Surveillance, Doxxing, and Electoral Governance: Privacy Rights Under Strain in India
Contents4
The Hindu - Opinion · 30 Sept 2026 · 2 min read
Prelims · Polity Mains · GS2 Governance High relevance
Recent Supreme Court actions on facial recognition, doxxing, and electoral roll revisions highlight systemic privacy challenges where state surveillance, private firms, and online networks converge, testing India's Puttaswamy privacy framework.
Key points
Supreme Court disposed of a PIL on doxxing and deepfakes in August 2026, directing Union Ministries to take remedial measures, reflecting judicial concern over digital privacy violations.
Facial Recognition Technology (FRT) used by Delhi Police during CJP protests raises constitutional questions under Article 21 (Right to Privacy) and lacks regulatory framework, with data hosted by private firms creating accountability gaps.
Doxxing of women protesters at Jantar Mantar reveals how digital tools enable extra-legal punishment, with UP's 2020 CAA protestor hoardings case (Allahabad HC) setting precedent against state-sponsored privacy violations.
Special Intensive Revision (SIR) of electoral rolls upheld by SC in May 2026 deleted 47 lakh voters in Bihar alone, demonstrating how identity verification impacts democratic participation.
[GS2-Governance] The Digital Personal Data Protection Act, 2023 allows blanket exemptions for state agencies, creating a legal asymmetry where private data processors face stricter compliance than government surveillance systems.
[GS3-Technology] Pegasus spyware case shows transnational surveillance risks, with SC's 2025 non-disclosure order on technical reports highlighting transparency deficits in national security exceptions.
Historical Continuity from 1858 fingerprinting in Bengal to Aadhaar and FRT demonstrates the state's persistent 'identifiability imperative', now amplified by AI and big data capabilities.
Differential Impact on minorities, migrants, and marginalized groups shows how surveillance tools exacerbate existing social inequalities in access to rights and protections.
Way Forward: India needs a comprehensive surveillance reform law defining permissible uses of FRT, mandatory impact assessments for SIR-like exercises, cross-sectoral data protection authority, and revised DPDP Act to remove blanket state exemptions.
Key terms
- Puttaswamy Judgment (2017)
- Landmark SC ruling by a 9-judge bench recognizing privacy as fundamental right under Article 21. Established the 'triple test' for state invasion of privacy (legality, legitimate aim, proportionality), forming the bedrock of India's privacy jurisprudence but limited to state actions.
- Doxxing
- Malicious public release of personal identifying information (addresses, family details) without consent, typically to enable harassment. While not defined in Indian law, falls under IT Act Section 66A (struck down) and proposed provisions in DPDP Act, with civil remedies under tort law for privacy violations.
- Special Intensive Revision (SIR)
- Election Commission's extraordinary verification of electoral rolls under Article 324 powers. Unlike annual revisions, SIR involves door-to-door verification and documentary proof, raising inclusion-exclusion debates. SC's limited approval in 2026 allowed citizenship checks but barred EC from citizenship determination.
- Facial Recognition Technology (FRT)
- Biometric AI system mapping facial features to identify individuals. Deployed by Indian police since 2020 despite no legal framework, raising Article 19(1)(a) (free speech) and 21 concerns. Delhi Police's use during CJP protests involved private vendors, highlighting outsourcing risks in surveillance governance.
Practice question
Critically examine the challenges posed by the convergence of state surveillance, private firms, and digital networks to India's privacy rights framework, with reference to recent developments. (250 words, 15 marks)
GS2 15 marks 250 words Mains
Key terms to include: Puttaswamy Judgment Doxxing Special Intensive Revision (SIR) Facial Recognition Technology (FRT) Digital Personal Data Protection Act, 2023 Article 21 Pegasus spyware Triple test
Answer framework
Introduction
Briefly introduce the context of privacy rights in India, mentioning the Puttaswamy judgment and the increasing use of digital surveillance tools by state and private actors.
Legal and Regulatory Gaps
Absence of a comprehensive legal framework for technologies like Facial Recognition Technology (FRT) and doxxing.
Blanket exemptions for state agencies under the Digital Personal Data Protection Act, 2023, creating accountability issues.
Judicial interventions (e.g., Supreme Court directives on doxxing and electoral roll revisions) highlighting systemic deficiencies.
Constitutional and Democratic Concerns
Violations of Article 21 (Right to Privacy) and Article 19(1)(a) (Free Speech) due to unchecked surveillance.
Impact on democratic participation, as seen in the Special Intensive Revision (SIR) of electoral rolls in Bihar.
Precedent of state-sponsored privacy violations, e.g., UP's CAA protestor hoardings case.
