. Do not reply to the legal notice or the HR email in anger or in a hurry. Speak to an advocate first.
3. Collect your own papers. Keep your appointment letter, NDA, company policies, relieving letter, salary slips and any emails showing that you were allowed to access or send the material.
4. Write down the facts. Note what files were involved, why you had them, and who knew. Many cases turn on authorisation, such as work-from-home practice or a manager’s instruction.
5. Do not return or hand over devices informally. Personal devices should be given up only through a lawful process, ideally with an advocate present and a record of what is copied.
6. Do not contact the company’s clients or staff to explain your side. It can be used against you.
7. Prepare for questioning. If the police call you, ask for the notice in writing and attend with your advocate.

If an FIR is likely, discuss anticipatory bail at once, instead of waiting for an arrest.

Building a Strong Defence

A sound defence to a data theft allegation is built on the facts and the documents, not on denial alone. The common grounds are:

• Authorisation: The data was accessed or sent as part of the job, with the employer’s knowledge or practice.
• No dishonest intention: Criminal liability under Section 66 or for breach of trust needs dishonest or fraudulent intent, not just a policy violation.
• Not confidential: The material is public, generic, or the employer never treated it as secret, with no access controls or confidentiality marking.
• Own work or general skill: Knowledge, experience and skills gained during employment belong to the employee.
• Unenforceable restraint: Courts have held that post-employment non-compete clauses are generally void under Section 27 of the Contract Act, even where confidentiality obligations may survive.
• Weak electronic evidence: Challenge unverified screenshots, missing logs, or a missing certificate under Section 63 of the Bharatiya Sakshya Adhiniyam, 2023.
• Civil dispute dressed as crime: Where the real issue is competition, dues or a business fallout, seek quashing of the FIR before the Delhi High Court.
• Malafide motive: Show that the complaint followed a resignation, a salary claim or a refusal to sign a settlement.

If the matter reaches court, anticipatory bail or regular bail, a petition to quash the FIR, and a reasoned reply in any civil suit can run together as parts of one strategy.

When the Employer Goes to the Delhi High Court

Many company data theft cases in Delhi are filed as commercial suits in the Delhi High Court rather than as police complaints. The employer asks for an injunction, return of data and damages, and sometimes for a court commissioner to inspect and seal devices.

Courts here have granted urgent orders where an employee emailed proprietary documents to a personal account just before resigning. At the same time, the Delhi High Court has refused injunctions where the “confidential” material was only a client list or publicly available contact details, noting that the information must have real economic value and be protected by the employer.

If you receive summons or an ex-parte order:

• Read the order carefully and comply with its terms, while taking legal advice on challenging it.
• Keep the preserved devices as directed, and do not tamper with them.
• File a detailed reply, and where the order was obtained without a full picture, apply to vacate or modify it.
• Consider early mediation. Commercial courts expect parties to explore settlement, which can end the matter without a long trial.

Common Mistakes and Questions

A cyber advocate in Delhi repeatedly sees employees weaken their own position through these mistakes:

• Signing a “settlement” or apology letter without legal advice.
• Deleting data or formatting a laptop after receiving a notice.
• Ignoring a legal notice or court summons.
• Moving files to a new employer’s systems, which can spread the dispute.

Is data theft by an employee always a criminal offence? No. Many cases are civil, such as breach of contract or confidentiality. Criminal liability needs dishonest or fraudulent intent.

Can I be arrested straight away? It depends on the sections invoked and the facts. Seek legal advice early and consider anticipatory bail if an FIR is likely.

Can my employer hold my salary or documents? Not as a pressure tactic. Take legal advice on your dues and on a lawful reply.

Does the company also have duties? Yes. A company that stores personal data must keep reasonable security safeguards, and its own lapses can be relevant to the dispute.

How Employees Can Protect Themselves Before Resigning

Most company data theft cases can be avoided with a few careful habits. Our advice as a cyber advocate in Delhi to anyone planning to leave a job:

• Read your papers first. Check your appointment letter, NDA, IT policy and any confidentiality or notice-period clause, so you know what you agreed to.
• Never forward work files to personal email or cloud storage, even for “reference”. If you need a work sample for your portfolio, take written permission from your manager.
• Know what you may keep. Your appointment letter, salary slips, PF details, tax documents and personal contacts are yours. Client lists, source code, pricing and internal reports are not.
• Hand over properly. Return laptops, phones and access cards against a written acknowledgement, and keep a copy of the handover email.
• Log out and remove company access from your personal phone through the IT team, not by deleting files yourself.
• Save your exit trail. Keep your resignation, its acceptance, the handover emails and the relieving letter safely with you.
• Be careful in the exit interview. Do not make admissions or sign a declaration you have not understood.
• Tell your new employer in writing that you will not use or share your previous employer’s confidential information.

A few minutes of care at the time of leaving can save months of litigation later. If you already face a notice or a police call, speak to an advocate before replying.

Contact Us

If you are an employee accused of stealing company data in Delhi and need guidance on your legal rights and defence, you can reach us here:

• Website: https://cyberadvocateindelhi.in/
• Helpline: +91-8810659872

Disclaimer

This blog is published for educational and informational purposes only. It is not an advertisement or solicitation, and it is not a substitute for legal advice on your specific facts.