Right to Privacy in India: Puttaswamy Judgment (2017)

What were the facts behind the Puttaswamy case?

In 2012, retired High Court judge Justice K.S. Puttaswamy filed a petition challenging the Aadhaar scheme, which collected biometric and demographic data of residents. He argued that this violated privacy.

The Government argued that privacy was not a guaranteed fundamental right. It relied on two old decisions, M.P. Sharma (1954, an eight-judge bench) and Kharak Singh (1962, a six-judge bench), which had not recognised such a right.

Because those benches were larger than or equal to the one hearing the Aadhaar petition, the question was referred to a nine-judge bench. It decided on 24 August 2017.

What was the legal question?

The Constitution does not use the word “privacy”. The question was whether it is nonetheless protected as part of life, liberty and dignity.

• Is there a fundamental right to privacy under the Constitution?
• If so, where does it come from: Article 21, Article 19, Article 14 or other provisions?
• Were M.P. Sharma and Kharak Singh correct?

Need help with this? Read our guide to Ask a Lawyer a Free Question.

What did the court hold on the right to privacy?

The nine judges unanimously held that the right to privacy is a fundamental right. It is protected as an intrinsic part of the right to life and personal liberty under Article 21, and as part of the freedoms guaranteed by Part III. Several separate opinions were written.

M.P. Sharma and Kharak Singh were overruled to the extent that they said there is no such right. The Court also said that the majority view in ADM Jabalpur (1976), the habeas corpus case from the Emergency, was wrong.

Privacy covers bodily integrity, personal autonomy in decisions about family, marriage and sexual orientation, and informational privacy. Informational privacy means control over personal data, which matters greatly in the digital age.

When can the State limit privacy?

Privacy is not absolute. The plurality opinion by Justice D.Y. Chandrachud set out the tests that any restriction must pass, building on the “fair, just and reasonable” standard from Maneka Gandhi (1978).

• Legality: there must be a law that authorises the interference.
• Legitimate aim: the law must serve a genuine State purpose, such as national security or welfare benefits.
• Proportionality: the interference must be necessary and not excessive for that aim.

How has the Puttaswamy judgment shaped later cases?

In the Aadhaar judgment (2018), a Constitution Bench upheld the Aadhaar Act by a 4–1 majority but struck down parts, including limits on private companies demanding Aadhaar. Justice Chandrachud dissented.

Privacy reasoning featured in Navtej Singh Johar (2018), which read down Section 377 IPC for consenting adults, and in Joseph Shine (2018), which struck down the adultery offence. Courts have also applied it in cases on surveillance, medical records and reproductive choices.

Parliament enacted the Digital Personal Data Protection Act, 2023, which regulates how organisations handle personal data. It is a statutory step that followed the constitutional recognition of privacy.

How does privacy affect criminal procedure?

Police searches, phone interception, DNA collection and electronic evidence all raise privacy questions. Under the BNSS and the Bharatiya Sakshya Adhiniyam, 2023 (replacing the Evidence Act), investigators must follow the procedure laid down by law, and courts can examine whether the intrusion was proportionate.

Evidence collected in a manner that offends the law is not automatically excluded in India, but courts weigh how it was obtained along with its relevance.

What does the right to privacy mean for you?

You have a constitutional right to protect your personal information, your body and your personal choices from unjustified interference by the State. You can approach the High Court or Supreme Court if a government action violates it.

Where a private body mishandles your data, the DPDP Act, 2023 gives you rights such as seeking correction or erasure of data. A free question to an advocate can help you decide whether to send a legal notice or file a complaint.

Why were six separate opinions important despite a unanimous result?

The nine judges agreed on the constitutional status of privacy, but the judgment contains six opinions rather than one account adopted word for word by every judge. Justice D.Y. Chandrachud wrote for four judges; five others wrote separately. Their explanations explore dignity, liberty, autonomy and the constitutional limits of State power from different perspectives. This matters when extracting a legal test: unanimity on the existence of a right does not mean that every illustration or formulation in a particular opinion was unanimously endorsed by the entire bench.

