A retired judge in his mid-eighties challenged a fingerprint-scanning government scheme. By the time the verdict came five years later, he was 91. His case ended up deciding whether privacy is a fundamental right at all.
Informational privacy: Control over your own personal data — who can collect it, keep it, and use it.
Bench of appropriate strength: A Supreme Court panel large enough, by its own rules, to overturn an earlier ruling by an equal or smaller panel.
Proportionality test: A check on state power: any privacy intrusion needs a real law behind it, a genuine purpose, and no more force than necessary.
Right to be forgotten: A person’s claim to have old, no-longer-relevant personal records de-indexed from search results.
1The core holding, and how it happened
Must Know
- On 24 August 2017, a nine-judge Supreme Court bench unanimously held that the right to privacy is a Fundamental Right, protected under Article 21. The case is formally called Justice K.S. Puttaswamy (Retd.) vs. Union of India.
- K.S. Puttaswamy was a retired Karnataka High Court judge, born in February 1926. In 2012, at age 86, he filed a petition calling mandatory Aadhaar enrolment “a clear violation of citizens’ privacy,” asking how such a scheme could roll out with no clear law behind it. Twenty-six more petitions were later clubbed with his.
- He lived to see the verdict, and later said: “I am completely vindicated by the decision.” He died in Bengaluru in October 2024, at 98.
So how did a challenge to one fingerprint scheme turn into a nine-judge constitutional ruling? Because two much older judgments stood in the way.
True or False: the Puttaswamy case was originally filed and heard as a nine-judge bench from the very start.
- The judgment overruled two earlier cases — M.P. Sharma (1954) and Kharak Singh (1962) — both of which had held privacy was not specifically protected by the Constitution.
- In August 2015, a smaller three-judge bench hearing the Aadhaar dispute noticed the government leaning on those two old rulings. It ordered a bench of “appropriate strength” to settle whether they still held. M.P. Sharma had been decided by eight judges, and Supreme Court practice requires an equal or larger bench to overrule one — that’s how nine judges ended up hearing the question.
- The Court found privacy to be an attribute of human dignity, covering personal intimacies like marriage, procreation, family, and sexual orientation.
- All nine judges agreed on the outcome, but still wrote six separate opinions rather than one single judgment. Justice Chandrachud wrote the lead opinion, joined by three others; the remaining five each wrote their own, some stressing dignity and autonomy, others control over personal information, or privacy as the foundation other freedoms depend on.
2How the case began
Good to Know
- The case began as a challenge to Aadhaar, the government’s biometric identification scheme. The privacy question arose because Aadhaar collects fingerprints, iris scans, and demographic data — exactly the kind of personal information Puttaswamy’s petition said needed real legal protection first.
3The separate Aadhaar ruling
Good to Know
- On 26 September 2018, a separate five-judge bench ruled on Aadhaar itself, upholding its core validity by a 4:1 majority.
- That verdict made linking Aadhaar to bank accounts and mobile numbers no longer mandatory. It stayed required for filing income tax returns and getting a PAN.
- Justice D.Y. Chandrachud was the sole dissenting judge in 2018, opposing the Aadhaar Act’s validity — the same judge who had authored a key opinion in the 2017 privacy verdict.
True or False: after the 2018 Aadhaar ruling, linking Aadhaar to a bank account remained mandatory for every citizen.
4In the news: two 2026 privacy tests
Current Affairs
- On 29 May 2026, the Delhi High Court held that a “right to be forgotten” flows directly from Puttaswamy’s recognition of informational privacy under Article 21.
- The Court laid down a framework directing Google and Indian Kanoon to de-index or mask judicial records — like acquittals, quashed cases, and matrimonial disputes — from name-based searches.
- In July 2026, Delhi Police deployed real-time facial recognition vehicles (“Ikshana”), smart spectacles (“AjnaLens”), drones, and fingerprint apps to scan demonstrators at a Jantar Mantar protest.
- Kerala MP A.A. Rahim then petitioned the Supreme Court, arguing this violated Articles 14, 19, and 21. In August 2026, a bench led by CJI Surya Kant agreed to hear the plea, tagging it with other pending protest-related petitions.
