The Right to Privacy in the Digital Age: An analysis

Reshu Ahlawat
LLM STUDENT
IMS UNISON UNIVERSITY
Reshuahlwat10@gmail.com

ABSTRACT

The rapid expansion of digital technologies has fundamentally transformed the way personal data is collected, processed, and disseminated, raising critical concerns about the protection of individual privacy. In this context, the right to privacy has emerged as a cornerstone of constitutional and human rights discourse. This research paper examines the evolving contours of the right to privacy in the digital age, with particular reference to the Indian legal framework.

The study undertakes a doctrinal analysis of constitutional provisions, especially Article 21 of the Constitution of India, as interpreted in landmark judicial pronouncements that recognize privacy as an intrinsic part of the right to life and personal liberty. It further evaluates statutory frameworks such as the Information Technology Act, 2000, and the Digital Personal Data Protection Act, 2023, in addressing emerging challenges related to data protection, surveillance, and informational autonomy. The paper also explores the role of the judiciary in balancing state interests, such as national security and public order, with individual privacy rights. In addition, the research incorporates a critical assessment of contemporary issues including data breaches, algorithmic profiling, social media surveillance, and the role of private corporations in handling personal data. It highlights the growing tension between technological innovation and privacy protection, emphasizing the need for robust regulatory mechanisms and accountability standards.

The findings suggest that while India has made significant progress in recognizing and legislating privacy rights, gaps remain in effective implementation, enforcement, and public awareness. The paper argues for a comprehensive and harmonized approach that integrates legal safeguards, technological solutions, and policy reforms to ensure meaningful protection of privacy in the digital ecosystem.

The study concludes that safeguarding the right to privacy in the digital age is essential not only for protecting individual autonomy and dignity but also for strengthening democratic governance in an increasingly data-driven society.

Keywords: Right to Privacy, Digital Age, Data Protection, Article 21, Surveillance, Information Technology Law, India, Digital Personal Data Protection Act.

INTRODUCTION

A fundamental right is the right to privacy. This entitlement safeguards the personal space of individuals from intervention by both governmental and non-governmental entities, enabling them to make independent decisions about their lives. Privacy and the right to privacy are difficult concepts to grasp. Privacy is based on the principle of natural rights and responds to changing information and communication technology. The right to privacy is our right to maintain a domain around us that includes all of the things that are a part of us, such as our body, home, property, thoughts, feelings, secrets, and identity. The right to privacy allows us to choose which parts of this domain can be accessed by others and to control the extent, manner, and timing of the use of those parts we choose to reveal. The definition of privacy is “the state or condition of not having one’s acts or decisions interfered with or exposed to public attention.^[1]” The definition of the right to privacy is: “Autonomy of the self.” And the freedom from unjustified public examination or exposure of an individual and their belongings. Conversely, the definition of invasion of privacy is defined as “an unwarranted use of one’s identity and interference with one’s private affairs.” “Right to be alone” and privacy are sometimes used interchangeably.

In India, the right to privacy is a rare combination of common law, customary law, and constitutional rights dispersed throughout several legal domains. The discourse surrounding the right to privacy is not a new one in the nation. This argument has a lengthy history. Early on after independence, the courts upheld fundamental rights exactly as they were and did not consider the right to privacy to be one of them. As said by court in the case of:

In MP Sharma v. Satish Chandra^[2], the court ruled that because the constitution’s framers had not included a clause prohibiting the search and seizure of documents, it would not acknowledge such a right. The recognition of the right to privacy started with the Kharak Singh v. State of Uttar Pradesh^[3] case. In this case, the majority held that since the right to privacy is not a constitutionally guaranteed right, attempting to track an individual’s movements which is merely an invasion of their privacy does not violate their fundamental rights. However, Justice Subha Rao’s opposing opinion in this case sparked discussions regarding the right to privacy being guaranteed as a basic right.

