{"id":34012,"date":"2026-10-10T08:09:58","date_gmt":"2026-10-10T08:09:58","guid":{"rendered":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/?p=34012"},"modified":"2026-10-10T08:12:34","modified_gmt":"2026-10-10T08:12:34","slug":"digital-personal-data-protection-act-2023-right-to-privacy-in-india","status":"publish","type":"post","link":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/digital-personal-data-protection-act-2023-right-to-privacy-in-india\/","title":{"rendered":"Digital Personal Data Protection Act 2023: Right to Privacy in India"},"content":{"rendered":"\n<h1 id=\"h-digital-governance-data-protection-and-the-constitutional-right-to-privacy-in-india\" class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Digital_Governance_Data_Protection_and_the_Constitutional_Right_to_Privacy_in_India\"><\/span>Digital Governance, Data Protection and the Constitutional Right to Privacy in India<span class=\"ez-toc-section-end\"><\/span><\/h1>\n\n\n\n<h2 id=\"h-abstract\" class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Abstract\"><\/span>Abstract<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The expansion of digital governance in India, through biometric identification, platform-based welfare delivery and large-scale surveillance infrastructure, has transformed the relationship between citizen and State. This article examines whether the constitutional right to privacy, recognised in Justice KS Puttaswamy (Retd) v Union of India, is adequately secured by the Digital Personal Data Protection Act 2023 and its Rules. Using doctrinal legal research, it analyses constitutional provisions, statutory text and Supreme Court decisions to evaluate the accountability of the State as a holder of personal data.<\/p><div id=\"ez-toc-container\" class=\"ez-toc-v2_0_88 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #0c0c0c;color:#0c0c0c\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #0c0c0c;color:#0c0c0c\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-1'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.legalserviceindia.com\/Legal-Articles\/digital-personal-data-protection-act-2023-right-to-privacy-in-india\/#Digital_Governance_Data_Protection_and_the_Constitutional_Right_to_Privacy_in_India\" >Digital Governance, Data Protection and the Constitutional Right to Privacy in India<\/a><ul class='ez-toc-list-level-2' ><li class='ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.legalserviceindia.com\/Legal-Articles\/digital-personal-data-protection-act-2023-right-to-privacy-in-india\/#Abstract\" >Abstract<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.legalserviceindia.com\/Legal-Articles\/digital-personal-data-protection-act-2023-right-to-privacy-in-india\/#Introduction\" >Introduction<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.legalserviceindia.com\/Legal-Articles\/digital-personal-data-protection-act-2023-right-to-privacy-in-india\/#1_Research_Problem_Research_Question\" >1. Research Problem \/ Research Question<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.legalserviceindia.com\/Legal-Articles\/digital-personal-data-protection-act-2023-right-to-privacy-in-india\/#2_Objectives_of_the_Study\" >2. Objectives of the Study<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/www.legalserviceindia.com\/Legal-Articles\/digital-personal-data-protection-act-2023-right-to-privacy-in-india\/#3_Research_Methodology\" >3. Research Methodology<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/www.legalserviceindia.com\/Legal-Articles\/digital-personal-data-protection-act-2023-right-to-privacy-in-india\/#4_Main_Discussion_and_Legal_Analysis\" >4. Main Discussion and Legal Analysis<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/www.legalserviceindia.com\/Legal-Articles\/digital-personal-data-protection-act-2023-right-to-privacy-in-india\/#41_Constitutional_foundations_of_informational_privacy\" >4.1 Constitutional foundations of informational privacy<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/www.legalserviceindia.com\/Legal-Articles\/digital-personal-data-protection-act-2023-right-to-privacy-in-india\/#42_The_State_as_a_data_fiduciary\" >4.2 The State as a data fiduciary<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/www.legalserviceindia.com\/Legal-Articles\/digital-personal-data-protection-act-2023-right-to-privacy-in-india\/#43_The_asymmetry_of_the_DPDP_framework\" >4.3 The asymmetry of the DPDP framework<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/www.legalserviceindia.com\/Legal-Articles\/digital-personal-data-protection-act-2023-right-to-privacy-in-india\/#5_Relevant_Statutory_and_Judicial_Analysis\" >5. Relevant Statutory and Judicial Analysis<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/www.legalserviceindia.com\/Legal-Articles\/digital-personal-data-protection-act-2023-right-to-privacy-in-india\/#51_Proportionality_in_the_case_law\" >5.1 Proportionality in the case law<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/www.legalserviceindia.com\/Legal-Articles\/digital-personal-data-protection-act-2023-right-to-privacy-in-india\/#52_Testing_section_172a_and_related_provisions\" >5.2 Testing section 17(2)(a) and related provisions<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-14\" href=\"https:\/\/www.legalserviceindia.com\/Legal-Articles\/digital-personal-data-protection-act-2023-right-to-privacy-in-india\/#53_A_comparative_perspective\" >5.3 A comparative perspective<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-15\" href=\"https:\/\/www.legalserviceindia.com\/Legal-Articles\/digital-personal-data-protection-act-2023-right-to-privacy-in-india\/#6_Findings_Observations\" >6. Findings \/ Observations<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-16\" href=\"https:\/\/www.legalserviceindia.com\/Legal-Articles\/digital-personal-data-protection-act-2023-right-to-privacy-in-india\/#7_Conclusion_and_Suggestions\" >7. Conclusion and