Right to Privacy as a Fundamental Right

The recognition of privacy as a fundamental right in India rests on the unanimous judgment of a nine-judge bench of the Supreme Court in Justice K.S. Puttaswamy (Retd.) v. Union of India (2017) 10 SCC 1, delivered on 24 August 2017. The bench held that the right to privacy is intrinsic to the right to life and personal liberty guaranteed by Article 21 of the Constitution and is also distributed across the freedoms protected by Part III. The decision overruled two earlier authorities that had denied privacy constitutional status: M.P. Sharma v. Satish Chandra (1954), an eight-judge bench, and Kharak Singh v. State of Uttar Pradesh (1962), a six-judge bench. Puttaswamy located privacy not only in Article 21 but in the dignity guarantee of the Preamble, in Article 19 freedoms, and in the protection against self-incrimination under Article 20(3), treating it as a constitutional value rather than a single textual provision.

Procedurally, Puttaswamy arose as a reference. A challenge to the Aadhaar biometric identity scheme had reached a constitution bench, where the Union government argued that no fundamental right to privacy existed because of the binding weight of M.P. Sharma and Kharak Singh. To resolve this threshold question the matter was referred to a nine-judge bench, the size chosen precisely to overrule the larger earlier benches. The nine judges answered only the antecedent question — whether privacy is a fundamental right — and remitted the Aadhaar merits to a smaller bench, which decided them separately in Puttaswamy II (2018). The court delivered six concurring opinions reaching a single conclusion, with the lead opinion authored by Justice D.Y. Chandrachud.

The most consequential procedural output of Puttaswamy is the test it prescribed for any state action that infringes privacy. Because privacy is rooted in Article 21, restrictions must satisfy the requirement of a fair, just and reasonable procedure established in Maneka Gandhi v. Union of India (1978). The court distilled a three-fold (later articulated as four-fold) proportionality standard: first, the restriction must rest on the authority of a valid law (legality); second, it must serve a legitimate state aim; third, the means must be proportionate and rationally connected to that aim; and the Aadhaar bench added a fourth limb requiring procedural safeguards against abuse. This framework now governs surveillance, data collection, and bodily-autonomy questions across Indian constitutional litigation.

The doctrine has driven concrete outcomes in named institutions. In Navtej Singh Johar v. Union of India (2018) the Supreme Court relied on Puttaswamy to read down Section 377 of the Indian Penal Code, decriminalising consensual same-sex relations. In Joseph Shine v. Union of India (2018) the court struck down the adultery offence under Section 497 IPC. The Ministry of Electronics and Information Technology framed the Digital Personal Data Protection Act, enacted by Parliament in August 2023, as the legislative response to Puttaswamy's call for a data-protection regime, following the Justice B.N. Srikrishna Committee report of 2018. Privacy reasoning also underpinned challenges to the 2021 Information Technology (Intermediary Guidelines) Rules and to telephone-interception practices under Section 5(2) of the Indian Telegraph Act, 1885.

Privacy as a fundamental right must be distinguished from adjacent concepts. It is broader than data protection, which concerns informational privacy alone, whereas Puttaswamy also covers decisional autonomy (choices about marriage, procreation, sexual orientation) and bodily privacy. It differs from the common-law tort of breach of confidence, which operates horizontally between private parties; a fundamental right is primarily enforceable against the state under Articles 32 and 226. It is also narrower in textual basis than the American Fourth Amendment, which targets unreasonable searches specifically, and unlike the European Union's General Data Protection Regulation it is a judicially declared constitutional principle rather than a comprehensive statutory code.

Controversies persist over the limits of the right. The Aadhaar judgment of 2018 upheld the scheme's core by a 4-1 majority while striking down Section 57, which had permitted private companies to demand Aadhaar authentication; Justice Chandrachud dissented, holding the entire Aadhaar Act unconstitutional for having been passed as a money bill. The 2023 data-protection statute drew criticism for broad governmental exemptions and for amending the Right to Information Act, which critics argue dilutes transparency in the name of personal privacy. Surveillance disputes, including the 2021 Pegasus spyware allegations that prompted a Supreme Court-appointed technical committee, expose the gap between the declared right and operative safeguards, since interception in India still lacks prior judicial authorisation.

For the working practitioner, Puttaswamy is foundational reading because it converts privacy from a contested claim into a justiciable constitutional baseline against which executive and legislative action is measured. A desk officer evaluating data-sharing agreements, a policy researcher assessing surveillance legislation, or an analyst tracking India's negotiating posture on cross-border data flows must apply the four-fold proportionality test as the controlling domestic standard. The judgment situates India within a global constitutional conversation on dignity and autonomy, and its reasoning is increasingly cited in comparative jurisprudence across South Asia and the Commonwealth, making fluency in its holding essential for anyone engaging Indian rights discourse.