Index
1. Abstract
1.1. Overview
1.2. Keywords
2. Introduction
2.1. Context and Importance of the Right to Privacy
2.2. Evolution of the Right to Privacy in India
3. The Right to Privacy Before the Puttaswamy Judgment
3.1. Early Judicial Stance
3.2. Gradual Recognition of Privacy
4. The Puttaswamy Case (2017)
4.1. Background of the Case
4.2. Judgment and Key Features
4.3. Overruling Previous Precedents
4.4. Recognition of Informational Privacy
4.5. Three-Part Test for Restrictions
4.6. Foundation for Future Judgments
5. Impact of the Puttaswamy Judgment
5.1. Strengthening Civil Liberties
5.2. Legal Reforms and Legislative Developments
5.3. Surveillance and National Security
5.4. Judicial Expansion of Rights
6. Challenges and Criticisms
6.1. Ambiguities in Enforcement
6.2. State Surveillance and Executive Overreach
6.3. Private Sector Data Exploitation
7. Conclusion
8. References
Right to Privacy: Before and After the
Puttaswamy Case
Abstract
The recognition of the right to privacy as a fundamental right under the Indian Constitution
marks a significant evolution in Indian constitutional jurisprudence. This paper analyzes the
development of the right to privacy in India, focusing particularly on the landmark judgment in
Justice K.S. Puttaswamy (Retd.) v. Union of India (2017). It contrasts the legal position on
privacy before and after the judgment and examines its implications on surveillance, data
protection, personal liberty, and democratic governance. The paper concludes by suggesting
reforms and highlighting emerging challenges in the digital age, especially as India grapples with
balancing privacy with innovation and national security.
Keywords: Right to Privacy, Puttaswamy Case, Constitutional Law, Personal Liberty, Data
Protection, Surveillance, India.
1. Introduction
The Indian Constitution does not explicitly enshrine a right to privacy. Yet over decades, through
judicial interpretation, the Supreme Court has read this right into the fundamental rights
framework, particularly under Articles 14, 19, and 21. The recognition of privacy as a
fundamental right in the Justice K.S. Puttaswamy judgment in 2017 represents a constitutional
shift, marking the judiciary’s response to the changing landscape of state-citizen relations, where
the digital domain has become central to everyday life.
In an age where data is the new currency, the intersection of privacy, technology, and state
power presents complex challenges. Understanding the right to privacy—its origins, evolution,
and current framework—is crucial to ensure that democratic rights remain robust against
encroachment, whether by the state or private actors.
2. The Right to Privacy
Before the Puttaswamy Judgment:
2.1. Early Judicial Stance
The pre-Puttaswamy era was marked by a narrow interpretation of fundamental rights with
respect to privacy. In M.P. Sharma v. Satish Chandra (1954), the Supreme Court held that the
Indian Constitution did not include a right to privacy akin to the Fourth Amendment of the U.S.
Constitution, which protects against unreasonable searches and seizures. The court, interpreting
Article 20(3), rejected the idea that privacy could be implied in the protection against self-
incrimination.
Similarly, in Kharak Singh v. State of Uttar Pradesh (1963), the court upheld the constitutional
validity of police surveillance measures, except for domiciliary visits at night. While Justice
Subba Rao, in a powerful dissent, argued that privacy was inherent in personal liberty, the
majority refrained from recognizing any distinct right to privacy.
These early rulings reflected the post-colonial state's preoccupation with maintaining law and
order over protecting individual liberties, often prioritizing state security over civil rights. They
also showed judicial hesitancy in reading implied rights expansively in the absence of express
constitutional language.
2.2. Gradual Recognition of Privacy
Despite the foundational limitations, later cases gradually recognized the nuances of privacy in
specific contexts. In Gobind v. State of Madhya Pradesh (1975), the court, while upholding
surveillance, cautiously admitted that the right to privacy could be a fundamental right, though
not absolute. Justice Mathew emphasized that certain zones of privacy are essential for personal
liberty.
This tentative acceptance evolved further in R. Rajagopal v. State of Tamil Nadu (1994), also
known as the "Auto Shankar" case, where the Supreme Court explicitly acknowledged the
individual's right to privacy, particularly against unauthorized publication. This was a landmark
case in linking privacy with freedom of expression and the press.