In the case of M.P. Sharma and Ors. v. Satish Chandra^[4], District Magistrate, Delhi and Ors., where the warrant granted for search and seizure was questioned in accordance with Sections 94 and 96(1) of the Criminal Code of Procedure, the SC first considered whether the “right to privacy” is a fundamental right. The authorization for search and seizure was found to be in compliance with all constitutional provisions by the SC. Additionally, the Court declined to acknowledge the right to privacy as a fundamental freedom protected by the Indian Constitution.

Subsequently, in the Kharak Singh v State of Uttar Pradesh and Ors.^[5] case, the Court considered whether monitoring an accused person’s nighttime home visits would constitute an abuse of the right guaranteed by Article 21 of the Indian Constitution. This raised the question of whether the right to privacy was included in Article 21. In actuality, the SC decided that this kind of surveillance violated Article 21. Furthermore, the majority judges ruled that since the right to privacy was not specifically mentioned in Article 21, it could not be considered a basic right.

In the case of K. S. Puttaswamy (Retd.) v Union of India^[6], the SC considered this matter once more. The argument made against the Aadhaar Card Scheme was that it violated citizens’ fundamental right to privacy guaranteed by Article 21 of the Indian Constitution by gathering and compiling their biometric data for various purposes. The Court submitted the case to a constitutional panel made up of nine (9) judges due to the uncertainty surrounding the constitutional status of the right to privacy from earlier court decisions.

Significance Of The Study

The right to privacy holds immense importance in contemporary society, especially as the digital landscape continues to evolve and influence every aspect of human interaction. In today’s world, where personal data is constantly generated, collected and processed through online platforms, mobile applications, surveillance systems and artificial intelligence tools, the boundaries of privacy are becoming increasingly fragile. The significance of this study lies in its attempt to analyze these transformations and explore how legal systems can adapt to safeguard individual autonomy and dignity in the digital era.[7]

In India, the recognition of the right to privacy as a fundamental right in the Justice K.S. Puttaswamy (Retd.) v. Union of India judgment was a landmark development. However, there remains a noticeable gap between this constitutional recognition and the implementation of robust data protection practices. The Digital Personal Data Protection Act, 2023 represents a step forward, but issues related to consent, surveillance, state access to data and accountability of digital platforms persist. This study is significant in assessing whether existing legal instruments are sufficient to meet the needs of a rapidly digitizing society.

Right To Privacy In India

The history of privacy dates back thousands of years. According to one author, “The great epic Ramayana establishes as far as possible the social norm that a lady should not be viewed by a male stranger.

In Hindu law, the concept “privacy” could not have a terminological counterpart. But according to ancient Hindu law, “every man is the king of his own house.” Additionally, the Ramayana states that anyone who witnesses Draupadi with any of the Pandavas would be sentenced to twelve years in prison. The Hindu Jurisprudence regards one’s home privacy as fundamental. However, privacy claims encompass not only the home but also the surrounding areas. For instance, the Manusmriti and Yajnawalkya stipulate that one cannot use another’s property without permission; as a result, the Hindu Jurisprudence recognizes not only the tangible aspects of one’s surroundings but also their intangible qualities.

Historical Development Of The Right To Privacy In India

The concept of privacy, though intrinsic to human dignity and liberty, was not explicitly enshrined in the original text of the Indian Constitution. For a long time, the Indian legal system lacked a formal recognition of privacy as a fundamental right. The historical development of the right to privacy in India is closely linked to the interpretation of Article 21, which guarantees the right to life and personal liberty, and has evolved significantly through judicial pronouncements over time. The early judicial approach was conservative.

