What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
Short answer: India’s Constitution does not give a single, exhaustive list of “reasonable restrictions” on privacy. Under the Supreme Court’s Puttaswamy ruling, a State intrusion must have a basis in valid law, pursue a legitimate constitutional aim, and be proportionate: suitable for that aim, no more intrusive than necessary, and protected by safeguards against abuse.
Why the wording needs care
“Reasonable restrictions” is language used in Article 19 for specified freedoms, including speech, assembly, association, movement and profession. Privacy is not confined to one Article 19 clause, and Article 19(2)’s grounds for restricting speech are not a complete list of reasons for limiting privacy.
In Justice K.S. Puttaswamy (Retd.) v. Union of India, a nine-judge bench of the Supreme Court recognised privacy as a fundamental right, intrinsic to life and personal liberty under Article 21, equality and protection against arbitrariness under Article 14, and the freedoms in Article 19 where they are affected. The applicable analysis depends on the privacy interest and other rights involved. Read the Supreme Court judgment.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →The constitutional test: law, legitimate aim, proportionality
| Requirement | Question to ask |
|---|---|
| Legality | Does a valid law authorise this kind of interference, and are officials acting within its limits? |
| Legitimate aim | Is the stated purpose constitutionally permissible and genuine? |
| Proportionality | Is the measure connected to the aim, necessary, and no more intrusive than the aim requires? |
The Supreme Court’s framework also requires attention to procedural safeguards and arbitrary use of power. A measure does not pass simply because it is useful or described as being in the public interest. Courts may ask whether a less intrusive alternative would work, whether the privacy cost is excessive compared with the benefit, and what controls limit misuse, retention or onward sharing. See the Puttaswamy judgment text.
#1 Best Overall
What legality means in practice
For a substantial intrusion, a bureaucratic practice or informal direction may not be enough: the State needs legal authority. The law itself must be constitutionally valid and sufficiently clear; it should not leave uncontrolled discretion. That is separate from asking whether the law specifically covers the action taken, whether the official applied it lawfully in the particular case, and whether required authorisation, review and remedies were provided.
What proportionality asks
- Is the objective important enough to justify limiting the right?
- Is the measure rationally connected to that objective?
- Could a less intrusive measure achieve it effectively?
- Is the overall privacy harm excessive in relation to the public benefit?
- Are there safeguards for access, use, retention, deletion, review and challenge?
These questions matter especially for bulk surveillance, biometric databases, location tracking and access to intimate health information. A measure can advance a legitimate objective and still be disproportionate because it captures too many people, lasts too long or lacks effective oversight.
Purposes that may justify an intrusion
Depending on the facts and the law, possible legitimate aims include national security and defence; sovereignty and integrity; preventing, detecting or investigating crime; public order; public health; protecting another person’s rights; administering welfare schemes and preventing fraud; taxation and regulation; and administering justice. These are potential justifications, not automatic exceptions. The stronger the intrusion, the more specific and convincing its justification should be.
For example, an investigation may justify a properly authorised, targeted search or interception in some circumstances. It does not follow that every person’s phone or communications may be monitored because an investigation exists. Relevant safeguards may include independent authorisation or review, limits on targets and duration, controls on irrelevant data, deletion rules and a way to challenge unlawful action.
National security is a weighty aim, but not a constitutional trump card. A court may account for the sensitivity of security matters while still examining whether there is legal authority, a real connection between the threat and the measure, limits on scope and duration, and meaningful review. Likewise, an emergency public-health response may justify temporary collection or use of information, but minimisation, limited access, retention limits, transparency and review remain important.
Privacy may also have to be balanced against other people’s rights, a fair trial, access to justice, or freedom of speech and the public’s right to receive information. But public interest is not the same as curiosity or sensationalism. Lawful possession of personal information does not automatically authorise public disclosure of it.
Different privacy interests, different risks
- Bodily privacy: searches, medical examinations, DNA or fingerprints.
- Decisional privacy: intimate choices involving family, reproduction, sexuality and personal life.