Suggestions<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-17\" href=\"https:\/\/www.legalserviceindia.com\/Legal-Articles\/digital-personal-data-protection-act-2023-right-to-privacy-in-india\/#8_Bibliography\" >8. Bibliography<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-18\" href=\"https:\/\/www.legalserviceindia.com\/Legal-Articles\/digital-personal-data-protection-act-2023-right-to-privacy-in-india\/#Table_of_Cases\" >Table of Cases<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-19\" href=\"https:\/\/www.legalserviceindia.com\/Legal-Articles\/digital-personal-data-protection-act-2023-right-to-privacy-in-india\/#Table_of_Legislation_and_Instruments\" >Table of Legislation and Instruments<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-20\" href=\"https:\/\/www.legalserviceindia.com\/Legal-Articles\/digital-personal-data-protection-act-2023-right-to-privacy-in-india\/#Secondary_Sources\" >Secondary Sources<\/a><\/li><\/ul><\/li><\/ul><\/li><\/ul><\/nav><\/div>\n\n\n\n\n<p class=\"wp-block-paragraph\">The article argues that, although the Act imposes a consent-based framework on private actors, its wide exemptions for State instrumentalities, the executive\u2019s power to call for information, the executive-dependent Data Protection Board and the amendment of the Right to Information Act 2005 weaken the constitutional test of legality, legitimate aim and proportionality. It concludes that constitutional accountability requires narrower statutory exemptions, an independent regulator and independent authorisation of State access to personal data.<\/p>\n\n\n\n<h2 id=\"h-introduction\" class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Introduction\"><\/span>Introduction<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">India\u2019s governance has migrated onto digital rails. Welfare entitlements are delivered through biometric authentication, identity is verified through interoperable public infrastructure, and policing, taxation and public health increasingly depend on large databases. This transformation promises efficiency and inclusion, yet it concentrates extraordinary informational power in the State.1<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The constitutional question is therefore no longer whether the State may collect personal data, but on what terms, with what safeguards and subject to whose scrutiny. 1Vrinda Bhandari and Renuka Sane, \u2018Protecting Citizens from the State Post Puttaswamy: Analysing the Privacy Implications of the Justice Srikrishna Committee Report and the Data Protection Bill, 2018\u2019 (2018) 14 Socio-Legal Review 143.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In Justice KS Puttaswamy (Retd) v Union of India (Puttaswamy I), a ninejudge Bench unanimously held that privacy is a fundamental right protected under article 21 and the freedoms guaranteed by Part III of the Constitution.2 The Court recognised informational privacy as a facet of that right and required that any State interference satisfy legality, a legitimate aim and proportionality.3 Parliament\u2019s response, the Digital Personal Data Protection Act 2023 (DPDP Act), arrived six years later,4 and the Digital Personal Data Protection Rules 2025 were notified in November 2025 with obligations phased in until May 2027.5<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This article argues that the DPDP Act disciplines private data fiduciaries with considerable rigour but treats the State with conspicuous generosity. Because the State is at once the largest collector of personal data and the principal potential violator of informational autonomy, the quality of State accountability is the true measure of the statute\u2019s constitutional adequacy. The article sets out the research problem, objectives and methodology, analyses the constitutional and statutory framework against the jurisprudence of the Supreme Court, and closes with findings and proposals for reform.<\/p>\n\n\n\n<h2 id=\"h-1-research-problem-research-question\" class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"1_Research_Problem_Research_Question\"><\/span>1. Research Problem \/ Research Question<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The research problem is the gap between the constitutional standard of State accountability and the statutory design of data protection in India.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Puttaswamy I requires that every State intrusion on privacy be backed by law, serve a legitimate aim and be proportionate to that aim. The DPDP Act, however, empowers the Central Government to exempt State instrumentalities from the Act by notification, permits non-consensual processing for a wide range of governmental functions, and places the new regulator under executive control. Whether such a design can be reconciled with article 21 and the rule of law is the central concern of this study.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The principal research question is: to what extent does the DPDP Act 2023, read with the Digital Personal Data Protection Rules 2025, give effect to the constitutional guarantee of privacy and secure the accountability of the State in digital governance? Three sub-questions follow. First, what constitutional principles govern the State\u2019s collection and use of personal data? Second, do the exemptions and enforcement structures of the Act satisfy the test of legality, legitimate aim and proportionality? Third, what reforms are needed to align the statute with constitutional governance?<\/p>\n\n\n\n<h2 id=\"h-2-objectives-of-the-study\" class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"2_Objectives_of_the_Study\"><\/span>2. Objectives of the Study<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The study pursues five objectives: (i) to trace the constitutional evolution of the right to privacy and its application to State data processing; (ii) to examine the DPDP Act and Rules as instruments of State accountability, with particular attention to sections 7, 17, 18\u201319, 36 and 44; (iii) to evaluate those provisions against the proportionality jurisprudence of the Supreme Court, including Puttaswamy I, the Aadhaar judgment and Anuradha Bhasin v Union of India; (iv) to draw limited comparative guidance from European Union law; and (v) to propose workable legislative and institutional reforms.