For students and practitioners, the safest starting point is the common holding that privacy is protected by Article 21 and the guarantees of Part III. More detailed propositions should be attributed to the opinion that develops them, then checked against later cases applying the principle. This method avoids presenting a useful observation as though it were a unanimous legislative code. It also shows why constitutional privacy cannot be reduced to a single checklist detached from the particular freedom, intrusion and legal setting involved in the dispute before the court.

Can you lose all privacy by entering a public place?

Privacy is not limited to the home or to information that nobody else has ever seen. A person can move through public spaces while retaining interests in bodily integrity, personal choices and the systematic collection of information about their movements. The constitutional question concerns the nature and scale of the intrusion, not merely whether an individual was physically visible. Persistent tracking, aggregation and profiling can reveal patterns that an isolated observation would never disclose, making context and technological capacity important to a legal assessment.

This does not mean that every photograph, CCTV camera or observation in public automatically violates the Constitution. A court must consider legal authority, purpose, proportionality and the safeguards appropriate to the interference. For example, a challenge to a surveillance programme should identify what data is collected, who can access it, how long it is retained and whether independent oversight exists. Broad claims that public space eliminates privacy, or that privacy prohibits all public surveillance, both miss the contextual nature of the constitutional protection recognised by the judgment.

How does privacy protect people who depend on welfare benefits?

One of the judgment’s important themes is that privacy is not a luxury reserved for affluent people. Those who rely on public services also have interests in dignity, bodily integrity and control over personal information. Welfare administration can require reliable identification and records, but dependence on assistance does not itself justify unlimited collection or exposure of intimate details. A constitutional assessment must examine how a scheme achieves its legitimate purposes while avoiding unnecessary intrusion, exclusion or disclosure of information unrelated to those purposes.

A practical challenge should therefore avoid framing welfare and privacy as mutually exclusive choices. Relevant questions include whether less intrusive verification is feasible, whether information is used beyond the original purpose, and what happens when authentication fails. These are issues to investigate, not assumptions that every identification system is invalid. The 2017 bench established the constitutional foundation; specific schemes require separate examination of their legislation, design and evidence. This distinction helps citizens make focused claims without mistakenly treating the recognition of privacy as a blanket prohibition on collecting data for public administration.

Does a private company’s data misuse always justify a constitutional writ?

Puttaswamy recognised that threats to privacy can arise from private actors and discussed the State’s role in protecting individuals. That does not mean every disagreement with a platform, employer or shop automatically becomes a maintainable writ petition against that business. The respondent’s legal status, the public nature of any duty and the remedy sought all matter. Constitutional principles may inform legislation and other legal duties, while the immediate remedy can lie in contract, consumer law, criminal law or an applicable data-protection framework rather than direct constitutional litigation.

The Digital Personal Data Protection Act, 2023 must also be distinguished from the constitutional right. Before advising someone to exercise a statutory right or complain to a designated body, check the relevant commencement notifications, rules, scope and operative procedures. Enactment alone does not establish that every provision or remedy is available for every incident on a given date. Nor does the statute cover every possible privacy harm: bodily intrusion, intimate-image abuse and interference with personal decisions can engage other legal provisions and urgent remedies independent of a general personal-data complaint.

What should you do after an intimate-data leak or intrusive demand?

Preserve evidence without unnecessarily circulating the material further. Save relevant messages, dates, account identifiers, URLs and correspondence showing who obtained or disclosed the information. Record what consent, if any, was requested and the purpose stated at the time of collection. If intimate images are involved, avoid forwarding them widely merely to prove the complaint; use appropriate reporting channels and obtain advice about secure preservation. Where there are threats, coercion, stalking or a risk to physical safety, prompt police assistance may be more urgent than a lengthy constitutional petition.

For an intrusive official demand, ask for its legal basis, scope and purpose, while avoiding obstruction of a lawful investigation. A lawyer can assess whether to seek narrowing, confidentiality safeguards, interim protection or judicial review. Where publication is involved, privacy must also be balanced against expression and legitimate public interest; an embarrassing report is not automatically unlawful. The strongest practical claim identifies the information or decision protected, the particular intrusion, the responsible actor and a workable remedy, rather than relying only on the general statement that privacy is a Fundamental Right.