JUSTICE K.S. PUTTASWAMY (RETD.) V. UNION OF INDIA (2017)

Case Citation and Basic Information

Justice K.S. Puttaswamy (Retd.) v. Union of India, (2017) 10 SCC 1, AIR 2017 SC 4161 (India), Supreme Court of India (Nine-Judge Constitutional Bench), decided 24 August 2017.

Parties: Justice K.S. Puttaswamy (Retd.) (Petitioner) v. Union of India (Respondent)

Bench Composition: S. Abdul Nazeer, Sanjay Kishan Kaul, D.Y. Chandrachud, Abhay Manohar Sapre, Rohinton Fali Nariman, R.K. Agrawal, S.A. Bobde, J. Chelameswar and Jagdish Singh Khehar.

Introduction

India’s Constitution does not use the word “privacy” anywhere. This created a real problem, because two old decisions, M.P. Sharma v. Satish Chandra (1954) and Kharak Singh v. State of Uttar Pradesh (1962), had said no such right existed under the Constitution, even though later benches kept deciding cases as if it did. Justice K.S. Puttaswamy (Retd.) v. Union of India settled this contradiction. A nine-judge bench, reserved for the Court’s most important constitutional questions, unanimously held that privacy is protected as part of the right to life and personal liberty under Article 21, and as part of the wider freedoms in Part III. The case began as a challenge to the Aadhaar identity scheme, but this judgment only decides whether privacy is a right at all, not whether Aadhaar itself is valid. That is why it is treated as one of the foundational cases in Indian constitutional law.

Facts of the Case

In 2011, the Union government began enrolling residents in Aadhaar, a scheme run by the newly created Unique Identification Authority of India that gives each person a twelve-digit number linked to their fingerprints, iris scans, and other personal details. Aadhaar became the largest biometric identification programme in the world, and what started as a voluntary identity document was slowly turned into a requirement for opening bank accounts, getting a mobile connection, filing taxes, and receiving welfare subsidies.

In 2012, Justice K.S. Puttaswamy, a retired judge of the Karnataka High Court, filed a writ petition under Article 32 arguing that making residents hand over this data, without proper legal safeguards against misuse, opened the door to profiling and surveillance and violated their right to privacy. Several other petitions raising similar concerns about Aadhaar were tagged with his and heard together.

When the matter first came up before a three-judge bench, the Union raised an objection: that no fundamental right to privacy existed under the Constitution at all. It relied on M.P. Sharma v. Satish Chandra (1954), decided by an eight-judge bench, and Kharak Singh v. State of Uttar Pradesh (1962), decided by a six-judge bench, both of which had made observations to that effect. Since a smaller bench cannot go against the reasoning of a larger one, Chelameswar, Bobde, and Nagappan, JJ. could not simply set the objection aside, even though decades of later cases had proceeded as if privacy were already protected. On 11 August 2015, they referred the threshold question, whether the Constitution guarantees a right to privacy, to a larger bench.

This reference first went to a five-judge Constitution Bench. On 18 July 2017, that bench, led by Chief Justice Khehar, decided the question should be settled by nine judges instead. The nine-judge bench heard arguments from 19 July to 2 August 2017 and stuck to the constitutional question it had been asked to decide. It did not rule on whether Aadhaar itself was valid; a separate five-judge bench did that the following year. The judgment was delivered on 24 August 2017.

Legal Issues

The nine-judge bench had to answer four connected questions of law:

1. Does the Constitution of India guarantee a right to privacy?
2. If such a right exists, is it a stand-alone fundamental right, or does it only arise as an extension of other guarantees, mainly the right to life and personal liberty under Article 21?
3. Are the observations in M.P. Sharma v. Satish Chandra (1954) and Kharak Singh v. State of Uttar Pradesh (1962), which denied that a constitutional right to privacy exists, correctly decided?
4. What is the basis for a right to privacy, given that the constitutional text, unlike the Fourth Amendment to the United States Constitution, does not mention it directly?