<\/p>\n\n\n\n<h2 id=\"h-3-research-methodology\" class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"3_Research_Methodology\"><\/span>3. Research Methodology<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This study adopts doctrinal legal research. It treats law as a body of authoritative texts and reasons from them by analysis, interpretation and critical evaluation. Primary sources comprise the Constitution of India, the DPDP Act and Rules, the Information Technology Act 2000, the Aadhaar Act 2016, the Right to Information Act 2005 and the decisions of the Supreme Court of India. Secondary sources include the report of the Justice BN Srikrishna Committee and scholarly commentary. European Union materials serve only as a comparative benchmark and not as binding authority.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The approach is analytical and normative: it first extracts the constitutional standard from the case law and then measures statutory provisions against it. The study has three limitations. It is not empirical and does not assess how the Act operates in practice. The Rules were notified only recently, and most substantive obligations are not yet in force. The Data Protection Board has not yet produced a body of decisions, so conclusions about enforcement are necessarily predictive.<\/p>\n\n\n\n<h2 id=\"h-4-main-discussion-and-legal-analysis\" class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"4_Main_Discussion_and_Legal_Analysis\"><\/span>4. Main Discussion and Legal Analysis<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<h3 id=\"h-4-1-constitutional-foundations-of-informational-privacy\" class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"41_Constitutional_foundations_of_informational_privacy\"><\/span>4.1 Constitutional foundations of informational privacy<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Early decisions were hesitant. In MP Sharma v Satish Chandra the Court declined to read a privacy right into the Constitution when upholding search and seizure powers, and in Kharak Singh v State of UP the majority struck down night-time domiciliary visits under article 21 but rejected a general fundamental right to privacy.6<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The jurisprudence shifted with Gobind v State of MP, which accepted a limited privacy right subject to compelling State interest, and with Maneka Gandhi v Union of India, which required that any law depriving personal liberty be just, fair and reasonable, thereby bringing articles 14, 19 and 21 into a single protective framework.7 In R Rajagopal v State of Tamil Nadu and PUCL v Union of India the Court linked privacy to personal information and communications, and in the latter laid down procedural safeguards against telephone tapping, including authorisation at a senior level and periodic review.8<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Puttaswamy I overruled MP Sharma and Kharak Singh to the extent that they denied the existence of the right.9 Its significance for digital governance lies in three propositions. First, privacy protects informational self-determination, that is, an individual\u2019s control over the dissemination of personal information. Second, the right is enforceable against the State, although the Court acknowledged that informational privacy also demands protection against private actors. Third, restrictions must satisfy a threefold test: a law must exist, it must pursue a legitimate State aim, and the means adopted must be proportionate to that aim.10 Kaul J, in addition, urged the Union to put in place a robust data protection regime balancing individual interests against legitimate State concerns.<\/p>\n\n\n\n<h3 id=\"h-4-2-the-state-as-a-data-fiduciary\" class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"42_The_State_as_a_data_fiduciary\"><\/span>4.2 The State as a data fiduciary<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Digital governance changes the character of State power. A welfare beneficiary cannot negotiate the terms on which the State collects her biometric or demographic data because the benefit is conditional on disclosure. The relationship is one of dependency and asymmetry, which is why consent alone cannot legitimise State processing. Balkin\u2019s theory of information fiduciaries, under which entities that collect and use personal data owe duties of care and loyalty to the persons concerned, applies with greater force to a State that holds such data on public trust.11<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Constitutional governance supplies the corresponding principles: data should be collected for a specified lawful purpose, limited to what is necessary, retained no longer than needed, protected against breach, and open to independent scrutiny. The Justice Srikrishna Committee likewise recommended that the State be bound by the same obligations as private entities, subject only to narrowly drawn exceptions.12<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">State accountability in this setting has three dimensions. Substantive accountability means that processing must be lawful, necessary and proportionate. Procedural accountability requires notice, a hearing where appropriate, reasoned orders and review. Institutional accountability demands an independent regulator and courts capable of enforcing these duties against government itself. A statute that is weak on any one dimension leaves the constitutional guarantee incomplete.