How does the Census Act, 1948 balance the state's need for demographic data with citizens' right to privacy?

The Census Act, 1948 creates India's largest individual-level dataset, yet designs it as a one-way flow: the citizen is legally bound to disclose, and the State is legally barred from disclosing back. This asymmetry is the core of its privacy balance.

Securing the State's data need

• The Act empowers the Centre to appoint census officers and obliges every occupant to answer questions truthfully, making enumeration a legal duty rather than a voluntary survey [1].
• It anchors decadal data used for delimitation, devolution, welfare targeting and planning; Census 2027, the first digital census, extends this through a mobile app and a self-enumeration portal in 16 languages, plus comprehensive caste enumeration [2].

Statutory privacy safeguards

• Section 15 — census records are not open to inspection and are inadmissible as evidence in any civil proceeding or most criminal proceedings; consequently the data is also outside the reach of the RTI Act [1][2].
• Only aggregated data at administrative levels is published; individual records are never released [3].
• Penal provisions punish census officers who make unauthorised disclosures, reinforced by the oath of secrecy under the Census Rules, 1990 [1].
• For the digital phase, data-security measures and a secure self-enumeration portal with a unique SE ID limit exposure during collection [4].

Where the balance strains

• The Act predates the recognition of privacy as a fundamental right in K.S. Puttaswamy (2017); it lacks express data-minimisation, purpose-limitation, breach-notification norms or an independent oversight body.
• Digitised, wider socio-economic and caste fields make each record more sensitive, widening the cyber-risk surface [2].

Thus the 1948 Act achieves a workable balance — compulsion to supply matched by near-absolute secrecy in use — but through institutional trust rather than modern regulatory architecture. Aligning census data handling with the Digital Personal Data Protection Act, 2023, mandating security audits and transparent retention rules would let Census 2027 serve both evidence-based governance and informational privacy.