1. In Kharak Singh v. State of Uttar Pradesh (1962)[8], the Supreme Court considered the constitutionality of police surveillance and domiciliary visits. Although the majority rejected the recognition of privacy as a fundamental right, Justice Subba Rao’s dissent laid the groundwork for future developments by asserting that personal liberty included the right to be let alone. This dissent, though not binding, became a foundational voice in later jurisprudence.
2. A pivotal shift occurred in Gobind v. State of Madhya Pradesh (1975)[9], where the Court assumed that privacy could be a fundamental right derived from Article 21. However, it held that it was not absolute and could be curtailed for compelling state interests. This cautious but progressive interpretation marked a significant step in the constitutional recognition of privacy.
3. Further reinforcement came from R. Rajagopal v. State of Tamil Nadu (1994)[10], also known as the “Auto Shankar case.” The Supreme Court explicitly held that the right to privacy is implicit in the right to life and liberty under Article 21. The Court ruled that individuals have a right to prevent others, including the state, from infringing on their private lives, unless justified by a countervailing public interest.
4. In People’s Union for Civil Liberties (PUCL) v. Union of India (1997)[11], which dealt with phone tapping, the Supreme Court held that surveillance without proper legal procedure was a violation of privacy under Article 21. This judgment emphasized procedural safeguards and highlighted how technological intrusions could infringe upon privacy rights.
5. The culmination of this evolving jurisprudence came in the landmark judgment of Justice K.S. Puttaswamy (Retd.) v. Union of India (2017)[12], where a nine-judge constitutional bench unanimously held that the right to privacy is a fundamental right, protected under Articles 14, 19, and 21. The Court recognized privacy as intrinsic to dignity, autonomy, and liberty, and emphasized its multidimensional nature—covering informational, bodily, and decisional privacy. This judgment overruled previous decisions like M.P. Sharma (1954) and Kharak Singh, thereby cementing privacy’s place in Indian constitutional law. The Puttaswamy judgment did not merely declare a right; it offered a robust philosophical and normative framework, situating privacy within the broader context of a democratic and rights-based society. It marked the true constitutionalizing of privacy in India.

Thus, the historical development of privacy in India reflects a gradual but determined shift from judicial hesitation to strong constitutional affirmation, making it a cornerstone of personal liberty in the digital age.

India Statutes That Seek To Protect Privacy Rights

The legal framework for privacy protection in India has evolved over time in response to increasing concerns about data protection, cybercrimes, and the rights of individuals in the digital age. Several key laws have been enacted to regulate the collection, storage, and processing of personal data and to address the misuse of digital technologies. The Information Technology Act, 2000 (IT Act), the Digital Personal Data Protection Act, 2023, and relevant provisions of the Bharatiya Nyaya Sanhita, 2023 (BNS)are central to privacy protection in India.[13]

The right to privacy is recognised by a number of Indian statutes, although none of them provide a definition for the term. Here are a handful of them:

According to Section 509 of the IPC, a woman may be fined or imprisoned for a year for insulting her modesty and invading her privacy. The IPC’s Section 292 makes it illegal to sell, possess, etc., pornographic materials. Nonetheless, this clause may be examined further at a later time.

Section 26 of the CrPC permits, to the extent feasible, the presidency of a woman over offences under Sections 376, 376(A-E) of the IPC, such as rape. The accused must be informed that confessions are voluntary since they may be used against them as evidence, as required by Section 164(2) of the Code of Criminal Procedure Code. The Magistrate would not permit the person to be held in police custody under sub-section (3) if the individual withholds his confession before he is ready to confess.[14]

The Indian Telegraph Act of 1885 contains a number of safeguards that safeguard citizens’ right to privacy. For example, Section 24 states that if someone violates Section 23 by, for example, entering a government telegraph office’s signal room without authorization, refusing to leave the room upon an official’s request, or purposefully obstructing an official while they are on duty, they may be punished with up to a year in jail or a fine. A person who willfully tampers or damages a telegraph is subject to three years in prison and/or a fine under Section 25. A person who illegally keeps a message that was accidentally received to him but should have been forwarded to someone else faces up to two years in prison and/or a fine under Section 30 of the Indian Evidence Act.

