Précis: A passage on data protection and the rights of the digital citizen

Sample original passage: The right of the digital citizen is the constitutional question of the present decade. Until 2017, the Indian Constitution made no explicit mention of privacy, and the courts had read the silence sometimes as protection and sometimes as its absence. The unanimous nine-judge judgment in Puttaswamy fixed the position: privacy is a fundamental right under Articles 14, 19 and 21, and any state action that infringes it must satisfy a four-fold test of legality, necessity, proportionality and procedural safeguards. The judgment, while welcome, was the easy part. The harder work is operational: building a statute that protects citizens from misuse of their data without paralysing the legitimate functions of the state, and without imposing compliance burdens so heavy that small enterprises cannot bear them. The Digital Personal Data Protection Act of 2023 is the first serious attempt at that statute. It establishes a Data Protection Board, gives the citizen rights of correction, erasure and grievance redressal, places obligations of consent and purpose-limitation on data fiduciaries, and provides exemptions for state functions in the interest of sovereignty and security. The Act has drawn criticism from three directions: civil-liberties scholars argue the state exemptions are too broadly drawn; industry argues some compliance obligations exceed international norms; and consumer advocates argue enforcement will only be as effective as the Board permits. The right resolution of these tensions cannot be found in legislative drafting alone. It will require regulatory practice that is transparent, judicial scrutiny that is rigorous, and a public that is sufficiently literate in digital rights to assert them. Without such a public, the most carefully drafted statute will protect citizens only on paper, and the digital citizen will continue to bear risks she did not consent to carry.

Model précis (≈ 240 words): The right of the digital citizen is the constitutional question of the present decade. Until 2017 the Indian Constitution did not explicitly mention privacy, and the courts had read that silence inconsistently. The Puttaswamy judgment settled the position: privacy is a fundamental right under Articles 14, 19 and 21, and state action that infringes it must satisfy a four-fold test of legality, necessity, proportionality and procedural safeguards. The judgment was the easy part. The harder work was operational: building a statute that protects citizens from misuse of their data without paralysing legitimate state functions or imposing compliance burdens that small enterprises cannot bear. The Digital Personal Data Protection Act of 2023 is the first serious attempt. It establishes a Data Protection Board, confers rights of correction, erasure and grievance redressal, imposes consent and purpose-limitation obligations on data fiduciaries, and exempts certain state functions in the interest of sovereignty and security. The Act has been criticised from three sides: civil-liberties scholars argue that the state exemptions are too broad; industry argues that some compliance obligations exceed international norms; and consumer advocates argue that enforcement will be only as effective as the Board permits. The right resolution cannot be reached through drafting alone. It will require transparent regulatory practice, rigorous judicial scrutiny, and a public sufficiently literate in digital rights to assert them. Without such a public, even the most carefully drafted statute will protect citizens only on paper.