Privacy

1. Meaning and importance in digital governance

Privacy is the protected sphere within which people exercise autonomy over their bodies, personal relationships, decisions, communications and information. Informational privacy concerns how information about a person is collected, linked, analysed, retained and disclosed. A name need not appear in a dataset for it to raise privacy concerns: location histories, device identifiers or combinations of demographic attributes may identify an individual. Similarly, pseudonymisation replaces direct identifiers but does not necessarily make re-identification impossible.

Digital governance makes privacy a public-administration issue rather than merely a matter of individual preference. Welfare portals, digital health records, educational databases, policing systems and municipal applications routinely process personal information. Integration can improve service delivery, but linking datasets also creates detailed profiles that citizens never knowingly supplied. Poor households may be especially vulnerable because refusing data collection can appear to threaten access to essential benefits.

Privacy supports dignity, freedom of expression, association and democratic participation. People who expect constant monitoring may avoid lawful dissent, sensitive medical treatment or reporting misconduct. It also has an instrumental value: confidence that information will not be misused encourages adoption of digital services. Privacy should therefore be understood as an enabling condition for legitimate digital government, not simply an obstacle to administrative efficiency.

• Privacy asks whether information should be collected or used; cybersecurity asks how systems and information are protected.
• Confidentiality limits access to information; privacy also addresses the legitimacy, purpose and consequences of processing.
• A technically secure database can still violate privacy through excessive collection or unjustified profiling.

2. Constitutional foundation and judicial safeguards

In the 2017 Puttaswamy judgment, the Supreme Court recognised privacy as a fundamental right intrinsic to life and personal liberty under Article 21 and to the freedoms guaranteed by Part III. The judgment rejected the proposition that privacy is an elitist concern: dignity and autonomy belong equally to people who depend on public welfare. It also recognised the need for safeguards against privacy threats from both the State and non-State actors.

Privacy is not absolute. State interference must have a legal basis, pursue a legitimate State aim and satisfy proportionality, with safeguards against abuse. In practice, an authority should establish why an intervention is necessary, whether a less intrusive alternative exists and whether its benefits justify its impact on rights. A broad claim of efficiency or national security should not eliminate scrutiny of the measure's design and safeguards.

In the 2018 Aadhaar judgment, the Supreme Court upheld the core Aadhaar framework, including its use under Section 7 for specified publicly funded benefits, while invalidating or limiting certain uses. It struck down the part of Section 57 that enabled private entities to use Aadhaar authentication merely on the basis of a contract. Later legislative changes introduced routes for voluntary use subject to conditions, so the judgment should not be described as a timeless prohibition on every private-sector use.

For administrators, constitutional compliance requires more than obtaining a consent checkbox. A mandatory public-service system needs lawful authority, a defensible purpose, proportionate collection and accessible remedies. Authentication failures must not translate into arbitrary exclusion from entitlements.

3. Statutory framework and institutional design

The Digital Personal Data Protection Act, 2023 establishes a framework for processing digital personal data. Its scope includes data collected digitally and data collected offline and subsequently digitised. It also covers processing outside India when connected with offering goods or services to Data Principals within India. Personal or domestic processing and specified publicly available personal data fall outside its application. Operational obligations must be read with notified commencement provisions and applicable rules.

The Act permits processing for a lawful purpose on the basis of consent or specified legitimate uses. Consent must be free, specific, informed, unconditional and unambiguous, with clear affirmative action. Legitimate uses include defined circumstances involving State services, medical emergencies, disasters and employment. These are statutory grounds, not a general permission for any processing that an organisation considers useful.

Data Fiduciaries have obligations concerning security safeguards, breach notification, grievance redressal and erasure, subject to legal retention requirements. Data Principals receive rights concerning access to information about processing, correction, completion, updating, erasure, grievance redressal and nomination. The Act does not create general rights to data portability or to object to every automated decision. Children are generally persons below 18; the law provides additional protections, including verifiable parental consent, subject to permitted exemptions.

The framework provides for the Data Protection Board of India and additional obligations for designated Significant Data Fiduciaries, including an India-based Data Protection Officer, independent data audits and impact assessments. Important policy debates concern executive influence over institutional design, government exemptions and the relationship between data protection and access to information. The Act also contains an amendment to the RTI Act's personal-information exemption, whose application must be checked against commencement notifications.

4. Principal risks in public digital systems

Function creep occurs when information collected for one purpose is reused for another without adequate justification. A welfare database may gradually become an input for unrelated enforcement or profiling. Interoperability magnifies this risk because common identifiers make linkage inexpensive. Centralised repositories can also increase the scale of harm when credentials are compromised, insiders misuse access or bulk records are exposed.

Surveillance systems raise distinct concerns. Facial recognition, communications interception and location monitoring may pursue legitimate objectives, but indiscriminate collection can chill lawful conduct and disproportionately affect vulnerable groups. Algorithmic profiling can reproduce existing discrimination when historical data reflect unequal policing, uneven access to services or inaccurate records. Privacy assessment must therefore examine group-level consequences as well as individual disclosures.

Consent alone is an inadequate safeguard where bargaining power is unequal. Long notices, unfamiliar languages, dark patterns and dependence on essential services weaken meaningful choice. Outsourcing adds another layer: a department may rely on vendors, cloud providers and subcontractors while citizens remain uncertain about responsibility. Public disclosure also needs restraint; transparency about expenditure does not automatically justify publishing beneficiaries' bank details, health information or full identification numbers.

5. A rights-respecting administrative approach

Privacy by design incorporates safeguards before a service is launched. Departments should map data flows, establish lawful purposes, collect only necessary fields and define retention schedules. High-risk projects require impact assessment covering necessity, proportionality, security, exclusion and potential discrimination. Purpose-specific identifiers, aggregation and carefully designed access controls can reduce unnecessary linkage without preventing legitimate coordination.

Implementation requires encryption, role-based access, audit logs, periodic security testing and credible breach-response procedures. Vendor contracts should specify processing limits, security standards, deletion duties and restrictions on onward sharing. Security audits should be complemented by privacy audits: a system can pass technical testing while retaining data indefinitely or using it for unjustified purposes.

Citizens need understandable notices, accessible grievance channels and assisted alternatives where digital processes create exclusion. Independent oversight and reasoned review are particularly important for surveillance and exemptions. Transparency should focus on procurement, system purposes, audit findings and aggregate outcomes, while personal information is disclosed only where legally justified. The guiding principle is to make public institutions answerable without making citizens unnecessarily exposed.

Previous year questions

Practice questions