Information Technology Act, 2000 (IT Act)

The Information Technology Act, 2000, is one of the first comprehensive legal frameworks in India to address issues of cybercrimes, electronic commerce, and data protection. While not exclusively focused on privacy, the IT Act provides foundational provisions related to the regulation of electronic records, data security, and cyber offenses.[15]

Key provisions relevant to digital privacy under the IT Act include:

1. Section 43: Deals with unauthorized access to a computer system or data, prescribing penalties for individuals or organizations who engage in cybercrimes like hacking, identity theft, or data breaches.
2. Section 66E: Addresses the violation of privacy through the capture or transmission of images of a person without their consent, specifically dealing with offenses related to the sharing of private images.
3. Section 72: Imposes penalties on cybersecurity professionals or employees who disclose personal data or confidential information without consent, thereby violating an individual’s privacy.

Though the IT Act laid the foundation for digital security and privacy, it was widely criticized for not sufficiently addressing the evolving challenges related to personal data protection and privacy in the digital age. This led to the formulation of more comprehensive legislation like the Digital Personal Data Protection Act, 2023.

Digital Personal Data Protection Act, 2023

The Digital Personal Data Protection Act, 2023 represents a significant milestone in India’s data protection and privacy landscape. This Act aims to create a robust and accountable framework for the protection of personal data and to regulate its processing by organizations.[16]

1. Consent-based Data Processing: The Act mandates that data controllers obtain explicit consent from individuals before collecting or processing their personal data. The consent must be informed, specific, and revocable.
2. Rights of Individuals: It grants individuals several rights, including the right to access their data, the right to correction, and the right to erasure or “right to be forgotten.” These rights empower individuals to exercise control over their personal data.
3. Data Protection Authority (DPA): The Act establishes an independent regulatory body, the Data Protection Authority of India (DPA), which is tasked with overseeing compliance with the law, investigating complaints, and imposing penalties for violations.
4. Cross-Border Data Transfers: The Act restricts the transfer of sensitive personal data to foreign countries, subject to certain conditions. However, it provides exemptions for countries that have a comparable level of data protection laws.

This Act, being the most comprehensive data protection legislation in India to date, aims to align India’s data protection framework with international standards, such as the General Data Protection Regulation (GDPR) of the European Union.

Bharatiya Nyaya Sanhita, 2023 (BNS)[17]

While the Bharatiya Nyaya Sanhita, 2023 (BNS) does not specifically address privacy, several provisions under the BNS are relevant to the misuse or breach of personal data and privacy rights.

1. Clause 319 (Cheating by Impersonation): In cases where a person uses another’s identity or personal information without consent, this section is used to prosecute individuals for impersonation and cheating.
2. Section 318(4) (Cheating and Dishonestly Inducing Delivery of Property): This provision can be applied in cases where personal information is fraudulently used to deceive or defraud individuals, such as identity theft or financial fraud.
3. Section 77 (Voyeurism): This section specifically deals with privacy violations related to the unauthorized observation or recording of a person’s private acts, including incidents of digital voyeurism.

While the BNS’s provisions are applicable in privacy-related offenses, they are not designed specifically for the digital landscape and often require additional regulatory frameworks to effectively address modern privacy issues.

Recognition Of Privacy In Indian Constitutional Law

The recognition of privacy as a fundamental right in Indian constitutional law has been a gradual process, with landmark judgments that have significantly shaped the evolution of privacy jurisprudence in India.

The journey of privacy as a constitutional right can be understood through the progression of three key cases:

M.P. Sharma v. Satish Chandra (1954), Kharak Singh v. State of Uttar Pradesh (1962), and Justice K.S. Puttaswamy v. Union of India (2017). Each of these cases represents a critical juncture in the recognition of privacy in Indian law.

M.P. Sharma v. Satish Chandra (1954)[18]

The first major case that addressed the issue of privacy in the context of Indian constitutional law was M.P. Sharma v. Satish Chandra. In this case, the Supreme Court ruled on the legality of search and seizure under the provisions of the Criminal Procedure Code and the Indian Evidence Act. The petitioners argued that their right to privacy was being violated due to the unlawful search of their premises. However, the Court held that the right to privacy was not a guaranteed fundamental right under the Indian Constitution, as there was no express provision recognizing privacy. The Court also observed that the Constitution did not provide an explicit guarantee of privacy and dismissed the petitioners’ claim. This judgment reflected a narrow understanding of privacy, emphasizing the state’s authority over individual freedoms.

