Now the question comes whether these companies are allowed to collect such a huge amount of information while doing business with an individual. Do they take the consent of the customer before doing so? An official asked that if they have taken permission, what is the security mechanism to ensure that there is no theft. The data-theft gangs operating out of Delhi and Noida, which were busted a few weeks back, were operating data sales business in the guise of BPOs. But, the Faridabad-based cartel run by Bhardwaj was an unregistered set-up, police further added, adding that- Bhardwaj bought most of the data worth 70 crores from two persons in Gujarat, IM looking for both the persons. Police is doing time. It is important to get hold of both to zero in on how the personal information was being leaked, the official said.