Justice K.S. Puttaswamy Case – The Birth of Privacy as a Fundamental Right

Before data protection became a compliance requirement, it was a constitutional battle. Before laws began regulating companies, the Constitution had to recognize the individual. In a historic moment, the Supreme Court didn’t just decide a case, it redefined the relationship between the State and personal liberty.

What Is the Puttaswamy Judgment?

The Justice K.S. Puttaswamy v. Union of India (2017) judgment is a landmark decision of the Supreme Court of India.

It held that:

Right to Privacy is a Fundamental Right under Article 21 of the Constitution of India

Background of the Case

Who was involved?

• Petitioner: Justice K.S. Puttaswamy (Retd.)

• Issue: Challenge to the Aadhaar scheme

Aadhaar raised concerns about:

• Collection of biometric data

• Surveillance

• Misuse of personal information

Constitutional Question

Does the Constitution of India guarantee a fundamental right to privacy?

Earlier judgments had denied or limited this right.

The Historic Decision

A 9-judge bench of the Supreme Court unanimously held:

Privacy is a fundamental right

It is protected under:

• Article 21 (Right to Life and Personal Liberty)

• Part III of the Constitution

What Does “Right to Privacy” Include?

The Court gave a broad and evolving meaning to privacy:

1. Bodily Privacy

• Protection of physical integrity

• Control over personal body

2. Informational Privacy

The most important for data protection.

• Control over personal data

• Protection against misuse of information

3. Decisional Privacy

• Freedom to make personal choices

• Includes lifestyle, beliefs, and autonomy

The Three-Fold Test (Privacy Test)

The Court laid down a test for any invasion of privacy:

✔️ 1. Legality

• There must be a law in existence

✔️ 2. Legitimate Aim

• The action must serve a valid state interest

✔️ 3. Proportionality

• The invasion must be necessary and proportionate

This test is now used in:

• Privacy cases

• Data protection frameworks

Why This Case Matters for Data Protection

This judgment didn’t just recognize privacy — it demanded a legal framework to protect it.

1. Constitutional Foundation for Data Protection

• Made privacy a legal right, not just a policy concern

• Created obligation on the State to protect data

2. Trigger for Data Protection Law

Led to formation of:

• Justice B.N. Srikrishna Committee

  Which eventually resulted in:

• The Digital Personal Data Protection Act (DPDP Act), 2023

3. Recognition of Informational Privacy

• Directly connects to:

  • Data collection

  • Data processing

  • Data misuse

Core idea behind modern data protection laws

Connection with Global Frameworks

While the judgment is rooted in the Constitution, it aligns with global trends like:

General Data Protection Regulation (GDPR)

Common principles:

• Individual control over data

• Consent-based processing

• Protection against misuse

Practical Impact

After this judgment:

• Privacy policies became more important

• Courts began recognizing data misuse claims

• Government actions became subject to privacy scrutiny

It changed how:

• Companies handle data

• The State exercises power

Key Takeaways

• The Puttaswamy judgment declared privacy a fundamental right

• Introduced the concept of informational privacy

• Established the three-fold test for privacy invasion

• Became the constitutional basis for India’s data protection law

• Triggered the journey towards the DPDP Act, 2023