Kharak Singh v. State of Uttar Pradesh (1962)[19]

The next significant case was Kharak Singh v. State of Uttar Pradesh, where the Supreme Court again dealt with the issue of personal surveillance by the police. The case involved the challenge to a regulation allowing domiciliary visits by the police without a warrant. The majority of the Court did not recognize the right to privacy as a fundamental right, reinforcing the view in M.P. Sharma that privacy was not protected under the Constitution. However, Justice Subba Rao’s dissenting opinion was groundbreaking. He contended that the right to privacy was implied under Article 21 (the right to life and personal liberty), even if it was not explicitly mentioned in the Constitution. His dissent laid the foundation for the eventual recognition of privacy as a constitutional right, influencing future judgments on the subject.

Justice K.S. Puttaswamy v. Union of India (2017)[20]

The Puttaswamy case marked a watershed moment in the recognition of the right to privacy in India. In this case, the petitioners challenged the Aadhaar scheme on the grounds that it violated the right to privacy. The Supreme Court, in a historic nine-judge bench judgment, overturned the previous decisions in M.P. Sharma and Kharak Singh and unanimously declared that the right to privacy is a fundamental right under the Indian Constitution. The Court held that privacy is intrinsic to Article 21 (right to life and personal liberty) and also flows from the freedoms guaranteed under Articles 14 (right to equality) and 19 (right to freedom of speech and expression). The judgment recognized privacy as a fundamental aspect of human dignity, autonomy, and liberty, encompassing both bodily integrity and informational privacy. The ruling in Puttaswamy effectively overturned earlier precedents that had denied privacy protection, establishing it as a robust and constitutionally protected right.

The Puttaswamy decision also set the stage for further developments in privacy law, particularly in relation to digital privacy and data protection, marking the beginning of a new era for privacy jurisprudence in India.

Conclusion

The study set out to critically analyse India’s privacy regulations in light of those of industrialised countries like the US and the United Kingdom. It examined the contradictions in the judiciary’s privacy views, the flaws in the laws that now protect Indians’ right to privacy, and the need for a reassessment of privacy standards in India using both empirical and nonempirical approaches. It was hypothesised that India’s rights to privacy are inferior to those of the US and the United Kingdom, and that comprehensive legislation would be necessary to sufficiently safeguard this fundamental human right. It was discovered that whereas international human rights frameworks offer a common standard, Indian laws fall short of the necessary requirements, particularly when it comes to addressing the issues raised by social media and digital communication.

The study found a number of important issues:

1. Inadequate Legislation: India’s present legal system is not strong enough or clearly defined enough to protect people’s right to privacy, particularly when it comes to the internet. This deficiency makes it easier to violate people’s privacy without their awareness or agreement.

2. Judiciary’s Views: The judiciary is not always in agreement when it comes to privacy rights, which makes it even harder to effectively enforce and protect these rights.

3. Social Media Practices: Users’ rights to privacy are violated by social media corporations’ frequently ambiguous, oppressive, and deceptive privacy policies. Users, especially students, also don’t know enough about the rules and regulations around social media.

4. Restrictions on Research: Due to data availability issues, especially with regard to empirical research, the study primarily relied on previously published works and court papers.

Notwithstanding these obstacles, the study’s importance rests in its ability to advance our knowledge of privacy issues in the digital age and promote more robust human rights safeguards, especially with relation to the privacy of Indian social media users. The study serves as a call to action for legislators, stakeholders, and policymakers to enact comprehensive privacy laws that comply with international standards and successfully handle the changing challenges posed by social media and digital communication platforms. It does this by highlighting the inadequacies in current legislation and judicial interpretations.