Social and Ethical Implications
Differential impact on marginalized groups, exacerbating social inequalities.
Risks of transnational surveillance, as evidenced by the Pegasus spyware case.
Historical continuity of state surveillance from colonial fingerprinting to modern Aadhaar and FRT.
Conclusion
Suggest the need for a comprehensive surveillance reform law, mandatory impact assessments, and revisions to the DPDP Act to ensure balanced privacy protections without compromising national security.
Fact check
Issues found Overall severity: medium
Supreme Court disposed of a PIL on doxxing and deepfakes in August 2026, directing Union Ministries to take remedial measures, reflecting judicial concern over digital privacy violations.
The source text confirms the Supreme Court disposed of a PIL on doxxing and deepfakes in August 2026 and directed Union Ministries to take remedial measures. Severity: none
Facial Recognition Technology (FRT) used by Delhi Police during CJP protests raises constitutional questions under Article 21 (Right to Privacy) and lacks regulatory framework, with data hosted by private firms creating accountability gaps.
The source text confirms the use of FRT by Delhi Police during CJP protests, hosted by private firms, and raises constitutional questions under Article 21. Severity: none
Doxxing of women protesters at Jantar Mantar reveals how digital tools enable extra-legal punishment, with UP's 2020 CAA protestor hoardings case (Allahabad HC) setting precedent against state-sponsored privacy violations.
The source text confirms doxxing of women protesters at Jantar Mantar and references the UP's 2020 CAA protestor hoardings case. Severity: none
Special Intensive Revision (SIR) of electoral rolls upheld by SC in May 2026 deleted 47 lakh voters in Bihar alone, demonstrating how identity verification impacts democratic participation.
The source text confirms the SC upheld the SIR in May 2026 and mentions Bihar's SIR began with 7.89 crore electors and ended with 7.42 crore, implying a deletion of 47 lakh voters. Severity: none
The Digital Personal Data Protection Act, 2023 allows blanket exemptions for state agencies, creating a legal asymmetry where private data processors face stricter compliance than government surveillance systems.
The source text confirms the Digital Personal Data Protection Act, 2023 allows exemptions for state agencies. Severity: none
Pegasus spyware case shows transnational surveillance risks, with SC's 2025 non-disclosure order on technical reports highlighting transparency deficits in national security exceptions.
The source text confirms the Pegasus spyware case and SC's 2025 non-disclosure order on technical reports. Severity: none
Historical Continuity from 1858 fingerprinting in Bengal to Aadhaar and FRT demonstrates the state's persistent 'identifiability imperative', now amplified by AI and big data capabilities.
The source text confirms the historical continuity from 1858 fingerprinting in Bengal to Aadhaar and FRT. Severity: none
Differential Impact on minorities, migrants, and marginalized groups shows how surveillance tools exacerbate existing social inequalities in access to rights and protections.
The source text confirms the differential impact on minorities, migrants, and marginalized groups. Severity: none
Way Forward: India needs a comprehensive surveillance reform law defining permissible uses of FRT, mandatory impact assessments for SIR-like exercises, cross-sectoral data protection authority, and revised DPDP Act to remove blanket state exemptions.
The source text suggests the need for comprehensive surveillance reform but does not explicitly list these specific measures. Severity: medium
Special Intensive Revision (SIR): Election Commission's extraordinary verification of electoral rolls under Article 324 powers. Unlike annual revisions, SIR involves door-to-door verification and documentary proof, raising inclusion-exclusion debates. SC's limited approval in 2026 allowed citizenship checks but barred EC from citizenship determination.
The definition of SIR is consistent with general knowledge and the source text. Severity: none
Facial Recognition Technology (FRT): Biometric AI system mapping facial features to identify individuals. Deployed by Indian police since 2020 despite no legal framework, raising Article 19(1)(a) (free speech) and 21 concerns. Delhi Police's use during CJP protests involved private vendors, highlighting outsourcing risks in surveillance governance.
The definition of FRT is consistent with general knowledge and the source text. Severity: none
Puttaswamy Judgment (2017): Landmark SC ruling by a 9-judge bench recognizing privacy as fundamental right under Article 21. Established the 'triple test' for state invasion of privacy (legality, legitimate aim, proportionality), forming the bedrock of India's privacy jurisprudence but limited to state actions.
The definition of Puttaswamy Judgment is consistent with general knowledge and the source text. Severity: none
Doxxing: Malicious public release of personal identifying information (addresses, family details) without consent, typically to enable harassment. While not defined in Indian law, falls under IT Act Section 66A (struck down) and proposed provisions in DPDP Act, with civil remedies under tort law for privacy violations.
The definition of doxxing is consistent with general knowledge and the source text. Severity: none