Fundamental Right to Privacy, Informational Autonomy & Proportionality Standard Decided August 24, 2017

Justice K.S. Puttaswamy (Retd.) and Another v. Union of India and Others

Official Law Report Citations (2017) 10 SCC 1 | AIR 2017 SC 4161 | 2017 INSC 652 | (2017) 10 SCALE 1

Bench Composition / Coram 9-Judge Constitution Bench: Hon'ble Mr. J.S. Khehar, C.J., J. Chelameswar, S.A. Bobde, R.K. Agrawal, Rohinton Fali Nariman, A.M. Sapre, D.Y. Chandrachud, Sanjay Kishan Kaul, and S. Abdul Nazeer, JJ. (Unanimous 9:0)

Statutory Provisions & Mappings: Article 21 Right to Privacy Informational Privacy 4-Prong Proportionality Test M.P. Sharma & Kharak Singh Overruled Bodily & Spatial Autonomy

Precedential Crux & Golden Rule:

In a unanimous 9-Judge Bench landmark ruling, the Supreme Court declared the Right to Privacy to be a fundamental and inalienable right protected under Article 21 and Part III of the Constitution; overruled M.P. Sharma (8 Judges) and Kharak Singh (6 Judges) to the extent they held privacy was not constitutionally protected; and established the strict 4-prong Proportionality Test (Legality, Legitimate State Aim, Proportionality/Suitability, and Procedural Safeguards) governing any state infringement upon privacy.

Official Supreme Court Judgment Record Certified Copy

Complete verbatim judicial transcript, 9-judge bench opinions, ratio decidendi, and constitutional declarations.

Download PDF

1. Comprehensive Factual Matrix & Procedural Trajectory

The constitutional reference in Justice K.S. Puttaswamy (Retd.) v. Union of India originated from a writ petition filed under Article 32 of the Constitution in 2012 by 91-year-old retired Karnataka High Court judge, Justice K.S. Puttaswamy. The petitioner challenged the Union Government's Aadhaar scheme, rolled out via executive notifications of the Planning Commission and UIDAI. The scheme mandated collecting demographic data and biometric identifiers—ten fingerprints and iris scans—from all residents without enabling legislation or surveillance safeguards.

Before a three-Judge Bench, the Union of India, through the Attorney General, raised a threshold objection: that the Indian Constitution does not recognize any fundamental right to privacy, contending that the framers intentionally omitted a Fourth Amendment analogue. The State relied on two Constitution Bench decisions:

M.P. Sharma v. Satish Chandra (1954) SCR 1077 (8-Judge Bench): Upholding search warrants under Sections 94 and 96 CrPC 1898, the Bench observed that the Indian Constitution contained no Fourth Amendment analogue guaranteeing privacy.
Kharak Singh v. State of U.P. (1962) 1 SCR 332 (6-Judge Bench): Evaluating police surveillance, the majority held by 4:2 that privacy was not a guaranteed fundamental right, though domiciliary night visits were voided under Article 21.

The petitioners cited four decades of subsequent jurisprudence from smaller benches—including Gobind (1975), R. Rajagopal (1994), PUCL (1997), and Selvi (2010)—which affirmed that privacy was an integral facet of personal liberty under Article 21.

Faced with this direct conflict between larger and smaller benches, a three-Judge Bench referred the matter to a Constitution Bench. On July 18, 2017, a five-Judge Bench referred the question—whether privacy is a fundamental right under Part III—to a specially constituted nine-Judge Constitution Bench.

2. Specific Legal Issues & Questions of Law Framed

Fundamental Right Status of Privacy: Does the Constitution of India recognize and guarantee a fundamental right to privacy, and what is its normative basis and constitutional location within Part III?
Correctness of M.P. Sharma & Kharak Singh: Did the 8-Judge Bench in M.P. Sharma and the 6-Judge Bench in Kharak Singh correctly hold that privacy is not a fundamental right, or do those decisions require express overruling?
Interplay of Part III Freedoms: Does privacy emanate solely from Article 21, or does it arise from the golden triangle of Articles 14, 19, and 21 protecting human dignity and autonomy?
Dimensions and Facets of Privacy: What are the recognized dimensions of privacy in the digital era—specifically regarding spatial privacy, bodily autonomy, decisional integrity, and informational self-determination?
Constitutional Review & Proportionality Standard: What legal standard applies when the State encroaches upon personal privacy, and what mandatory criteria must state legislation satisfy?