Suggestions

Strengthening Legal and Regulatory Frameworks

India has taken a significant step with the enactment of the Digital Personal Data Protection Act, 2023. However, to make this law effective, it must be supported by comprehensive rules, sector-specific guidelines, and strong institutional mechanisms. Clarifying the scope of key definitions such as “consent,” “data fiduciary,” and “sensitive personal data” will help ensure clarity and consistency in enforcement.

Empowering the Data Protection Authority (DPA)

For any privacy law to be effective, a transparent, well-resourced, and independent regulatory authority is essential. The proposed Data Protection Board of India must be given autonomy, sufficient funding, and enforcement powers to investigate breaches, levy penalties, and ensure compliance across sectors.

Consent Architecture and User Empowerment

One of the most vital pillars of digital privacy is informed and meaningful consent. India must adopt a user-centric model of consent, where individuals have full knowledge of how their data is being collected, stored, and used. Mechanisms for withdrawing consent, opt-out provisions, and data portability must be prioritized.[21]

Robust Grievance Redressal and Accountability[22]

The privacy framework should include simple, accessible, and time-bound redressal mechanisms. Whether it is a government agency or a private company, all entities handling personal data should be accountable for misuse or negligence. The imposition of deterrent penalties and the creation of fast-track tribunals to hear privacy-related complaints will enhance user trust and legal effectiveness.

Cross-Border Data Flow Regulations

Given the global nature of the internet, clear policies on cross-border data transfers are necessary. India must strike a balance between data sovereignty and international interoperability, possibly by entering into bilateral or multilateral agreements that ensure a comparable level of data protection with partner countries.[23]

Sector-Specific Guidelines and Harmonization

Areas such as financial technology, healthcare, education, and telecom require tailored privacy safeguards. Coordination between regulators like RBI, TRAI, and IRDAI and the central data protection authority will help prevent overlaps and regulatory fragmentation.[24]

Digital Literacy and Public Awareness

A privacy-respecting ecosystem cannot be built without an informed citizenry. Privacy literacy campaigns, starting from school curricula to public outreach programs, should be launched to educate people about their rights and responsibilities in the digital world.

Technological Safeguards and Innovation[25]

The use of privacy-enhancing technologies (PETs) like encryption, anonymization, and differential privacy must be encouraged. Startups and tech companies should be incentivized to adopt “privacy by design” and “security by design” principles in all digital products and services.

REFERENCES

List of Statutes

1. Constitution of India. (1950).
2. Information Technology Act, 2000 (India).
3. Digital Personal Data Protection Act, 2023 (India).
4. Indian Telegraph Act, 1885 (India).
5. Code of Criminal Procedure, 1973 (India).
6. Indian Evidence Act, 1872 (India).
7. Aadhaar (Targeted Delivery of Financial and Other Subsidies, Benefits and Services) Act, 2016 (India).
8. Right to Information Act, 2005 (India).
9. Consumer Protection Act, 2019 (India).
10. Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (India).
11. Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 (India).
12. General Data Protection Regulation (GDPR). (2016). European Union.
13. California Consumer Privacy Act (CCPA). (2018). United States.
14. Health Insurance Portability and Accountability Act (HIPAA). (1996). United States.
15. UK Data Protection Act. (2018). United Kingdom.

