GS Paper 2 15 marks · 250w 14 min Hard
The Supreme Court’s recognition of privacy as a Fundamental Right in 2017 was a constitutional landmark — but seven years later, the gap between the right declared and the right delivered has widened rather than narrowed. Critically examine with reference to post- Puttaswamy developments.
Subtopic: Polity and Governance
How to structure your answer
Introduction → NATGRID and CCTNS → Social media surveillance → Facial Recognition → Conclusion
Detailed model answer
475 words · target 250 words · 14 min
A constitutional right exists at two levels. The declaratory level (what courts say) and the delivery level (what citizens experience). Puttaswamy achieved the declaratory level decisively in 2017. What the seven years since have revealed is that declaratory victory without delivery. A right largely present in laws, absent in lived experience.
Supreme Court's recognition of privacy as a Fundamental Right a constitutional landmark
- Nine-judge unanimity: privacy intrinsic to Art. 21; overruled MP Sharma (1954) and Kharak Singh (1962)
- Five dimensions: bodily integrity, personal choices, informational privacy, spatial privacy, communication privacy
- Three-part proportionality test: legality + legitimate aim + proportionality — state must affirmatively justify privacy violations
- Positive legislative mandate: Parliament must enact data protection law — six years later, DPDP Act 2023 arrived
- What it directly enabled:
- Navtej Johar (2018): sexual orientation as privacy dimension; Section
- S v. Union of India (2026): reproductive autonomy overrides MTP Act's
- Marital privacy debates, spousal surveillance cases — all flow from 377 struck down 24-week limit Puttaswamy The promise was comprehensive. The delivery, domain by domain, has been partial at best and contradictory at worst. the gap between the right declared and the right delivered (Post Puttaswamy)
- DPDP Act 2023: Citizens' right to access, correct, and erase personal data — informational
- Section 17: government agencies exempted from Act's core obligations on grounds of "national security," "public order," "sovereignty" — broadest possible carve-outs with no proportionality requirement
- These exemptions directly contradict Puttaswamy's proportionality test — state surveillance exempted from the very framework the judgment demanded
- Data Protection Board not independent — government controls composition; no equivalent of UK's Information Commissioner's Office
- Net verdict: partial operationalisation — delivers informational privacy against private entities; creates constitutional-sized holes for state action
- State Surveillance (Pegasus spyware (2021):)
- SC-appointed technical committee found evidence of spyware on journalists', activists', Opposition politicians' devices
NATGRID and CCTNS:
- National Intelligence Grid aggregates data from immigration, banking,
- No legislative backing, no oversight mechanism, no sunset clause — fails rail, aviation, tax, telecom Puttaswamy's legality test at threshold
Social media surveillance:
- Government used monitoring to identify Shaheen Bagh protesters,
- Surveillance enabling prosecution of political dissent without trial — farmers' protest coordinators, Disha Ravi chilling effect on Arts. 19 and 21 simultaneously
Facial Recognition
- Scale: India's AFRS covers 16+ crore faces — one of largest civilian facial recognition databases globally; used by Delhi Police, railways, airports, UP Police
- No legislative framework: no law governs facial recognition deployment — no consent mechanism, no accuracy standards, no appeal mechanism, no judicial authorisation — fails Puttaswamy's legality test at threshold
- Informational Privacy vs. Public Interest
- Medical privacy vs. public health: Aarogya Setu health data collection without clear legal framework, stored without sunset clause; DPDP Act now covers health data as sensitive personal data.
- Tax enforcement vs. financial privacy: SC upheld Aadhaar-PAN linkage for tax compliance (2018) The landmark was real; the gap is also real. Closing this gap requires not more landmark judgments but institutional architecture independent oversight, legislative precision, and a government that treats Puttaswamy's three-part test as a binding obligation rather than a constitutional aspiration.
What an examiner expects to see
- Nine-judge unanimity: privacy intrinsic to Art
- Five dimensions: bodily integrity, personal choices, informational privacy, spatial privacy, communication privacy
- Three-part proportionality test: legality + legitimate aim + proportionality — state must affirmatively justify privacy violations
- Positive legislative mandate: Parliament must enact data protection law — six years later, DPDP Act 2023 arrived
- What it directly enabled: Navtej Johar (2018): sexual orientation as privacy dimension; Section
- DPDP Act 2023: Citizens' right to access, correct, and erase personal data — informational
- These exemptions directly contradict Puttaswamy's proportionality test — state surveillance exempted from the very framework the judgment demanded
Terminology to weave into the answer
DPDP Act 2023MTP ActCCTNSAFRSPANSupreme Court's