<\/p>\n\n\n\n<h3 id=\"h-4-3-the-asymmetry-of-the-dpdp-framework\" class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"43_The_asymmetry_of_the_DPDP_framework\"><\/span>4.3 The asymmetry of the DPDP framework<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The DPDP Act is built on notice and consent, supplemented by a closed list of \u2018legitimate uses\u2019 that permit non-consensual processing.13 Section 7 allows the State and its instrumentalities to process data without fresh consent in order to provide subsidies, benefits, services, certificates, licences and permits, where the individual has previously consented or the data already exists in a State database, and also to perform any function under law or in the interests of the sovereignty and integrity of India.14 Section 17(2)(a) goes further: the Central Government may by notification exempt any instrumentality of the State from the Act on grounds that echo article 19(2), including the security of the State and public order.15 Section 17(4) separately relieves State processing of the duty to erase data once its purpose is served and, in specified cases, of rights of access and correction.16<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The executive\u2019s reach extends to the regulator and to the law of transparency. Under section 36 the Central Government may require the Board and any data fiduciary to furnish information it calls for, and the Rules prescribe minimum retention of logs for purposes connected with State use.17 The Board\u2019s chairperson and members are appointed by the Central Government for two-year terms, with eligibility for reappointment, which sits uneasily with the independence that adjudication against the State requires.18 Finally, section 44(3) amends section 8(1)(j) of the Right to Information Act 2005 so that personal information is exempt from disclosure, removing the earlier qualification that allowed disclosure where the larger public interest so required.19 The effect is to weaken a transparency tool that citizens have used to hold public officials to account.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">These features mark a retreat from earlier drafts. Clause 42 of the Personal Data Protection Bill 2018 permitted processing in the interests of State security only where it was authorised by law, followed a procedure established by that law, and was necessary and proportionate.20 Section 17(2)(a) of the 2023 Act contains no express requirement of necessity or proportionality, and no procedure for reasoned decision-making or review.<\/p>\n\n\n\n<h2 id=\"h-5-relevant-statutory-and-judicial-analysis\" class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"5_Relevant_Statutory_and_Judicial_Analysis\"><\/span>5. Relevant Statutory and Judicial Analysis<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<h3 id=\"h-5-1-proportionality-in-the-case-law\" class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"51_Proportionality_in_the_case_law\"><\/span>5.1 Proportionality in the case law<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The Supreme Court has refined the proportionality standard since Puttaswamy I. In Modern Dental College v State of MP it identified four elements: a legitimate goal, a rational connection between the measure and the goal, necessity in the sense that no less restrictive but equally effective alternative exists, and a proper balance between the importance of the goal and the extent of the infringement.21 In the Aadhaar case (Puttaswamy II) the majority upheld the scheme for welfare delivery after applying that test, but struck down section 57, which allowed private entities to demand Aadhaar authentication, and section 33(2), which allowed disclosure of identity and authentication information in the interests of national security without judicial oversight, and it read down section 33(1) so that the affected person must be heard.22 The decision thus validated large-scale digital governance while insisting on independent safeguards against State disclosure.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Anuradha Bhasin v Union of India applied proportionality to an internet shutdown. The Court held that orders restricting fundamental rights must be published and reasoned, are open to judicial review, and cannot suspend the internet indefinitely, and it required periodic review of such orders.23 In PUCL the Court insisted on procedural safeguards for interception, and in Manohar Lal Sharma v Union of India, concerning the alleged use of Pegasus spyware, it held that invoking national security does not exclude judicial review and appointed an expert technical committee to inquire.24 Together these decisions establish that State claims of security or efficiency must be justified on the record and always remain open to scrutiny.<\/p>\n\n\n\n<h3 id=\"h-5-2-testing-section-17-2-a-and-related-provisions\" class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"52_Testing_section_172a_and_related_provisions\"><\/span>5.2 Testing section 17(2)(a) and related provisions<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Applying that framework, the first requirement is legality. Section 17(2)(a) is a statutory provision, and the notification power is defined by subject-matter. But legality in the constitutional sense demands more than the existence of a statute; the law must be clear and precise and must not confer unguided discretion. The statute leaves the selection of exempted bodies entirely to the executive, with no criteria, no duty to give reasons and no provision for review, which creates a real risk of arbitrariness under article 14.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The second requirement, a legitimate aim, is readily met, since the enumerated grounds mirror article 19(2). The difficulty lies in the third. A blanket exemption of an agency from every obligation under the Act, including purpose limitation, security safeguards and breach notification, is not the least restrictive means of protecting security interests. An agency may have a compelling need to withhold notice from a suspect, yet no apparent need to leave its databases unsecured or to retain data indefinitely. Proportionality would require exemptions tailored to specific obligations and specific operations. The absence of independent prior authorisation or after-the-fact review also falls short of the safeguards demanded in PUCL, Puttaswamy II and Anuradha Bhasin. The weakness is compounded by interception powers that survive outside the Act, namely section 69 of the Information Technology Act 2000 and section 20 of the Telecommunications Act 2023, under which authorisation rests with the executive and review lies with executive committees.25<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Similar concerns attach to section 44(3). Privacy and transparency are both facets of constitutional accountability, and the Court has long treated access to official information as an incident of article 19(1)(a).26 By exempting personal information without a public-interest override, the amendment forecloses the balancing that proportionality requires. The legitimate-use provision in section 7 is more defensible where it is tied to benefits the individual has sought, but its reliance on prior consent or existing State databases means that data collected under earlier regimes may be reused for new purposes, which strains the principle of purpose limitation.