Books

1. Bennett, C. J., & Raab, C. D. (2006). The governance of privacy: Policy instruments in global perspective (2nd ed.). MIT Press.
2. Bygrave, L. A. (2014). Data privacy law: An international perspective. Oxford University Press.
3. Cate, F. H. (1997). Privacy in the information age. Brookings Institution Press.
4. Cohen, J. E. (2019). Between truth and power: The legal constructions of informational capitalism. Oxford University Press.
5. DeCew, J. W. (1997). In pursuit of privacy: Law, ethics, and the rise of technology. Cornell University Press.
6. Floridi, L. (2014). The fourth revolution: How the infosphere is reshaping human reality. Oxford University Press.
7. Greenleaf, G. (2014). Asian data privacy laws: Trade and human rights perspectives. Oxford University Press.
8. Kuner, C. (2007). Transborder data flows and data privacy law. Oxford University Press.
9. Mantelero, A. (2017). Personal data for decisional purposes in the age of analytics: From an individual to a collective dimension of data protection. Springer.
10. Nissenbaum, H. (2010). Privacy in context: Technology, policy, and the integrity of social life. Stanford University Press.
11. Richards, N. M. (2015). Intellectual privacy: Rethinking civil liberties in the digital age. Oxford University Press.
12. Schwartz, P. M., & Solove, D. J. (2020). Information privacy law (7th ed.). Wolters Kluwer.
13. Solove, D. J. (2008). Understanding privacy. Harvard University Press.
14. Solove, D. J. (2021). Understanding privacy. Harvard University Press.
15. Tene, O., & Polonetsky, J. (Eds.). (2013). Privacy in the age of big data: Recognizing threats, defending rights. Stanford Law Books.

Journal Articles

1. Bennett, C. J., & Raab, C. D. (2006). The governance of privacy: Policy instruments in global perspective. Information Polity, 11(3–4), 217–218.
2. Bygrave, L. A. (2014). Data privacy law: An international perspective. Oxford Journal of Legal Studies, 34(2), 437–442.
3. Cate, F. H. (2010). The limits of notice and choice. IEEE Security & Privacy, 8(2), 59–62.
4. Cohen, J. E. (2012). Configuring the networked self: Law, code, and the play of everyday practice. Yale Law Journal, 122(7), 1904–1975.
5. De Hert, P., & Gutwirth, S. (2006). Privacy, data protection and law enforcement. Criminal Law Forum, 17(1), 61–82.
6. Floridi, L. (2016). On human dignity as a foundation for the right to privacy. Philosophy & Technology, 29(4), 307–312.
7. Greenleaf, G. (2014). Global data privacy laws: 89 countries, and accelerating. Privacy Laws & Business International Report, 131, 14–17.
8. Koops, B. J., Newell, B. C., Timan, T., Škorvánek, I., Chokrevski, T., & Galič, M. (2017). A typology of privacy. University of Pennsylvania Journal of International Law, 38(2), 483–575.
9. Kuner, C. (2013). The internet and the global reach of EU law. Columbia Journal of European Law, 19(1), 1–28.
10. Nissenbaum, H. (2004). Privacy as contextual integrity. Washington Law Review, 79(1), 119–157.
11. Nissenbaum, H. (2010). Privacy in context: Technology, policy, and the integrity of social life. Washington Law Review, 79(1), 119–157.
12. Ohm, P. (2010). Broken promises of privacy: Responding to the surprising failure of anonymization. UCLA Law Review, 57(6), 1701–1777.
13. Richards, N. M. (2013). The dangers of surveillance. Harvard Law Review, 126(7), 1934–1965.
14. Richards, N. M., & King, J. H. (2014). Big data ethics. Wake Forest Law Review, 49(2), 393–432.
15. Schwartz, P. M., & Solove, D. J. (2011). The PII problem: Privacy and a new concept of personally identifiable information. New York University Law Review, 86(6), 1814–1894.
16. Solove, D. J. (2006). A taxonomy of privacy. University of Pennsylvania Law Review, 154(3), 477–564.
17. Solove, D. J. (2013). Privacy self-management and the consent dilemma. Harvard Law Review, 126(7), 1880–1903.
18. Tene, O., & Polonetsky, J. (2013). Big data for all: Privacy and user control in the age of analytics. Northwestern Journal of Technology and Intellectual Property, 11(5), 239–273.
19. Warren, S. D., & Brandeis, L. D. (1890). The right to privacy. Harvard Law Review, 4(5), 193–220.
20. Zuboff, S. (2019). Surveillance capitalism and the challenge of collective action. New Labor Forum, 28(1), 10–29.