In People’s Union for Civil Liberties v. Union of India (1997), the Supreme Court extended
privacy protections to the domain of telephone tapping. The court ruled that phone conversations
are part of the privacy of communications and are protected under Article 21, unless intercepted
according to procedure established by law.
This progression set the stage for a broader judicial articulation of privacy in the 21st century,
especially as technology began to redefine personal boundaries.
3. The Puttaswamy Case (2017)
3.1. Background
The constitutional challenge in Justice K.S. Puttaswamy (Retd.) v. Union of India arose in the
context of the Aadhaar scheme—a biometric-based identification program introduced by the
Indian government. Petitioners, including Justice K.S. Puttaswamy (a retired judge), argued that
mandating biometric data for access to government services amounted to a violation of personal
privacy, especially in the absence of a comprehensive legal framework governing data
protection.
The central question was whether the Constitution of India recognized the right to privacy as a
fundamental right. The government argued that since earlier judgments (M.P. Sharma and
Kharak Singh) had not recognized privacy as a fundamental right, the doctrine of stare decisis
required continued adherence to those precedents.
3.2. Judgment
The Supreme Court, through a unanimous verdict by a nine-judge bench, declared that the right
to privacy is a constitutionally protected fundamental right. It held that privacy is an intrinsic part
of life and personal liberty under Article 21 and forms a part of the freedoms guaranteed by Part
III of the Constitution.
Justice Chandrachud, writing for the plurality, emphasized that privacy is not a singular concept
but a combination of various rights: bodily privacy, informational privacy, and decisional
autonomy. The court also observed that privacy enables dignity, identity, autonomy, and the
ability to make intimate personal choices.
3.3. Key Features of the Judgment
Overruling Previous Precedents: The court overruled M.P. Sharma and Kharak Singh,
reaffirming the importance of dynamic constitutional interpretation.
Three-Part Test: The court established a test for justifying any infringement of privacy
—legality (existence of law), necessity (state interest), and proportionality (least intrusive
means).
Recognition of Informational Privacy: The judgment recognized the importance of
protecting personal data in the digital age, foreshadowing the need for robust data
protection laws.
Emphasis on Human Dignity: Privacy was linked directly to human dignity and
individual autonomy, cementing its place within the broader architecture of constitutional
rights.
Influence on Future Cases: The ruling became a touchstone for future decisions such as
Navtej Johar v. Union of India (2018) on LGBTQ rights and Common Cause v. Union of
India (2018) on passive euthanasia.
4. Impact of the Puttaswamy Judgment
4.1. Reinforcement of Civil Liberties
The Puttaswamy verdict shifted the constitutional focus from a state-centric model of governance
to one centered on the individual. It reinvigorated the fundamental rights discourse in India by
placing autonomy, consent, and dignity at its core.
The judgment reinforced the idea that individuals are not passive recipients of state power but
active rights-holders whose choices, data, and identities deserve protection against arbitrary
interference.
4.2. Legislative Developments: The Data Protection Landscape
A key outcome of the Puttaswamy judgment was the recognition that a comprehensive data
protection regime was needed. This led to the drafting and eventual passage of the Digital
Personal Data Protection Act, 2023, aimed at protecting personal data and outlining the
responsibilities of data fiduciaries.
However, the law has faced significant criticism. Critics argue that the Act grants the central
government sweeping exemptions, thereby weakening the very rights it seeks to protect.
Moreover, the Data Protection Board lacks adequate independence and enforcement powers,
raising questions about its effectiveness in protecting citizens from data misuse.
4.3. Constraints on Surveillance
The judgment has been instrumental in placing judicial checks on state surveillance. For
instance, in Anuradha Bhasin v. Union of India (2020), the Supreme Court applied Puttaswamy's
proportionality test to assess the legality of internet shutdowns in Jammu and Kashmir. The
ruling emphasized that restrictions on fundamental rights must be necessary and proportionate,
even when imposed for reasons of national security.
Nonetheless, covert surveillance projects such as NATGRID, the Central Monitoring System
(CMS), and reports of spyware like Pegasus suggest that in practice, state surveillance continues
to operate with minimal transparency or accountability.