Arguments Presented

1. Petitioner’s Arguments:

Counsel for the petitioners, including Gopal Subramanium, Kapil Sibal, and Shyam Divan, argued that privacy is not something the Constitution hands out but something it recognises as already belonging to every person, simply because of their dignity and autonomy. On this view it comes from Article 21 read together with the equality and freedom guarantees in Articles 14 and 19, not from any one provision standing alone. The petitioners pointed out that M.P. Sharma and Kharak Singh had both relied on the reasoning in A.K. Gopalan v. State of Madras (1950), which treated each fundamental right as a separate guarantee with no connection to the others. An eleven-judge bench had already rejected that reasoning in R.C. Cooper v. Union of India (1970), and the seven-judge bench in Maneka Gandhi v. Union of India (1978) went further, reading the fundamental rights chapter as one connected whole. If the foundation under the two older privacy decisions no longer held, the petitioners argued, their conclusions could not hold either.

2. Respondent’s Arguments:

The Union of India, represented by Attorney General K.K. Venugopal among others, argued that the Constituent Assembly had thought about including a clear privacy guarantee and chose not to, which made its absence deliberate rather than an oversight. Treating privacy as a fundamental right, the Union said, would give courts a standard too vague to apply consistently, and could be used to block welfare schemes such as Aadhaar, which was meant to stop leakage in the delivery of subsidies to India’s poorest people. On this view, privacy only existed as a common law or statutory interest, shaped by ordinary legislation, not as a constitutional guarantee that could override an Act of Parliament.

Court’s Reasoning and Analysis

Justice Chandrachud’s plurality opinion, written for himself, Chief Justice Khehar, and Justices Agrawal and Nazeer, is the analytical core of the judgment. It rejects the Union’s originalist argument, that the Constituent Assembly’s choice not to include a specific privacy clause settles the matter, on the ground that fundamental rights are not frozen at whatever meaning was debated in 1949 but are read to protect the values, mainly dignity and liberty, running through the whole of Part III. Building on this, the opinion holds that privacy is not a right the Constitution creates but one that already exists in personhood, which the Constitution simply recognises. It traces the doctrinal history from A.K. Gopalan’s compartmentalised view of fundamental rights, through its rejection in R.C. Cooper v. Union of India (1970) and Maneka Gandhi v. Union of India (1978), to conclude that M.P. Sharma and Kharak Singh, resting on Gopalan’s discredited foundation, could no longer be treated as good law. The opinion also revisits Suresh Kumar Koushal v. Naz Foundation (2013), which had upheld the criminalisation of homosexuality under Section 377 of the Penal Code, calling its reasoning a discordant note in the Court’s privacy jurisprudence, a view Justice Kaul separately agreed with.

The five concurring opinions rely on the same precedents but build the right differently. Justice Chelameswar frames privacy around three ideas taken from American scholarship, repose, sanctuary, and intimate decision, and suggests some privacy claims deserve strict scrutiny against a compelling state interest, without saying exactly which claims would qualify. Justice Nariman splits privacy into bodily privacy, informational privacy, and privacy of choice, and argues the right test should depend on which specific fundamental right, Article 14, 19, or 21, is at stake in a given case, rather than one fixed formula for every situation. Justice Bobde treats real consent as necessary before any sensitive personal data, such as health records, can be shared. Justice Sapre grounds privacy in the Preamble’s promises of liberty and fraternity and connects it to the freedoms of expression and movement. Justice Kaul focuses on informational privacy in an age of large-scale data collection and sets out his own four-part test, legality, necessity, proportionality, and procedural safeguards, which is close to but not the same as Chandrachud J.’s three-part test of legality, legitimate state aim, and proportionality.

Judgment and Ratio Decidendi

The nine-judge bench unanimously held that the right to privacy is protected as an essential part of the right to life and personal liberty under Article 21, and as part of the wider freedoms guaranteed elsewhere in Part III of the Constitution.

The ratio decidendi can be stated this way: privacy is not a right created by the Constitution but one that already exists in human dignity and personal autonomy, which the Constitution recognises and protects; it is not an absolute right and can be restricted by the state through a law that meets the requirements of legality, a legitimate state aim, and proportionality between the means used and the object pursued.

M.P. Sharma v. Satish Chandra (1954) and Kharak Singh v. State of Uttar Pradesh (1962) were overruled to the extent they had held that no constitutional right to privacy exists. The Court gave no further directions and did not decide the validity of the Aadhaar Act, since the reference before it was limited to this constitutional question; that separate question went back to the appropriate bench for a decision on the merits.

