Justice K.S. Puttaswamy (Retd.) v. Union of India

1. Case Citation and Basic Information 

Justice K.S. Puttaswamy (Retd.) & Anr. v. Union of India & Ors., Writ Petition (Civil) No. 494 of  2012, (2017) 10 SCC 1; AIR 2017 SC 4161. Decided by a nine-judge Constitution Bench of the  Supreme Court of India on 24 August 2017. Bench: Chief Justice J.S. Khehar and Justices J.  Chelameswar, S.A. Bobde, R.K. Agrawal, Rohinton F. Nariman, A.M. Sapre, D.Y. Chandrachud,  Sanjay Kishan Kaul, and S. Abdul Nazeer. 

2. Introduction 

Few Indian judgments carry the doctrinal weight of Justice K.S. Puttaswamy (Retd.) v. Union of  India. What began as a challenge to the Aadhaar biometric identity scheme grew into a  constitutional reference on a question the Court had left unresolved for over six decades: does the  Constitution of India guarantee a fundamental right to privacy at all? Consider an ordinary resident  asked to hand over fingerprints and an iris scan merely to open a bank account or draw a welfare  subsidy; before 2017, Indian constitutional law had no settled answer to whether that resident could  object on privacy grounds. A unanimous nine-judge Bench supplied that answer, locating privacy  within the guarantees of liberty, dignity, and equality in Part III. The judgment matters not only  for what it decided but for what it later made possible: it is the constitutional foundation on which  India’s first comprehensive data protection statute, the Digital Personal Data Protection Act, 2023,  was subsequently built. 

3. Facts of the Case 

The petitioner, Justice K.S. Puttaswamy, a retired judge of the Karnataka High Court, filed a writ  petition in 2012 challenging the constitutional validity of the Aadhaar scheme, under which the  Unique Identification Authority of India collected residents’ biometric and demographic data to issue a twelve-digit identification number. He contended that compulsory enrolment for Aadhaar,  and the attendant collection of fingerprints and iris scans, infringed citizens’ right to privacy. 

When the matter first reached a three-judge Bench of Justices Chelameswar, Bobde, and C.  Nagappan, the Union of India relied on two earlier decisions, M.P. Sharma v. Satish Chandra  (1954), decided by an eight-judge Bench, and Kharak Singh v. State of Uttar Pradesh (1962),  decided by a six-judge Bench, both of which had held that the Constitution does not expressly  guarantee a fundamental right to privacy. Several later, smaller Benches, including Gobind v. State  of Madhya Pradesh and R. Rajagopal v. State of Tamil Nadu, had nonetheless treated privacy as a  protected right without directly confronting these two larger-Bench precedents. On 11 August  2015, the three-judge Bench ruled that judicial discipline demanded the question be settled  authoritatively by a Bench of at least equal strength to M.P. Sharma, and referred the matter  onward. 

The reference passed first to a five-judge Bench headed by Chief Justice J.S. Khehar, which on 18  July 2017 enlarged it further into a nine-judge Constitution Bench, convened solely to decide  whether privacy is a fundamental right under the Constitution. The wider, Aadhaar-specific  challenges, including the validity of the Aadhaar Act itself, were left for a separate Bench to  resolve later. Arguments before the nine-judge Bench ran over six days in July and August 2017,  with senior counsel including Mr. Gopal Subramanium, Mr. Shyam Divan, and Mr. Kapil Sibal  appearing for the petitioners, and Attorney General Mr. K.K. Venugopal leading the response on  behalf of the Union of India. 

4. Legal Issues 

Issue 1: Whether the Constitution of India guarantees a fundamental right to privacy to individuals,  notwithstanding the absence of any express textual provision to that effect. 

Issue 2: If such a right exists, under which provision or provisions of Part III of the Constitution it  is located, and what its contours and permissible restrictions are. 

5. Arguments Presented 

5.1 Petitioner’s Arguments

Counsel for the petitioners, including Mr. Gopal Subramanium, Mr. Shyam Divan, and Mr. Kapil  Sibal, submitted that privacy is intrinsic to liberty and dignity and cannot be treated as a mere  common-law entitlement subject to legislative override. They argued that M.P. Sharma and Kharak  Singh rested on a narrow, compartmentalised reading of fundamental rights that pre-dated the  Court’s later “golden triangle” jurisprudence linking Articles 14, 19, and 21, established in Maneka  Gandhi v. Union of India (1978). On this basis, they urged that privacy be recognised as intrinsic  to Article 21’s guarantee of life and personal liberty, informed by Articles 14 and 19, and drew on  comparative constitutional practice from the United States, the European Union, and other  jurisdictions that treat privacy as foundational to autonomy and self-determination. 