- The argument rests directly on Puttaswamy’s own three-part test for any privacy intrusion: it needs a real law behind it, a legitimate aim, and proportionality. Delhi Police’s defence is that the scans only matched people with serious criminal histories, with human verification — the case is still pending.
5A constitutional floor
Great to Know
- By locating privacy within Article 21’s “life and liberty,” the Court made it something the state cannot take away by ordinary legislation. It became a constitutional floor, not a policy choice Parliament could simply legislate around.
Think it through. If privacy is now a constitutional floor, why does the 2026 facial-recognition case still need to go through a full court hearing — shouldn’t Puttaswamy already have settled it?
Show the explanation
Because Puttaswamy established that privacy is a right, and set out a test for when the state can limit it — it didn’t pre-decide every future situation where that test applies. Whether Delhi Police’s specific facial-recognition deployment had a real legal basis, a genuine purpose, and proportionate methods is a factual and legal question this new case has to work through on its own facts. A constitutional floor tells you what standard to apply; it doesn’t automatically apply itself to a technology that didn’t even exist in the same form back in 2017.
6Legal foundation for later rulings
Great to Know
- This 2017 judgment became the legal foundation for later rulings, including decriminalising Section 377 (2018) and recognising individual autonomy in personal choices.
- It also shaped India’s approach to data protection — the 2023 Digital Personal Data Protection Act traces its constitutional justification directly back to this case.
- The judgment shows how a single individual’s challenge to one government scheme can produce a constitutional principle that reaches far beyond the scheme’s own facts.
Think it through. Puttaswamy was about Aadhaar and biometric data. Why did it end up shaping a completely different case, like decriminalising Section 377?
Show the explanation
Because the Court didn’t just rule narrowly on fingerprints and iris scans — it defined privacy broadly, as an attribute of human dignity covering personal intimacies like marriage, family, and sexual orientation. Once that broader principle existed as binding constitutional law, any later case involving personal autonomy in private life — including who someone can love — could draw directly on it. This is exactly the “one case, wide reach” pattern that makes Puttaswamy one of the most cited judgments in recent Indian constitutional history.
7How exams test this
UPSC CSP 2024 (Q76)
Asked which Article the Puttaswamy judgment placed the Right to Privacy under. Answer: Article 21, as part of the right to life and personal liberty.
UPSC CSP 2018 (Q92)
Asked the same fact, phrased as an implication: which constitutional provisions “correctly and appropriately imply” that privacy is protected as an intrinsic part of Article 21. Same answer, different phrasing — don’t let the wording throw you.
UPSC CSP 2021 (Q79)
Asked it directly: “Right to Privacy is protected under which Article of the Constitution of India?” Answer: Article 21.
Exam pattern to watch:
this fact gets recycled across years in different question formats — direct recall, an “implication” framing, and a fill-in-the-Article style. Know the core fact (Article 21) cold, and you can answer all three shapes.
Quick Q&A
- What did the Supreme Court decide on 24 August 2017? That the right to privacy is a Fundamental Right, protected under Article 21 — a unanimous nine-judge ruling.
- Why did it take nine judges to decide this? Two older rulings (1954 and 1962) had said privacy wasn’t specially protected. Overruling the 1954 one (decided by eight judges) required an equal or larger bench.
- Did the Puttaswamy ruling strike down Aadhaar? No — that was a separate 2018 ruling, which upheld Aadhaar’s core validity but made bank and mobile linking optional.
- What test does Puttaswamy require before the state can intrude on privacy? A three-part test: a real law authorising it, a legitimate aim, and proportionality — the same test now being argued in the 2026 facial-recognition case.
MCQ on ✅ Test Yourself
Answered 0 of 2 checks.
Related reading
- Polity0101 — Digital Personal Data Protection Act, 2023 — the law built on this case’s foundation.
- Polity0119 — UIDAI (Aadhaar) — the scheme that started it all.
- Polity0017 — Amending the Constitution and the Basic Structure Doctrine — how a bench overrules its own predecessors.
Leave a Reply