- Spatial privacy: the home and other private spaces.
- Informational privacy: collection, storage, profiling, sharing and publication of data.
- Communications privacy: calls, messages, email and online communications.
- Locational privacy: travel records, GPS information and movement patterns.
The justification for routine administrative data processing is not interchangeable with the justification for interference in intimate personal decisions or bodily autonomy. Reliance on “morality” or “decency” cannot simply mean enforcing majority preference against unpopular or intimate choices; dignity, equality, autonomy and non-discrimination remain relevant.
Free tools Windows power users keep installed
One-click scans. No signup required.
Examples: apply the test, do not assume the answer
- Biometric identity for welfare: Ask what law authorises collection and use, whether the data is necessary for the stated delivery or fraud-prevention purpose, what alternatives exist, and how access and reuse are controlled. Consent may not be genuinely voluntary if a person has no realistic way to obtain an essential service otherwise.
- Phone interception in a serious case: Examine the statutory authority, authorisation, target, duration and scope. An investigation alone does not settle whether interception is necessary or proportionate.
- Disease reporting or contact tracing: Consider whether aggregated or anonymised information would suffice, who can access identifiable records, when data is deleted and whether the measure ends or is reviewed when the emergency changes.
- Location tracking: Continuous tracking can reveal movement patterns and associations. A narrowly targeted, time-limited measure is different from indiscriminate tracking of a population.
- Disclosure by a public agency: The agency should assess publication separately from collection or internal use. Accountability may warrant disclosure of relevant facts without exposing unnecessary personal details.
- Personal information about an official: Legitimate scrutiny of public conduct does not mean every private detail is relevant. The connection to accountability and the privacy harm both matter.
Article 19 is relevant, but not the whole answer
Article 19(2) permits reasonable restrictions on speech and expression on listed grounds, including sovereignty and integrity of India, security of the State, friendly relations with foreign States, public order, decency or morality, contempt of court, defamation and incitement to an offence. Those grounds govern the Article 19(1)(a) freedom, subject to constitutional review; they are not a stand-alone catalogue of privacy exceptions. A privacy claim may arise under Article 21, involve equality under Article 14, or overlap with Article 19 freedoms such as speech, movement or association. See the Constitution of India on India Code.
Best Value
- 8 ¾ x 11 inches, spiral bound soft cover.
- Block style entry, 200 entries per journal
- Privacy guard protects client information
- For use in any state
- Electronic & remote notarization option
Constitutional privacy and the DPDP framework
The Digital Personal Data Protection Act, 2023 is a statutory framework for processing digital personal data; it is not the source of the fundamental right to privacy and does not replace constitutional review. The Act addresses matters including grounds for processing, obligations, individual rights, exemptions and enforcement. Consult the Act on India Code.
As of September 24, 2026, the Act and the Digital Personal Data Protection Rules, 2025 are being commenced in phases, rather than all provisions being operational at once. The Rules were notified on November 13, 2025: Rules 1, 2 and 17–21 took effect on publication; Rule 4 is scheduled for one year after publication; and Rules 3, 5–16, 22 and 23 are scheduled for eighteen months after publication. The Act also has phased commencement dates. Check the relevant provision’s commencement before relying on it: India Code commencement details and the official Gazette Rules.
The fundamental-right analysis is strongest against State action. A dispute involving a private company or individual may also be governed by data-protection legislation, contract, sectoral rules or other legal doctrines; it is not automatically the same as a direct Article 21 claim against the State.
Quick Recap
A practical checklist
- What privacy interest is affected—body, home, communications, location, health, family life or personal data?
- What exactly is the State doing: collecting, retaining, analysing, profiling, sharing, publishing, intercepting or searching?
- What law authorises that specific action, and are its limits being followed?
- What is the precise, constitutionally legitimate objective?
- Is the interference necessary and proportionate, or is a less intrusive alternative available?
- What safeguards, independent review, deletion rules and remedies protect against misuse?
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