3. Authoritative Ratio Decidendi & Binding Legal Principles

1. Privacy Declared an Inalienable Fundamental Right: The 9-Judge Constitution Bench unanimously held that the Right to Privacy is an intrinsic fundamental right protected under Part III of the Constitution. Privacy is an inalienable, natural human right inhering in every individual by virtue of human dignity. It is not an indulgence granted by the State. Anchored primarily in Article 21, privacy simultaneously animates the freedoms guaranteed under Articles 14, 19, 20, and 25.

2. Express Overruling of Inconsistent Precedents: The Supreme Court authoritatively settled decades of doctrinal discord:

M.P. Sharma v. Satish Chandra (1954): Overruled to the extent it held or observed that the Constitution does not guarantee a fundamental right to privacy.
Kharak Singh v. State of U.P. (1962): The majority opinion of four Judges was expressly overruled to the extent it denied privacy constitutional protection. The minority dissent of Hon'ble Mr. Justice K. Subba Rao—holding that Article 21 encompasses privacy and bars warrantless surveillance—was approved as correct law.
ADM Jabalpur v. Shivkant Shukla (1976): Formally declared fundamentally flawed, affirming that human rights to life and liberty cannot be extinguished by the State even during an emergency. The dissent of Justice H.R. Khanna was affirmed as the true law of the Constitution.
Suresh Kumar Koushal v. Naz Foundation (2014): Decisively repudiated, ruling that sexual orientation, gender identity, and choice of partner are intrinsic dimensions of privacy and dignity under Article 21.

3. The Strict 4-Prong Proportionality Test: Privacy is not absolute, but any state encroachment must satisfy the strict four-fold constitutional standard:

(i) Legality: The existence of a valid, enacted statutory law. Mere executive circulars cannot abridge privacy.
(ii) Legitimate State Aim: The law must pursue a clearly demonstrable legitimate state objective falling within permissible restrictions under Part III.
(iii) Proportionality / Suitability: There must be a rational nexus between the state objective and the measure adopted. The State must adopt the least intrusive alternative to achieve its purpose without causing disproportionate encroachment.
(iv) Procedural Safeguards & Institutional Oversight: The statute must contain robust procedural guarantees, independent oversight, and effective remedies against abuse.

4. Authoritative Individual Judicial Holdings: The individual opinions articulated the operational dimensions of privacy:

Dr. D.Y. Chandrachud, J. (for himself, Khehar CJI, Agrawal & Nazeer JJ.): Formulated the core architecture of privacy across spatial, bodily, and informational spheres, establishing that privacy protects individual autonomy and guarantees informational self-determination.
Rohinton Fali Nariman, J.: Classified privacy into physical privacy barring bodily/spatial intrusion, informational privacy preventing unauthorized data dissemination, and privacy of choice protecting decisional autonomy.
J. Chelameswar, J.: Held that privacy represents the core of personal liberty—the "right to be left alone"—encompassing repose, sanctuary, and intimate choices against authoritarianism.
S.A. Bobde, J.: Observed that privacy is an indispensable condition for fundamental freedoms, inextricably linked to individual consent and bodily sovereignty.
Sanjay Kishan Kaul, J.: Addressed big data analytics, profiling, and digital surveillance, explicitly recognizing the "Right to be Forgotten" as an essential facet of digital self-determination.

4. Significant Obiter Dicta & Institutional Observations

The Bench articulated profound institutional observations on governance and digital liberty:

Privacy is Not an Elitist Luxury: The Court emphatically rejected the State's submission that privacy is a bourgeois concept that impoverished citizens would trade for welfare. Dr. Justice D.Y. Chandrachud observed that poverty makes human dignity even more vital; forcing citizens to surrender bodily and informational integrity for food rations violates constitutional morality. Civil liberties and socio-economic rights are coequal.
Bulwark Against Digital Totalitarianism: Justices Chelameswar and Kaul warned against an omnipresent digital surveillance state. In an era where algorithmic profiling can track every citizen's communications and movements, unchecked state surveillance creates a chilling effect on intellectual dissent and democracy.
Recognition of the Right to be Forgotten: Justice Kaul observed that individuals must not be perpetually condemned in digital cyberspace by past errors that have lost public relevance, affirming their right to seek removal of outdated personal data.
Need for a Robust Data Protection Regime: The Bench noted that existing provisions under Section 43A of the IT Act, 2000 were inadequate and urged the Union Government to enact a comprehensive data protection statute based on the Justice B.N. Srikrishna Committee report.