5.2 Respondent’s Arguments 

The Union of India, represented by Attorney General Mr. K.K. Venugopal, did not seriously  dispute that some privacy interests deserved protection, but cautioned against elevating privacy to  an absolute, freestanding fundamental right. It argued that privacy is too amorphous and context dependent a concept to be given the status of an untouchable right, and that treating it as  fundamental could hamper legitimate state functions such as welfare delivery, law enforcement,  and national security, concerns that carried particular weight given the pending Aadhaar litigation  in the background. 

6. Court’s Reasoning and Analysis 

Writing the lead opinion on behalf of four judges, Justice D.Y. Chandrachud undertook an  extensive historical and comparative review of the Court’s privacy jurisprudence. He reasoned that  both M.P. Sharma and Kharak Singh had treated fundamental rights as isolated, watertight  compartments, an approach the Court had already abandoned in Maneka Gandhi v. Union of India  (1978), which established that different fundamental rights overlap and inform one another. Once  Article 21 is read expansively, as post-Maneka jurisprudence requires, privacy emerges as an  inseparable facet of the right to life and personal liberty, reinforced by the freedoms guaranteed  under Article 19 and the equality guarantee under Article 14. 

The lead opinion went further still, holding that ADM Jabalpur v. Shivkant Shukla (1976), the  Emergency-era ruling that fundamental rights, including the right to life, could be suspended by  the State, had been wrongly decided and stood overruled. The holding carried a striking personal dimension: the majority in ADM Jabalpur had included Justice Y.V. Chandrachud, the father of  the very judge who now set that ruling aside. Justice Sanjay Kishan Kaul, concurring separately,  was blunter still, describing ADM Jabalpur as an aberration that deserved to be buried beyond any  prospect of revival. 

Six separate but concurring opinions approached privacy from different angles. Justice  Chandrachud grounded it in dignity and autonomy; Justice Chelameswar in informational self determination; Justice Bobde in the negative and positive content of the right; Justice Nariman in  a taxonomy of bodily, spatial, and informational privacy; Justice Sapre in the constitutional value  of dignity found in the Preamble; and Justice Kaul in the particular dangers that informational  privacy faces in a digital era. Despite this diversity of reasoning, all nine judges arrived at the same  conclusion. 

The Court was careful to hold that privacy, like other fundamental rights, is not absolute. It devised  a three-fold test for any state action restricting the right: the restriction must be backed by a valid  law, must serve a legitimate state aim, and must be proportionate to the object it seeks to achieve.  This test was framed with an eye on the pending Aadhaar litigation, since it would later supply the  yardstick against which the scheme’s data-collection provisions were measured. In fashioning the  standard, the Bench drew on comparative constitutional practice, including proportionality  doctrine developed in Germany, South Africa, and Canada, signalling that Indian privacy  jurisprudence would grow in conversation with global constitutional trends rather than in isolation  from them. 

7. Judgment and Ratio Decidendi 

The Court unanimously held that the right to privacy is a fundamental right protected under Article  21 as part of the right to life and personal liberty, and as part of the freedoms guaranteed under  Part III of the Constitution more broadly. It expressly overruled M.P. Sharma and the majority in  Kharak Singh to the extent they held privacy was not constitutionally protected, and it overruled  ADM Jabalpur v. Shivkant Shukla on the question of whether fundamental rights could be  suspended during an Emergency. The ratio decidendi is that privacy is not a right granted by the  Constitution but one that inheres in individuals as a facet of dignity and liberty, subject to  reasonable restrictions that satisfy the legality, legitimate-aim, and proportionality standard. The judgment did not itself decide the validity of the Aadhaar Act, which was left to a separate five judge Bench in Justice K.S. Puttaswamy v. Union of India, (2019) 1 SCC 1, decided on 26  September 2018. 