4.4. Expansion of Rights in the Digital Era
The Puttaswamy verdict laid the groundwork for recognizing various facets of digital rights.
Post-Puttaswamy, courts have acknowledged that reproductive autonomy, gender identity, and
sexual orientation fall under the umbrella of privacy.
In Navtej Singh Johar, the court struck down Section 377 of the IPC, partially relying on
Puttaswamy to argue that choices about sexual orientation are a matter of personal privacy and
dignity. Similarly, in Joseph Shine v. Union of India (2018), the court decriminalized adultery,
reinforcing the autonomy and agency of individuals in personal relationships.
5. Challenges and Criticisms
5.1. Enforcement Gaps
Although Puttaswamy laid down an inspiring constitutional vision, its implementation remains
patchy. The lack of a strong and independent data protection authority hampers enforcement.
Furthermore, citizens have limited avenues to challenge data breaches or intrusive surveillance
due to procedural hurdles.
5.2. Executive Overreach and National Security
The executive continues to invoke national security to bypass privacy concerns. The broad scope
of government exemptions in the Digital Personal Data Protection Act allows surveillance
without adequate safeguards, creating potential for misuse. Judicial deference to the executive in
matters of national security has further diluted the practical application of Puttaswamy’s
principles.
5.3. Private Sector and Big Tech
While Puttaswamy focuses primarily on state accountability, private companies—especially
digital platforms—collect, process, and monetize user data on a massive scale. The asymmetry of
power between corporations and consumers means that informed consent is often a legal fiction.
The law still lacks effective mechanisms to hold these entities accountable under the privacy
framework.
5.4. Technological Challenges
Emerging technologies such as artificial intelligence, facial recognition, and predictive analytics
pose new threats to privacy. The current legal framework is ill-equipped to regulate algorithmic
profiling, data-driven surveillance, and biometric tracking, which often occur without the
individual’s knowledge or consent.
6. Comparative Perspectives
Globally, privacy is increasingly recognized as a fundamental human right. The European
Union’s General Data Protection Regulation (GDPR) represents the gold standard in data
protection, emphasizing consent, purpose limitation, and user control.
In contrast, India’s privacy regime, even post-Puttaswamy, remains in transition. Unlike the
GDPR, Indian law provides broad exemptions for the government and lacks strict enforcement
mechanisms. Learning from global best practices could help India design a more robust and
rights-respecting data protection framework.
7. Conclusion
The Justice K.S. Puttaswamy judgment is a transformative milestone in Indian constitutional
history. It recognizes that the right to privacy is foundational to human dignity, freedom, and
democratic life. The judgment rightly locates privacy within the broader matrix of autonomy and
liberty, making it a cornerstone of citizen empowerment in the digital age.
However, realizing the potential of Puttaswamy requires more than judicial articulation. It
demands robust institutional frameworks, legislative reforms, technological safeguards, and a
cultural shift toward respecting privacy as a social value. As India moves deeper into a data-
driven future, balancing innovation with individual rights will be one of the defining challenges
of our times.
References
1. Justice K.S. Puttaswamy (Retd.) v. Union of India, (2017) 10 SCC 1.
2. M.P. Sharma v. Satish Chandra, AIR 1954 SC 300.
3. Kharak Singh v. State of Uttar Pradesh, AIR 1963 SC 1295.
4. Gobind v. State of M.P., (1975) 2 SCC 148.
5. R. Rajagopal v. State of Tamil Nadu, (1994) 6 SCC 632.
6. People’s Union for Civil Liberties v. Union of India, (1997) 1 SCC 301.
7. Navtej Singh Johar v. Union of India, (2018) 10 SCC 1.
8. Common Cause v. Union of India, (2018) 5 SCC 1.
9. Anuradha Bhasin v. Union of India, (2020) 3 SCC 637.
10. Digital Personal Data Protection Act, 2023.
11. Bhandari, Vrinda. "Privacy and the Indian Constitution: A Commentary on the
Puttaswamy Judgment." Indian Law Review, vol. 1, no. 2, 2017, pp. 1–25