---

^[1] Anand, V. (2023). A Comprehensive Analysis on Right to Privacy in the Digital Age under the Ambit of Data Privacy Laws in India. International Journal of Science and Research (IJSR), 12(11), 1802–1805. https://doi.org/10.21275/sr231125123607.

^[2] MP Sharma v. Satish Chandra, 1954 AIR 300.

^[3] Kharak Singh v. State of Uttar Pradesh, 1963 AIR 1295.

^[4] M.P. Sharma and Ors. v. Satish Chandra, 1954 AIR 300.

^[5] Kharak Singh v State of Uttar Pradesh and Ors., 1963 AIR 1295.

^[6] AIR 2018 SC (SUPP) 1841.

[7] Solove, D. J. (2005). The digital person: technology and privacy in the information age. Choice Reviews Online, 42(09), 42–5512. https://doi.org/10.5860/choice.42-5512.

[8] Kharak Singh v. State of Uttar Pradesh, AIR 1963 SC 1295.

[9] Gobind v. State of Madhya Pradesh, (1975) 2 SCC 148.

[10] R. Rajagopal v. State of Tamil Nadu, (1994) 6 SCC 632.

[11] People’s Union for Civil Liberties (PUCL) v. Union of India, (1997) 1 SCC 301.

[12] Supra Note 1.

[13] Mehrotra, T. & IILM University, Gurugram. (2025). THE LEGAL FRAMEWORK OF DATA PROTECTION IN INDIA: THE NEED FOR a COMPREHENSIVE DATA PROTECTION LAW. In Indian Journal of Integrated Research in Law: Vol. V (Issue V, pp. 1492–1494) [Journal-article]. https://ijirl.com/wp-content/uploads/2025/10/THE-LEGAL-FRAMEWORK-OF-DATA-PROTECTION-IN-INDIA-THE-NEED-FOR-A-COMPREHENSIVE-DATA-PROTECTION-LAW.pdf

[14] Ibid

[15] Blythe, S. E. (2006). A critique of India’s Information Technology Act and recommendations for improvement. Syracuse Journal of International Law and Commerce, 34(1), 2. https://surface.syr.edu/jilc/vol34/iss1/2.

[16] Sundara, K., & Narendran, N. (2023). The Digital Personal Data Protection Act, 2023: analysing India’s dynamic approach to data protection. Computer Law Review International, 24(5), 129–141. https://doi.org/10.9785/cri-2023-240502.

[17] Barman, Karavi. “BHARATIYA NYAYA SANHITA AND THE CONSTITUTIONAL ASPIRATIONS OF INDIA: A CRITICAL ANALYSIS.” ACTA SCIENTIAE (2025): 31-38.

[18] M.P. Sharma v. Satish Chandra, AIR 1954 SC 300.

[19] Supra Note 10.

[20] Supra Note 1.

[21] Pathmabandu, C., Grundy, J., Chhetri, M. B., & Baig, Z. (2023). Privacy for IoT: Informed consent management in Smart Buildings. Future Generation Computer Systems, 145, 367–383. https://doi.org/10.1016/j.future.2023.03.045.

[22] Mujumdar, M. S., & Prabhu, S. G. (2023). Telecom industry grievance redressal system: a study of ombudsman approach in selected countries. Digital Policy Regulation and Governance, 25(6), 588–600. https://doi.org/10.1108/dprg-11-2022-0136.

[23] LeSieur, F. (2012). Regulating cross-border data flows and privacy in the networked digital environment and global knowledge economy. International Data Privacy Law, 2(2), 93–104. https://doi.org/10.1093/idpl/ips004.

[24] Yadav, V. (2025). Crossing borders: Comparative perspectives on data protection laws in India, the EU, and the US. Journal on Development of Intellectual Property and Research, 1, 38–51. https://doi.org/10.64618/faasre69

[25] Selvakumar, P., Pilli, S., & Kannan, N. (2025). Balancing innovation and privacy: Understanding AI in the digital world. In [Book/Edited Volume Title]. https://doi.org/10.4018/979-8-3693-9015-3.ch011