<\/p>\n\n\n\n<h3 id=\"h-5-3-a-comparative-perspective\" class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"53_A_comparative_perspective\"><\/span>5.3 A comparative perspective<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">European Union law offers a useful benchmark. Article 23 of the General Data Protection Regulation allows restriction of data subject rights for security and public-interest purposes, but only by a legislative measure that respects the essence of fundamental rights and is necessary and proportionate in a democratic society.27 In Schrems II the Court of Justice invalidated the EU\u2013US Privacy Shield because United States surveillance programmes were not limited to what is strictly necessary and offered affected persons no effective redress.28 The lesson is that security-based exemptions are lawful only where they are bounded by law and accompanied by remedies. The DPDP Act, by contrast, relies on executive notification and offers no equivalent remedy against State processing that falls within an exemption.<\/p>\n\n\n\n<h2 id=\"h-6-findings-observations\" class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"6_Findings_Observations\"><\/span>6. Findings \/ Observations<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li>The constitutional standard is settled. Privacy is a fundamental right under article 21, and State interference must satisfy legality, a legitimate aim and proportionality, as refined in Modern Dental, Puttaswamy II and Anuradha Bhasin.<\/li>\n\n\n\n<li>The DPDP Act is asymmetrical. Private fiduciaries face detailed duties and heavy penalties, whereas State bodies benefit from the legitimate-use provisions of section 7, the relaxations of section 17(4) and the power of exemption under section 17(2)(a).<\/li>\n\n\n\n<li>Section 17(2)(a) lacks criteria, reasons, time limits, independent authorisation and review. Because it contains no necessity or proportionality requirement, it is vulnerable to challenge under articles 14 and 21, or at least to a narrowing interpretation.<\/li>\n\n\n\n<li>Institutional independence is deficient. The Central Government appoints the Board, can call for information under section 36 and is itself the most significant respondent that the Board will face, which creates a structural conflict of interest.<\/li>\n\n\n\n<li>Section 44(3) reduces transparency by removing the public-interest balance from the personal-information exemption in the Right to Information Act, thereby diminishing a key mechanism of democratic accountability.<\/li>\n\n\n\n<li>Accountability gaps lie outside the Act. Executive-controlled interception regimes endure, and the Rules\u2019 retention requirements extend the State\u2019s access to private-sector data.<\/li>\n\n\n\n<li>Enforcement remains untested. The Rules are only partly in force, and judicial review will probably determine how far the constitutional standard is read into the statute.<\/li>\n<\/ol>\n\n\n\n<h2 id=\"h-7-conclusion-and-suggestions\" class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"7_Conclusion_and_Suggestions\"><\/span>7. Conclusion and Suggestions<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The digital State cannot be both guardian and unchecked collector of personal data. The DPDP Act is a significant advance because it finally gives India a horizontal data protection statute, but it does not yet translate the promise of Puttaswamy I into enforceable State accountability. Its exemptions, its executive-dependent regulator and its dilution of the right to information leave the most powerful data fiduciary, the State, with the least effective constraints. The following reforms are suggested.<\/p>\n\n\n\n<ol style=\"list-style-type:lower-roman\" class=\"wp-block-list\">\n<li>Section 17(2)(a) should be amended so that exemptions are granted only by reasoned notification, are confined to specified provisions and operations, expressly require necessity and proportionality, are time-limited and are placed before Parliament.<\/li>\n\n\n\n<li>The Board\u2019s independence should be secured through a selection committee that includes members outside the executive, fixed non-renewable tenure and financial autonomy.<\/li>\n\n\n\n<li>State access to personal data and interception should require prior authorisation by a judicial or independent authority, followed by review, notification to the individual where possible, and published transparency reports.<\/li>\n\n\n\n<li>Section 44(3) should be repealed, or section 8(1)(j) of the Right to Information Act 2005 restored with its public-interest override.<\/li>\n\n\n\n<li>State data fiduciaries should carry enhanced duties, including data protection impact assessments, publication of purposes and retention periods, and accountability for breaches.<\/li>\n\n\n\n<li>Pending legislative reform, courts should read section 17(2)(a) down so that the Puttaswamy proportionality test governs every notification, and Parliament should provide for periodic statutory review of the Act.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Constitutional governance requires that digital power be at least as accountable as the analogue power it replaces.