 Critical Analysis

1. Significance:

Puttaswamy fixed a problem that had lasted over sixty years: courts kept talking about privacy as if it were settled law while two old, unreversed decisions, M.P. Sharma and Kharak Singh, said no such right existed. By basing privacy on dignity and autonomy instead of treating it as an afterthought, the judgment brought Indian law closer to reasoning already developed in the United States, South Africa, and under the European Convention on Human Rights, and gave the Court a way to talk about questions the constitutional text does not address directly.

2. Implications and Impact:

The judgment supplied the reasoning the Court used the next year in Navtej Singh Johar v. Union of India to decriminalise consensual homosexual conduct, and in Joseph Shine v. Union of India to strike down the offence of adultery. It has since been cited in Anuradha Bhasin v. Union of India (2020) on internet shutdowns and in Internet and Mobile Association of India v. Reserve Bank of India (2020) on cryptocurrency regulation, and it forms much of the constitutional basis claimed for the Digital Personal Data Protection Act, 2023. Few Supreme Court judgments have shaped so many unrelated disputes in such a short time.

3. Critical Evaluation:

The structure of the judgment causes real problems. Because Chandrachud J.’s opinion speaks for only four of nine judges, no single opinion has the five votes needed to count as a binding majority in the usual sense, even though all nine judges agreed on the outcome. Later courts have had to work out which version of the proportionality test actually applies, Chandrachud J.’s three steps, Kaul J.’s four, or Nariman J.’s approach of deciding case by case, and none of the six opinions fully sorts out these differences. There is also a gap between the sweeping language of this judgment and how it was later applied: when a different bench ruled on Aadhaar itself in 2018, it upheld the scheme by a 4:1 majority, with only Chandrachud J. dissenting, a result that sits oddly next to how much weight his own opinion had placed on privacy a year earlier. The judgment says less about privacy claims against private companies than against the state, a gap the Digital Personal Data Protection Act, 2023 has only partly closed, since it gives the government broad exemptions that do not sit comfortably with the proportionality standard this judgment set out.

Conclusion

Puttaswamy’s real achievement is smaller than its language suggests, but it is not a small achievement. The judgment did not settle what privacy means in every situation, and it left the job of applying its own tests, to the facts of Aadhaar and to every dispute since, to later benches working from six opinions that overlap but do not fully match. What it did settle, for good, is the earlier question: whether the Constitution protects a right to privacy at all. That question cannot be reopened.

Three things remain for the Court to work out: settling on one version of the proportionality test instead of three, giving clearer shape to the line between bodily, informational, and decisional privacy, and deciding how far the right reaches against private actors, including technology companies, and not just the state. The Digital Personal Data Protection Act, 2023 answers some of these questions through legislation, but its wide exemptions for government use suggest the balance Puttaswamy struck is still being worked out in practice, not settled on paper.

Reference(S):

Cases:

1. A.K. Gopalan v. State of Madras, AIR 1950 SC 27 (India).
2. Anuradha Bhasin v. Union of India, (2020) 3 SCC 637 (India).
3. Internet and Mobile Association of India v. Reserve Bank of India, (2020) 10 SCC 274 (India).
4. Joseph Shine v. Union of India, (2019) 3 SCC 39 (India).
5. Justice K.S. Puttaswamy (Retd.) v. Union of India, (2017) 10 SCC 1 (India).
6. Justice K.S. Puttaswamy (Retd.) v. Union of India, (2019) 1 SCC 1 (India) (Aadhaar).
7. Kharak Singh v. State of Uttar Pradesh, AIR 1963 SC 1295 (India).
8. Maneka Gandhi v. Union of India, (1978) 1 SCC 248 (India).
9. M.P. Sharma v. Satish Chandra, AIR 1954 SC 300 (India).
10. Navtej Singh Johar v. Union of India, (2018) 10 SCC 1 (India).
11. R.C. Cooper v. Union of India, (1970) 1 SCC 248 (India).
12. Suresh Kumar Koushal v. Naz Foundation, (2014) 1 SCC 1 (India).

Statutes:

1. The Constitution of India, 1950.
2. Aadhaar (Targeted Delivery of Financial and Other Subsidies, Benefits and Services) Act, 2016.
3. Digital Personal Data Protection Act, 2023.