K.S. Puttaswamy case
Also called: Justice K.S. Puttaswamy v. Union of India (2017), Privacy judgment · Topic: Fundamental Rights and Constitutional Remedies · NCERT: Beyond NCERT
Meaning
The K.S. Puttaswamy case (Justice K.S. Puttaswamy v. Union of India) is the 24 August 2017 judgment in which a nine-judge bench of the Supreme Court ruled, unanimously (all nine judges agreed), that the right to privacy is a fundamental right. The Court held that privacy is built into Art. 21 (life and personal liberty) and also comes from the other freedoms in Part III.
It matters for two reasons:
- It set a three-part test: legality, necessity and proportionality. Every State intrusion on privacy must now pass this test.
- It became the base for later rulings on Aadhaar, surveillance, sexual orientation and data protection.
Explanation
What the Court decided
- Right to privacy: a person's right to be left alone and to control their own body, choices, personal space and personal information.
- No article of the Constitution names privacy. The Court found it inside the existing rights:
- Art. 21: "life" means a life with dignity, not just staying alive. Privacy is intrinsic (built into) this dignity.
-
Part III freedoms: privacy also flows from the other fundamental rights.
-
Earlier cases overruled (a larger bench setting aside what a smaller bench had held):
- M.P. Sharma (1954), eight judges. It had said the Constitution has no right to privacy.
- Kharak Singh (1962), six judges. Only part of this case was rejected: its finding that privacy is not a guaranteed right.
-
The bench needed nine judges because it was setting aside the rulings of eight-judge and six-judge benches.
-
ADM Jabalpur (1976):
- This was the Emergency-era case which said Art. 21 could be suspended.
- The plurality rejected it. The plurality is the main opinion, signed by four judges. The other judges wrote their own opinions.
What privacy covers, and its limits
- Areas protected:
- personal intimacies;
- family life and marriage;
- procreation (the choice to have children);
- the home;
-
sexual orientation.
-
Privacy is not absolute. The State can limit it. But every limit must pass the proportionality test.
The three-part test for any intrusion
A court checks each step in order. If the intrusion fails any one step, it is unconstitutional.
| Step | What the State must show |
|---|---|
| 1. Legality | A law allows the intrusion. An executive order alone is not enough. |
| 2. Necessity / legitimate aim | The law serves a valid State purpose, such as national security or stopping crime. |
| 3. Proportionality | The intrusion is no bigger than the need. The State chose the least harmful way, and there are procedural safeguards (checks built into the process) against misuse. |
In the Constitution and practice
- Constitutional home:
- Privacy rests on Art. 21. It says no person shall lose life or personal liberty except by a procedure established by law (a process laid down by a valid law).
-
It is also read with the freedoms in Part III (Arts. 12-35).
-
Why a court had to create it:
- Some newer constitutions write this right in directly. For example, South Africa's Constitution names a right to privacy.
- India's Constitution does not, so the right came through judicial interpretation (judges explaining what the words of the Constitution mean).
-
This continues the "life with dignity" line of cases that began with Olga Tellis (1985), which held that the right to livelihood is part of Art. 21.
-
Aadhaar judgment (Puttaswamy II, 26 September 2018):
- The Aadhaar Act, 2016 was upheld for welfare delivery.
-
Section 57 was struck down. It had let private companies use Aadhaar to check identity.
-
Navtej Singh Johar (6 September 2018):
- The Court relied on Puttaswamy to hold that sexual orientation is part of identity and privacy.
-
It read down IPC s.377 (narrowed it, not fully struck down), so consensual sex between adults of the same sex is no longer a crime.
-
Pegasus case (Manohar Lal Sharma v. Union of India, 2021):
- There were claims that spyware was used on citizens' phones.
- The Court said a vague plea of "national security" does not end judicial review (the courts' power to check whether State action is lawful).
-
It set up an independent expert committee to look into the claims.
-
Digital Personal Data Protection (DPDP) Act, 2023 (Act No. 22 of 2023):
- Section 12 gives a Data Principal (the person the data is about) the right to correction, completion, updating and erasure of personal data they had consented to share [2].