<\/p>\n\n\n\n<h2 id=\"h-8-bibliography\" class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"8_Bibliography\"><\/span>8. Bibliography<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<h3 id=\"h-table-of-cases\" class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Table_of_Cases\"><\/span>Table of Cases<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Anuradha Bhasin v Union of India (2020) 3 SCC 637<\/li>\n\n\n\n<li>Case C-311\/18 Data Protection Commissioner v Facebook Ireland Ltd and Maximillian Schrems (Schrems II) EU:C:2020:559<\/li>\n\n\n\n<li>Gobind v State of Madhya Pradesh (1975) 2 SCC 148<\/li>\n\n\n\n<li>Justice KS Puttaswamy (Retd) v Union of India (2017) 10 SCC 1<\/li>\n\n\n\n<li>Justice KS Puttaswamy (Retd) v Union of India (2019) 1 SCC 1<\/li>\n\n\n\n<li>Kharak Singh v State of Uttar Pradesh AIR 1963 SC 1295<\/li>\n\n\n\n<li>Maneka Gandhi v Union of India (1978) 1 SCC 248<\/li>\n\n\n\n<li>Manohar Lal Sharma v Union of India [2021] SCC OnLine SC 985<\/li>\n\n\n\n<li>Modern Dental College and Research Centre v State of Madhya Pradesh (2016) 7 SCC 353<\/li>\n\n\n\n<li>MP Sharma v Satish Chandra AIR 1954 SC 300<\/li>\n\n\n\n<li>People\u2019s Union for Civil Liberties v Union of India (1997) 1 SCC 301<\/li>\n\n\n\n<li>R Rajagopal v State of Tamil Nadu (1994) 6 SCC 632<\/li>\n\n\n\n<li>State of Uttar Pradesh v Raj Narain (1975) 4 SCC 428<\/li>\n<\/ul>\n\n\n\n<h3 id=\"h-table-of-legislation-and-instruments\" class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Table_of_Legislation_and_Instruments\"><\/span>Table of Legislation and Instruments<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Aadhaar (Targeted Delivery of Financial and Other Subsidies, Benefits and Services) Act 2016 (India)<\/li>\n\n\n\n<li>Constitution of India 1950<\/li>\n\n\n\n<li>Digital Personal Data Protection Act 2023 (India)<\/li>\n\n\n\n<li>Digital Personal Data Protection Rules 2025 (India)<\/li>\n\n\n\n<li>Information Technology Act 2000 (India)<\/li>\n\n\n\n<li>Information Technology (Procedure and Safeguards for Interception, Monitoring and Decryption of Information) Rules 2009 (India)<\/li>\n\n\n\n<li>Personal Data Protection Bill 2018 (India) (draft)<\/li>\n\n\n\n<li>Regulation (EU) 2016\/679 (General Data Protection Regulation) [2016] OJ L119\/1<\/li>\n\n\n\n<li>Right to Information Act 2005 (India)<\/li>\n\n\n\n<li>Telecommunications Act 2023 (India)<\/li>\n<\/ul>\n\n\n\n<h3 id=\"h-secondary-sources\" class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Secondary_Sources\"><\/span>Secondary Sources<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Balkin JM, \u2018Information Fiduciaries and the First Amendment\u2019 (2016) 49 UC Davis Law Review 1183<\/li>\n\n\n\n<li>Bhandari V and Sane R, \u2018Protecting Citizens from the State Post Puttaswamy: Analysing the Privacy Implications of the Justice Srikrishna Committee Report and the Data Protection Bill, 2018\u2019 (2018) 14 Socio-Legal Review 143<\/li>\n\n\n\n<li>Bhatia G, The Transformative Constitution: A Radical Biography in Nine Acts (HarperCollins India 2019)<\/li>\n\n\n\n<li>Committee of Experts under the Chairmanship of Justice BN Srikrishna, \u2018A Free and Fair Digital Economy: Protecting Privacy, Empowering Indians\u2019 (Ministry of Electronics and Information Technology, July<\/li>\n<\/ul>\n\n\n\n<ul class=\"wp-block-yoast-seo-related-links yoast-seo-related-links\">\n<li><a href=\"https:\/\/www.legalserviceindia.com\/Legal-Articles\/article-21-digital-rights-india-privacy-puttaswamy-dpdp-act-ai-governance\/\">Artificial Intelligence and the Right to Privacy under Article 21 of the Indian Constitution: Emerging Challenges and Legal Responses<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.legalserviceindia.com\/Legal-Articles\/impact-of-artificial-intelligence-on-fundamental-rights\/\">Impact of Artificial Intelligence on fundamental rights<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.legalserviceindia.com\/Legal-Articles\/fair-trial-vs-privacy-a-constitutional-tussle-in-limbo\/\">Fair Trial vs Privacy: A Constitutional Tussle In Limbo<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.legalserviceindia.com\/Legal-Articles\/the-digital-panopticon-operationalized-a-critical-legal-deconstruction-of-the-dpdp-rules-2025\/\">The Digital Panopticon Operationalized: A Critical Legal Deconstruction of the DPDP Rules, 2025<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.legalserviceindia.com\/Legal-Articles\/right-to-privacy-in-india-after-puttaswamy-constitutional-evolution-and-data-protection-laws\/\">Right to Privacy in India After Puttaswamy: Constitutional Evolution and Data Protection Laws<\/a><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Digital Governance, Data Protection and the Constitutional Right to Privacy in India Abstract The expansion of digital governance in India, through biometric identification, platform-based welfare delivery and large-scale surveillance infrastructure, has transformed the relationship between citizen and State. This article examines whether the constitutional right to privacy, recognised in Justice KS Puttaswamy (Retd) v Union<\/p>\n","protected":false},"author":1920,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_bbp_topic_count":0,"_bbp_reply_count":0,"_bbp_total_topic_count":0,"_bbp_total_reply_count":0,"_bbp_voice_count":0,"_bbp_anonymous_reply_count":0,"_bbp_forum_subforum_count":0,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"two_page_speed":[],"_jetpack_memberships_contains_paid_content":false,"_joinchat":[],"footnotes":""},"categories":[66],"tags":[5277],"class_list":["post-34012","post","type-post","status-publish","format-standard","category-cyber-law","tag-cyber-law"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v28.6 (Yoast SEO v28.6) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Digital Personal Data Protection Act 2023: Right to Privacy in India - Legal Service India - Articles<\/title>\n<meta name=\"description\" content=\"Does India\u2019s DPDP Act 2023 protect your right to privacy? Explore government exemptions, State surveillance and constitutional safeguards.