5. Operative Verdict & Dispositive Relief

The unanimous operative order signed by all nine Judges of the Constitution Bench rendered the following dispositive relief:

Declaration of Fundamental Right: The Right to Privacy is declared to be a fundamental right protected under Article 21 and Part III of the Constitution.
Overruling of Past Precedents: The decisions in M.P. Sharma v. Satish Chandra (1954) and Kharak Singh v. State of U.P. (1962) to the extent they held privacy was not a fundamental right stand overruled.
Reference Answered: The reference was answered conclusively in the affirmative. The writ petitions challenging the statutory validity of the Aadhaar Act, 2016 were remitted to the regular five-Judge Bench for determination on merits under the proportionality test.

6. Statutory Analysis & Comparative Legislative Mapping

The constitutional holding in Puttaswamy reshaped Indian legislative architecture, establishing the foundational jurisprudence for modern data governance, surveillance oversight, and digital criminal procedure:

Subject Matter & Statutory Domain	Pre-Puttaswamy Legislative Framework	Modern Enactment & Codification Impact Post-Puttaswamy
Article 21 Right to Privacy vs. Data Governance Consent Architecture	Section 43A IT Act, 2000 and SPDI Rules, 2011; restricted to narrow corporate compensation for sensitive data; zero statutory rights for individuals to access, correct, or erase data.	Digital Personal Data Protection Act, 2023 (DPDPA): Directly translates Puttaswamy informational privacy into law. Codifies Data Principals, Data Fiduciaries, and statutory rights to correction and erasure (Section 12), with penalties up to ₹250 Crores enforced by the Data Protection Board of India.
IT Act 2000 (Sec 43A, 66A, 69, 79) Surveillance & Intermediary Safe Harbor	Section 69 IT Act read with 2009 Interception Rules; purely executive review committees without independent judicial scrutiny; Section 66A struck down in Shreya Singhal for vagueness.	IT Intermediary Rules, 2021 & Telecommunications Act, 2023: Executive surveillance orders subjected to strict Puttaswamy proportionality review. Traceability mandates under Rule 4(2) challenged before High Courts as disproportionate infringements on end-to-end encryption.
Digital Device Seizures under CrPC vs. BNSS Device Forensics & Passwords	Sections 91, 94, and 100 CrPC, 1973; unbridled police discretion to seize laptops and phones without generating hash values, cloning data, or filtering privileged communications.	Sections 94, 107 & 185 BNSS, 2023 read with Section 63 BSA: Mandates videography of search and seizure procedures. Supreme Court device seizure guidelines require generation of on-site cryptographic hash certificates and prohibit fishing expeditions into personal data.
Aadhaar Act, 2016 vs. Private Commercial Exploitation Corporate Biometric Demands	Section 57 of the Aadhaar Act, 2016 allowed private corporations, fintech entities, and telecom companies to mandate Aadhaar authentication for private contracts and SIM cards.	*Section 57 Struck Down in Puttaswamy II (2019):* Commercial biometric access by private corporations declared unconstitutional. Mandatory linking with mobile numbers and bank accounts invalidated for failing the proportionality test.

7. Subsequent Judicial Treatment & Precedential Lineage

Puttaswamy stands as the fountainhead of contemporary Indian constitutionalism, powering landmark judgments across civil, criminal, and digital domains through 2026:

Navtej Singh Johar v. Union of India (2018) 10 SCC 1: Struck down Section 377 IPC criminalizing consensual homosexual acts, affirming that sexual identity resides at the core of human dignity and personal privacy.
Joseph Shine v. Union of India (2019) 3 SCC 39: Struck down Section 497 IPC (adultery), ruling that treating a married woman as chattel violates her fundamental rights to dignity and bodily privacy.
Justice K.S. Puttaswamy (Aadhaar-5J) v. Union of India (2019) 1 SCC 1: Upheld welfare authentication under Section 7 Aadhaar Act, but struck down Section 57 (private access) and mandatory linking with bank accounts and SIM cards.
Anuradha Bhasin v. Union of India (2020) 3 SCC 637: Applied the proportionality test to internet shutdown orders in Jammu & Kashmir, holding that indefinite telecommunications suspensions violate Articles 19 and 21.
Manohar Lal Sharma (Pegasus) v. Union of India (2021) SCC OnLine SC 985: Held that the State cannot raise an omnibus plea of "national security" to block judicial scrutiny when state surveillance via Pegasus spyware is alleged.
Association for Democratic Reforms v. Union of India (Electoral Bonds) (2024) 5 SCC 1 / 2024 INSC 113: A unanimous 5-Judge Constitution Bench invalidated the Electoral Bond Scheme, applying the Puttaswamy four-stage proportionality framework to hold that blanket corporate donor secrecy failed the necessity prong.
Supreme Court Digital Device Seizure Guidelines (2023–2026): Directed the Union to frame binding guidelines regulating device seizures, enforcing mandatory cryptographic hash generation and screening of privileged files.
Enactment of DPDPA 2023 & High Court Jurisprudence (2024–2026): Digital Personal Data Protection Act, 2023 codified the Puttaswamy mandate. High Courts in Delhi and Karnataka routinely direct search engines to de-index acquitted persons under the Right to be Forgotten.

8. Practical Litigation Playbook & Strategic Checklist

Litigation Playbook: Enforcing the Puttaswamy Privacy Doctrine in Practice

A. For Claimants & Petitioners Challenging Surveillance, Data Profiling, or Identity Linking

Frame Writ Petitions on the Four-Prong Proportionality Test: Systematically structure challenges under Article 226 or 32 around: (1) Absence of primary statutory enactment; (2) Absence of legitimate state aim; (3) Failure of proportionality/least restrictive alternative; and (4) Lack of independent oversight.
Challenge Illegal Wiretapping & Interception: Where state agencies intercept calls or access Call Data Records (CDRs) without written approval from the Home Secretary under Section 5(2) Telegraph Act, file a writ petition challenging the surveillance as ultra vires Article 21 and seek destruction of intercepted logs.
Enforce the Right to be Forgotten: When acquitted persons suffer reputational harm from online search results, serve a statutory notice under Section 12 DPDPA 2023 and Rule 3(1)(b) IT Intermediary Rules 2021 demanding de-indexing, followed by a High Court writ petition citing Puttaswamy.
Resist Private Commercial Demands for Aadhaar: If private banks, telecoms, or schools insist on mandatory Aadhaar submission, issue a cease-and-desist notice citing Paragraph 57 of Puttaswamy II and lodge a complaint before consumer forums or the Data Protection Board.

B. For Defence Counsel Representing Accused Facing Digital Evidence or Device Seizures

Quash Digital Device Seizures Without Hash Values: When investigating agencies seize phones or laptops under Section 107 BNSS / Section 94 CrPC, verify whether a cryptographic hash certificate (SHA-256) was generated on-site. If unhashed devices were transported, move the Magistrate challenging evidentiary integrity and informational privacy.
Resist Compelled Password & Biometric Unlocking: If the prosecution seeks an order directing the accused to disclose cloud credentials or encryption keys, resist under Article 20(3) self-incrimination read with Puttaswamy cognitive privacy, insisting that mental knowledge cannot be extracted through state coercion.
Exclude Illegally Intercepted Audio Tapes: During trial, challenge intercepted telephone calls under Section 63 BSA. If mandatory 60-day review committee orders under Rule 419A are missing, move for exclusion of audio files as constitutionally tainted evidence.

C. For Public Prosecutors & State Legal Advisors Defending Regulatory Actions

Plead Explicit Statutory Backing in Counter-Affidavits: Ensure that all state surveillance, CCTV deployments, and database registrations cite specific primary statutory provisions rather than executive circulars or inherent powers.
Satisfy the Proportionality Burden with Empirical Evidence: Build a contemporaneous factual record demonstrating that data processing is strictly limited to legitimate public objectives and that data minimization, role-based access, and automated purging protocols are strictly observed.
Ensure Strict Compliance with Digital Evidence Mandates: Advise investigating officers to comply scrupulously with Section 105 BNSS mandatory videography and Section 63 BSA hash-value certificates during device seizures to safeguard prosecution evidence against constitutional exclusion.

Previous Precedent All Landmark Precedents Next Precedent