Right to Privacy

The right to privacy protects an individual’s body, home, communications, personal information and intimate choices from arbitrary intrusion. It safeguards dignity, autonomy and personal liberty under Article 21, with overlapping protection from other Part III rights. Privacy is not absolute, but every restriction must satisfy constitutional standards.

Constitutional foundation

Article 21 provides that no person shall be deprived of life or personal liberty except according to procedure established by law. In Justice K.S. Puttaswamy (Retd.) v. Union of India (2017), a nine-judge Bench unanimously recognised privacy as a fundamental right intrinsic to life, liberty and dignity.

• Privacy is judicially recognised through constitutional guarantees rather than expressly enumerated as a separate fundamental right.
• Equality, expression, association, movement and bodily integrity may provide overlapping protection against intrusions into private life.

What privacy protects

Privacy includes bodily privacy, spatial privacy, informational privacy and decisional autonomy. It protects physical integrity, private spaces, control over personal information and the capacity to make intimate choices concerning identity and self-development.

• Informational privacy covers the collection, use, storage and disclosure of personal data and communications.
• Decisional autonomy protects personal choices concerning one’s body, identity, relationships and way of life.
• Religious belief belongs to conscience and personal identity; privacy protects the choice to hold, adopt, decline or disclose a faith.
• This protection complements Article 25, which guarantees freedom of conscience and the right freely to profess, practise and propagate religion, subject to public order, morality, health and other Part III provisions.
• The State may regulate secular activities associated with religion and enact social welfare and reform measures; privacy does not immunise otherwise regulable conduct.

Compulsory collection of personal data

Compulsory collection itself affects informational privacy because it removes an individual’s control over personal information. It is not automatically unconstitutional, but nominal consent cannot replace constitutional justification when providing data is mandatory.

• A clear law must authorise compulsory collection and identify a legitimate public purpose.
• The data demanded must be relevant and necessary for that purpose; indiscriminate or excessive collection may fail proportionality.
• Less intrusive alternatives must be considered, especially where identity, belief, health, biometrics or intimate life may be revealed.
• Purpose limitation, restricted access, secure storage, limited retention, independent oversight and effective remedies help prevent profiling, disclosure and misuse.
• The State’s positive obligation to protect privacy also supports safeguards against unjustified handling of personal data by non-State actors.

When an intrusion is valid

An invasion must satisfy legality, pursue a legitimate State aim and meet proportionality. There must be a rational connection between the measure and its aim, no equally effective less restrictive alternative, and a proper balance between public purpose and individual harm.

• Legitimate aims may include national security, prevention of crime, public order and protection of others’ rights and freedoms.
• Effective procedural safeguards are essential because surveillance and data collection create risks of arbitrariness, profiling and misuse.
• Where religious choice is affected, State action must satisfy both privacy requirements and the constitutional limitations governing freedom of religion.