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.legalserviceindia.com\/Legal-Articles\/digital-personal-data-protection-act-2023-right-to-privacy-in-india\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Digital Personal Data Protection Act 2023: Right to Privacy in India\" \/>\n<meta property=\"og:description\" content=\"Does India\u2019s DPDP Act 2023 protect your right to privacy? Explore government exemptions, State surveillance and constitutional safeguards.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.legalserviceindia.com\/Legal-Articles\/digital-personal-data-protection-act-2023-right-to-privacy-in-india\/\" \/>\n<meta property=\"og:site_name\" content=\"Legal Service India - Articles\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/legalservicesind\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-10T08:09:58+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-10T08:12:34+00:00\" \/>\n<meta name=\"author\" content=\"thrain\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@legalserviceind\" \/>\n<meta name=\"twitter:site\" content=\"@legalserviceind\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"thrain\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"15 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.legalserviceindia.com\\\/Legal-Articles\\\/digital-personal-data-protection-act-2023-right-to-privacy-in-india\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.legalserviceindia.com\\\/Legal-Articles\\\/digital-personal-data-protection-act-2023-right-to-privacy-in-india\\\/\"},\"author\":{\"name\":\"thrain\",\"@id\":\"https:\\\/\\\/www.legalserviceindia.com\\\/Legal-Articles\\\/#\\\/schema\\\/person\\\/3e90e560b4ad0dd78ca20663e2439611\"},\"headline\":\"Digital Personal Data Protection Act 2023: Right to Privacy in India\",\"datePublished\":\"2026-10-10T08:09:58+00:00\",\"dateModified\":\"2026-10-10T08:12:34+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.legalserviceindia.com\\\/Legal-Articles\\\/digital-personal-data-protection-act-2023-right-to-privacy-in-india\\\/\"},\"wordCount\":3252,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.legalserviceindia.com\\\/Legal-Articles\\\/#organization\"},\"keywords\":[\"Cyber Law\"],\"articleSection\":[\"Cyber Law\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.legalserviceindia.com\\\/Legal-Articles\\\/digital-personal-data-protection-act-2023-right-to-privacy-in-india\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.legalserviceindia.com\\\/Legal-Articles\\\/digital-personal-data-protection-act-2023-right-to-privacy-in-india\\\/\",\"url\":\"https:\\\/\\\/www.legalserviceindia.com\\\/Legal-Articles\\\/digital-personal-data-protection-act-2023-right-to-privacy-in-india\\\/\",\"name\":\"Digital Personal Data Protection Act 2023: Right to Privacy in India - Legal Service India - Articles\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.legalserviceindia.com\\\/Legal-Articles\\\/#website\"},\"datePublished\":\"2026-10-10T08:09:58+00:00\",\"dateModified\":\"2026-10-10T08:12:34+00:00\",\"description\":\"Does India\u2019s DPDP Act 2023 protect your right to privacy? Explore government exemptions, State surveillance and constitutional safeguards.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.legalserviceindia.com\\\/Legal-Articles\\\/digital-personal-data-protection-act-2023-right-to-privacy-in-india\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.legalserviceindia.com\\\/Legal-Articles\\\/digital-personal-data-protection-act-2023-right-to-privacy-in-india\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.legalserviceindia.com\\\/Legal-Articles\\\/digital-personal-data-protection-act-2023-right-to-privacy-in-india\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.legalserviceindia.com\\\/Legal-Articles\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Cyber Law > India\u2019s Data Protection Law: Is Your Right to Privacy Really Protected?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.legalserviceindia.com\\\/Legal-Articles\\\/#website\",\"url\":\"https:\\\/\\\/www.legalserviceindia.com\\\/Legal-Articles\\\/\",\"name\":\"Legal Service India - Law Articles\",\"description\":\"Legal Service India - Law Article Directory is the oldest in India since 2000, with thousands of article written by lawyers, law Students and Scholars on all branches of law\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.legalserviceindia.com\\\/Legal-Articles\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.legalserviceindia.com\\\/Legal-Articles\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.legalserviceindia.com\\\/Legal-Articles\\\/#organization\",\"name\":\"Legal Service India\",\"url\":\"https:\\\/\\\/www.legalserviceindia.com\\\/Legal-Articles\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.legalserviceindia.com\\\/Legal-Articles\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.legalserviceindia.com\\\/Legal-Articles\\\/wp-content\\\/uploads\\\/2025\\\/06\\\/logo-circle-1.png\",\"contentUrl\":\"https:\\\/\\\/www.legalserviceindia.com\\\/Legal-Articles\\\/wp-content\\\/uploads\\\/2025\\\/06\\\/logo-circle-1.png\",\"width\":105,\"height\":95,\"caption\":\"Legal Service India\"},\"image\":{\"@id\":\"https:\\\/\\\/www.legalserviceindia.com\\\/Legal-Articles\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/legalservicesind\",\"https:\\\/\\\/x.com\\\/legalserviceind\",\"https:\\\/\\\/www.youtube.com\\\/@LegalServiceIndia-lsi\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.legalserviceindia.com\\\/Legal-Articles\\\/#\\\/schema\\\/person\\\/3e90e560b4ad0dd78ca20663e2439611\",\"name\":\"thrain\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"\\\/\\\/www.gravatar.com\\\/avatar\\\/e71e8a77bcbf99dfe1053626bf2540b2?s=96&#038;r=g&#038;d=mm\",\"url\":\"\\\/\\\/www.gravatar.com\\\/avatar\\\/e71e8a77bcbf99dfe1053626bf2540b2?s=96&#038;r=g&#038;d=mm\",\"contentUrl\":\"\\\/\\\/www.gravatar.com\\\/avatar\\\/e71e8a77bcbf99dfe1053626bf2540b2?s=96&#038;r=g&#038;d=mm\",\"caption\":\"thrain\"},\"url\":\"https:\\\/\\\/www.legalserviceindia.com\\\/Legal-Articles\\\/author\\\/thrain\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Digital Personal Data Protection Act 2023: Right to Privacy in India - Legal Service India - Articles","description":"Does India\u2019s DPDP Act 2023 protect your right to privacy? Explore government exemptions, State surveillance and constitutional safeguards.