- None of the rights of Data Principals apply to processing for the prevention, investigation or prosecution of offences. Notified agencies can also be exempted for security, sovereignty or public order [1].
-
Critics say these broad State exemptions weaken the Puttaswamy test [1].
-
DPDP Rules, 2025:
- The Rules were notified on 14 November 2025 [3].
- The Data Protection Board of India is fully digital and has four members [3].
-
Duties of data fiduciaries take effect after an 18-month phase-in [3].
-
Right to be forgotten:
- This is the right to have old, wrong or private information about oneself removed, hidden or de-linked from online search results.
- High Courts have recognised it case by case. The Supreme Court has not yet laid down a general rule.
- It now has a form in law as the right to erasure under DPDP s.12 [2].
Don't confuse with
- Puttaswamy I (2017) vs Puttaswamy II (2018):
- Puttaswamy I declared privacy a fundamental right.
-
Puttaswamy II is the Aadhaar judgment. It upheld the Aadhaar Act, 2016 but struck down s.57.
-
M.P. Sharma (1954) and Kharak Singh (1962):
- These are the older cases that denied privacy as a guaranteed right.
-
Puttaswamy overruled them. It did not follow them.
-
Right to privacy vs right to marry:
- Puttaswamy protects privacy in marriage and family life.
-
But Supriyo Chakraborty (17 October 2023) held there is no fundamental right to marry. Marriage is a legal status created by statute.
-
Unanimous verdict vs plurality view:
- All nine judges agreed that privacy is a fundamental right.
- Only the four-judge plurality opinion rejected ADM Jabalpur (1976).
Prelims Hooks
- Puttaswamy (24 August 2017): nine judges, unanimous. Privacy is intrinsic to Art. 21 and Part III.
- Overruled: M.P. Sharma (1954, eight judges) and, to the extent it denied a right to privacy, Kharak Singh (1962, six judges).
- Trap: privacy is not written in any article of the Constitution. Courts read it into Art. 21 and Part III. South Africa's Constitution, by contrast, names it.
- Test for intrusion: legality (a law, not just an executive order) → necessity (a legitimate State aim) → proportionality (least harmful way, with procedural safeguards).
- Aadhaar (2018): the Act was upheld, but s.57 (use of Aadhaar by private companies) was struck down.
- DPDP Act 2023: the right to erasure is in s.12 [2]. The DPDP Rules were notified on 14 November 2025, and the Data Protection Board has four members [3].
Mains Points
- Privacy vs State power:
- Puttaswamy requires legality, necessity and proportionality for every intrusion.
- The DPDP Act's broad exemptions for the State and for crime prevention [1], and episodes like Pegasus (2021), raise a question: can executive agencies exempt themselves without independent oversight?
-
Reform ideas: a surveillance law with judicial warrants, and a Data Protection Board with independent members.
-
Judicial interpretation as a source of rights:
- Puttaswamy shows that Art. 21 grows through court rulings: from Olga Tellis (livelihood) to privacy, and then to sexual orientation in Navtej (2018).
- Supporters call this a living Constitution that protects dignity.
-
Critics ask whether rights this basic should come from Parliament instead. Supriyo (2023), for example, left marriage rights to Parliament.
-
Privacy as the root of autonomy:
- The protected areas in Puttaswamy (body, family, procreation, sexual orientation) underpin later rulings on choice of partner, reproductive autonomy and living wills.
- In all of these, the State's role shifts from "guardian" to "protector of choice".
Related concepts
- Right to privacy
- Right to be forgotten
- Navtej Singh Johar case
- Joseph Shine case
- Supriyo Chakraborty case
- Right to marry of one's choice
- Reproductive autonomy
- Passive euthanasia
- Living will
- Vishaka case
Read more
Sources
- 1The Digital Personal Data Protection Bill, 2023 — PRS Legislative Researchprsindia.org · tier 1
- 2The Digital Personal Data Protection Act, 2023 (No. 22 of 2023) — MeitYmeity.gov.in · tier 1
- 3Government notifies DPDP Rules to empower citizens and protect privacy — PIBpib.gov.in · tier 1