In an era where smartphones, laptops, and cloud storage hold the intimate details of our lives — from personal messages and financial records to health data and political affiliations — the clash between individual digital privacy and the state’s power to search and seize has never been more acute. India’s courts, particularly the Supreme Court and various High Courts, have increasingly grappled with this conflict through recent rulings and observations. While the landmark 2017 Justice K.S. Puttaswamy v. Union of India judgment established privacy as a fundamental right under Article 21 of the Constitution, recent cases highlight the practical challenges of applying this right to digital devices. These judgments underscore a delicate balancing act: empowering law enforcement to combat crime and tax evasion while preventing arbitrary intrusions that could render privacy illusory.
The Constitutional Bedrock: Privacy as a Fundamental Right
The foundation of modern Indian jurisprudence on this issue traces back to the nine-judge bench decision in Puttaswamy (2017). The Court unanimously held that the right to privacy is intrinsic to life and personal liberty, encompassing informational privacy. Any state action infringing upon it must satisfy a strict three-fold test: (i) legality (backed by law), (ii) necessity (for a legitimate state aim), and (iii) proportionality (the least intrusive means). This overruled earlier precedents like M.P. Sharma (1954) and Kharak Singh (1963), which had downplayed privacy in the context of searches.
In the digital context, this framework becomes critical. Unlike physical searches under the erstwhile CrPC (now Bharatiya Nagarik Suraksha Sanhita or BNSS), electronic devices contain exponentially more sensitive data — often stored remotely in the cloud — raising fears of “fishing expeditions” or mass surveillance. Traditional provisions like Section 132 of the Income Tax Act, 1961 (or its successor in the 2025 Act) or Section 94 of the BNSS allow searches on “reason to believe” grounds, but they predate the smartphone era and lack explicit digital safeguards.
Recent Supreme Court Interventions: Calls for Guidelines and Limits on Overreach
A pivotal development came in 2023 when the Supreme Court, in Foundation for Media Professionals v. Union of India, addressed arbitrary seizures of journalists’ devices. Recognizing that unregulated access to digital devices could chill free speech and violate privacy, the Court directed the Union government to formulate comprehensive guidelines for search and seizure by investigative agencies. It emphasized that seizures should not be routine or roving inquiries and stressed the need for proportionality. The government formed a committee to draft these, drawing from international best practices (e.g., requiring warrants except in emergencies and limiting data examination to relevant material). As of early 2026, the matter remains under deliberation, with no binding nationwide guidelines yet enacted — leaving a regulatory vacuum.
In 2026, the Supreme Court further engaged with digital search powers in the context of the newly enacted Income Tax Act, 2025 (effective April 1, 2026). Section 247 expands traditional raid powers to “computer systems” and “virtual digital space,” explicitly covering personal devices, emails, cloud servers, and encrypted communications — often without mandatory prior judicial warrants or notice. A Public Interest Litigation (PIL) filed by entrepreneur Vishwaprasad Alva challenged these provisions as unconstitutional violations of Articles 19(1)(g) and 21, arguing they enable intrusive, anticipatory searches lacking adequate safeguards.
The Court initially agreed to examine the plea in February 2026, noting concerns about evidence destruction in the digital age if prior notice were required. However, in March 2026, it declined to entertain the PIL, appreciating the privacy concerns but holding that the provisions were not prima facie unconstitutional. It observed that affected parties could seek judicial review before High Courts, and existing precedents (like Pooran Mal v. Director of Inspection) upheld similar powers, subject to post-facto scrutiny. This ruling effectively lets the expanded powers stand for now but signals that courts will scrutinize their application on a case-by-case basis under the Puttaswamy proportionality lens.
The Court has also issued directions in related 2025-2026 matters on interim custody of seized devices, promoting “data cloning” (mirroring relevant evidence) over prolonged hardware retention. This approach — seen in cases involving advocates and trial courts — prioritizes returning devices to owners quickly while preserving evidence, striking a practical balance between investigation needs and the right to livelihood or personal use.
High Court Contributions: Practical Safeguards and Proportionality
High Courts have filled gaps where the Supreme Court has not issued exhaustive rules, often emphasizing procedural fairness.
The Karnataka High Court in Virender Khanna v. State of Karnataka (a key recent reference) laid down detailed guidelines for digital device seizures. It clarified that while passwords or biometrics may be sought (without violating Article 20(3)’s protection against self-incrimination in certain contexts), seizures must be specific, not general, and supported by reasons. The Court stressed recording the process, limiting examination to case-relevant data, and returning non-incriminating devices promptly.
Other High Courts have reinforced these principles. For instance, the Delhi High Court has ruled that customs or investigative agencies should clone data rather than retain devices indefinitely during prosecutions, reducing undue hardship. The Kerala High Court has held that police cannot seize journalists’ phones without adhering to BNSS procedures. In a 2026 Calcutta High Court matter involving Enforcement Directorate raids on political data, the bench raised alarms over potential misuse of seized devices, invoking Puttaswamy to demand safeguards against overbroad access to sensitive information.
These rulings consistently apply the proportionality test: seizures must be necessary, narrowly tailored, and accompanied by safeguards like independent oversight, data minimization, and deletion of irrelevant personal information post-investigation.
Analysis: A Work in Progress Amid Evolving Threats
The recent judgments reflect a judiciary attuned to the digital reality — where a single device can reveal more about a person than any physical search. However, challenges persist. Law enforcement argues that strict warrant requirements or advance notice could enable evidence tampering in cyber-enabled crimes, tax evasion, or terrorism. Critics, including petitioners in the IT Act challenge, contend that broad “reason to believe” clauses invite abuse, especially against journalists, activists, or professionals, potentially violating Articles 19 and 21.
The absence of comprehensive legislation or finalized Supreme Court-mandated guidelines exacerbates the issue. The Digital Personal Data Protection Act, 2023 (with rules operationalized in 2025) governs private entities but offers limited protections against state surveillance or searches. Courts have rightly pushed for mechanisms like judicial warrants as the norm (with emergencies as exceptions), time-bound data analysis, and “sunset clauses” for retained data.
The Road Ahead: Towards Robust Protections
India’s courts are steadily carving out a digital privacy jurisprudence that respects both individual dignity and public order. The Puttaswamy proportionality standard remains the lodestar, as reaffirmed in 2025-2026 rulings. Yet, the Supreme Court’s deference to High Court review in the IT Act case and the ongoing call for guidelines indicate that legislative or executive action — ideally a dedicated Digital Search and Seizure Act — is urgently needed.
For citizens, the message is clear: digital privacy is not absolute but demands vigilant judicial oversight. For agencies, it calls for restraint and documentation to withstand constitutional scrutiny. As India embraces Digital India, the true test will be whether these judicial interventions translate into enforceable norms that prevent “illegal” overreach while enabling legitimate enforcement. Until then, the tension endures — a reminder that in the information age, the right to be left alone is more fragile, and thus more precious, than ever.
Contributed By: Akshat Jain, Advocate