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/digital-personal-data-protection-act-2023-right-to-privacy-in-india\/","og_locale":"en_US","og_type":"article","og_title":"Digital Personal Data Protection Act 2023: Right to Privacy in India","og_description":"Does India\u2019s DPDP Act 2023 protect your right to privacy? Explore government exemptions, State surveillance and constitutional safeguards.","og_url":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/digital-personal-data-protection-act-2023-right-to-privacy-in-india\/","og_site_name":"Legal Service India - Articles","article_publisher":"https:\/\/www.facebook.com\/legalservicesind","article_published_time":"2026-10-10T08:09:58+00:00","article_modified_time":"2026-10-10T08:12:34+00:00","author":"thrain","twitter_card":"summary_large_image","twitter_creator":"@legalserviceind","twitter_site":"@legalserviceind","twitter_misc":{"Written by":"thrain","Est. reading time":"15 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/digital-personal-data-protection-act-2023-right-to-privacy-in-india\/#article","isPartOf":{"@id":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/digital-personal-data-protection-act-2023-right-to-privacy-in-india\/"},"author":{"name":"thrain","@id":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/#\/schema\/person\/3e90e560b4ad0dd78ca20663e2439611"},"headline":"Digital Personal Data Protection Act 2023: Right to Privacy in India","datePublished":"2026-10-10T08:09:58+00:00","dateModified":"2026-10-10T08:12:34+00:00","mainEntityOfPage":{"@id":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/digital-personal-data-protection-act-2023-right-to-privacy-in-india\/"},"wordCount":3252,"commentCount":0,"publisher":{"@id":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/#organization"},"keywords":["Cyber Law"],"articleSection":["Cyber Law"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.legalserviceindia.com\/Legal-Articles\/digital-personal-data-protection-act-2023-right-to-privacy-in-india\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/digital-personal-data-protection-act-2023-right-to-privacy-in-india\/","url":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/digital-personal-data-protection-act-2023-right-to-privacy-in-india\/","name":"Digital Personal Data Protection Act 2023: Right to Privacy in India - Legal Service India - Articles","isPartOf":{"@id":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/#website"},"datePublished":"2026-10-10T08:09:58+00:00","dateModified":"2026-10-10T08:12:34+00:00","description":"Does India\u2019s DPDP Act 2023 protect your right to privacy? Explore government exemptions, State surveillance and constitutional safeguards.","breadcrumb":{"@id":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/digital-personal-data-protection-act-2023-right-to-privacy-in-india\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.legalserviceindia.com\/Legal-Articles\/digital-personal-data-protection-act-2023-right-to-privacy-in-india\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/digital-personal-data-protection-act-2023-right-to-privacy-in-india\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/"},{"@type":"ListItem","position":2,"name":"Cyber Law > India\u2019s Data Protection Law: Is Your Right to Privacy Really Protected?"}]},{"@type":"WebSite","@id":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/#website","url":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/","name":"Legal Service India - Law Articles","description":"Legal Service India - Law Article Directory is the oldest in India since 2000, with thousands of article written by lawyers, law Students and Scholars on all branches of law","publisher":{"@id":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/#organization","name":"Legal Service India","url":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/#\/schema\/logo\/image\/","url":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/wp-content\/uploads\/2025\/06\/logo-circle-1.png","contentUrl":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/wp-content\/uploads\/2025\/06\/logo-circle-1.png","width":105,"height":95,"caption":"Legal Service India"},"image":{"@id":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/legalservicesind","https:\/\/x.com\/legalserviceind","https:\/\/www.youtube.com\/@LegalServiceIndia-lsi"]},{"@type":"Person","@id":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/#\/schema\/person\/3e90e560b4ad0dd78ca20663e2439611","name":"thrain","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"\/\/www.gravatar.com\/avatar\/e71e8a77bcbf99dfe1053626bf2540b2?s=96&#038;r=g&#038;d=mm","url":"\/\/www.gravatar.com\/avatar\/e71e8a77bcbf99dfe1053626bf2540b2?s=96&#038;r=g&#038;d=mm","contentUrl":"\/\/www.gravatar.com\/avatar\/e71e8a77bcbf99dfe1053626bf2540b2?s=96&#038;r=g&#038;d=mm","caption":"thrain"},"url":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/author\/thrain\/"}]}},"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/wp-json\/wp\/v2\/posts\/34012","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/wp-json\/wp\/v2\/users\/1920"}],"replies":[{"embeddable":true,"href":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/wp-json\/wp\/v2\/comments?post=34012"}],"version-history":[{"count":2,"href":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/wp-json\/wp\/v2\/posts\/34012\/revisions"}],"predecessor-version":[{"id":34060,"href":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/wp-json\/wp\/v2\/posts\/34012\/revisions\/34060"}],"wp:attachment":[{"href":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/wp-json\/wp\/v2\/media?parent=34012"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/wp-json\/wp\/v2\/categories?post=34012"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/wp-json\/wp\/v2\/tags?post=34012"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}