8. Critical Analysis 

8.1 Significance of the Decision 

Puttaswamy is widely regarded as one of the most consequential Indian constitutional judgments  of the last quarter-century. By overruling two large-Bench precedents that had stood for decades,  the Court showed a willingness to correct its own doctrinal errors in light of evolving constitutional  values, an important marker of living constitutionalism. The recognition of privacy as fundamental  also produced immediate downstream effects, most notably paving the way for the  decriminalisation of consensual same-sex relations in Navtej Singh Johar v. Union of India (2018)  and shaping the subsequent Aadhaar judgment. 

8.2 Implications and Impact 

The most durable legacy of Puttaswamy has been its role as the constitutional predicate for India’s  data protection framework. The Court’s proportionality standard and its emphasis on informational  self-determination directly shaped the eventual enactment of the Digital Personal Data Protection  Act, 2023. The DPDP Act operationalises many of the concerns Justice Kaul and Justice  Chandrachud flagged about the risks of unchecked data collection in a digital economy: it requires  that personal data be processed only for a lawful purpose and, ordinarily, only on the basis of free,  specific, informed consent; it casts individuals as Data Principals possessing rights of access,  correction, erasure, and grievance redressal, and casts data-collecting entities as Data Fiduciaries  bound by duties of purpose limitation, data minimisation, and reasonable security safeguards, with  mandatory breach notification to both the newly created Data Protection Board of India and  affected individuals. It also permits processing without consent for defined legitimate uses, such  as compliance with law, medical emergencies, and delivery of state benefits, while empowering  the government to restrict cross-border data transfers to specified countries. Penalties for  significant non-compliance can extend up to ₹250 crore. The Act can fairly be described as the  legislative fulfilment of the constitutional promise made in Puttaswamy, translating an abstract fundamental right into concrete, enforceable obligations on both the State and private data  fiduciaries. 

8.3 Critical Evaluation 

The judgment is not without its limitations. Six separate opinions, while individually rich, leave  later courts with the task of reconciling different reasoning paths, a degree of doctrinal  fragmentation that subsequent Benches have had to work through when applying the proportionality test in cases such as the Aadhaar judgment and the Puttaswamy review  proceedings. Critics have also pointed out that Puttaswamy articulated a demanding  proportionality standard for restricting privacy, yet the DPDP Act itself contains broad legitimate use and government exemption provisions, including the power to exempt government agencies  from several of the Act’s obligations, that arguably do not always live up to the rigour the Court  demanded of the State. Whether the DPDP Act’s implementation lives up to the constitutional  vision set out in Puttaswamy remains, in that sense, an open and evolving question rather than a  settled one. 

9. Conclusion 

Puttaswamy stands as a landmark not merely for recognising privacy as a fundamental right, but  for the interpretive method it modelled: reading fundamental rights holistically, correcting  outdated precedent even where doing so meant setting aside a ruling in which one’s own father had  concurred, and grounding constitutional doctrine in contemporary technological realities. Its most  tangible legacy is legislative. The Digital Personal Data Protection Act, 2023 exists because  Puttaswamy first established that individuals hold a constitutionally protected interest in  controlling their personal data, and the Act’s framework of consent, purpose limitation, and data principal rights traces directly back to the vocabulary the nine judges used in 2017. Questions  remain about how faithfully that framework will be enforced, particularly given the breadth of the  exemptions available to the State. The ongoing test for Indian law is whether statutory and  administrative practice will keep faith with the proportionality- and dignity-centred vision the  Court articulated, or whether Puttaswamy’s promise will remain, for now, only partially redeemed. 

10. Reference(S):

1. Justice K.S. Puttaswamy (Retd.) & Anr. v. Union of India & Ors., (2017) 10 SCC 1. Justice K.S. Puttaswamy (Retd.) v. Union of India, (2019) 1 SCC 1. Maneka Gandhi v. Union of India, (1978) 1 SCC 248. 
2. M.P. Sharma v. Satish Chandra, AIR 1954 SC 300. 
3. Kharak Singh v. State of Uttar Pradesh, AIR 1963 SC 1295. 
4. ADM Jabalpur v. Shivkant Shukla, AIR 1976 SC 1207. 
5. Navtej Singh Johar v. Union of India, (2018) 10 SCC 1. 
6. The Digital Personal Data Protection Act, 2023 (No. 22 of 2023). Constitution of India, arts. 14, 19, 21.