Redress mechanisms for wrongful surveillance

Introduction

Redress mechanisms for wrongful surveillance refer to the legal, administrative and institutional remedies available to individuals whose privacy, personal information or confidential activities have been unlawfully monitored, collected, accessed or disclosed by government authorities, private organizations or other entities.

Surveillance may involve monitoring telephone communications, internet activities, biometric information, genetic databases, medical records, location information and electronic devices. Although surveillance may be necessary for national security, law enforcement and legitimate regulatory purposes, it must comply with constitutional protections, statutory requirements and principles of proportionality.

In biotechnology and healthcare, wrongful surveillance raises particularly serious concerns because genetic information, biological samples, medical records and research participation details may reveal sensitive information about individuals and their families.

Redress mechanisms provide affected individuals with opportunities to challenge unlawful surveillance, obtain compensation, secure deletion or correction of improperly collected information where legally available, and seek accountability against responsible authorities.

Legal framework governing wrongful surveillance in India

The Indian legal framework recognizes privacy as an important constitutional and statutory right.

1. Article 21 of the Constitution of India

Article 21 protects the right to life and personal liberty. The Supreme Court has interpreted this provision to include the fundamental right to privacy.

Unlawful surveillance may violate this right where it interferes with an individual's personal autonomy, confidentiality or freedom without sufficient legal justification.

2. Article 19 of the Constitution

Article 19 protects freedoms including speech and expression, association and movement.

Excessive or unlawful surveillance may discourage individuals from exercising these freedoms because of fear of monitoring or retaliation.

3. Digital Personal Data Protection Act, 2023

The Act establishes a framework for processing digital personal data in India.

It provides obligations concerning lawful processing, consent where applicable, security safeguards and data principal rights.

Where wrongful surveillance involves unlawful processing of identifiable digital personal data, affected individuals may have remedies through the statutory grievance and adjudicatory framework, subject to the Act's provisions, exemptions and applicable commencement arrangements.

4. Information Technology Act, 2000

The Information Technology Act provides legal provisions addressing unauthorized access, disclosure and misuse of computer resources.

Section 43 addresses specified unauthorized acts involving computer systems.

Section 66 provides punishment where specified acts under Section 43 are committed dishonestly or fraudulently.

Section 72 addresses breach of confidentiality and privacy by persons who obtain access to electronic information under powers conferred by the Act.

Section 72A addresses disclosure of information in breach of a lawful contract, subject to its statutory requirements.

5. Indian Telegraph Act, 1885

Section 5(2) permits interception of messages in specified circumstances involving public emergency or public safety, subject to statutory conditions.

The provision establishes legal limitations on government interception of communications.

6. Bharatiya Nyaya Sanhita, 2023

The Bharatiya Nyaya Sanhita provides criminal provisions that may become relevant depending on the conduct involved, including offences relating to unauthorized disclosure, intimidation, identity-related misconduct and other unlawful activities.

Types of wrongful surveillance

Wrongful surveillance may occur through several technological and institutional practices.

1. Unauthorized communication interception

This involves monitoring telephone conversations, emails, text messages or other private communications without proper legal authorization.

2. Biometric surveillance

Biometric surveillance involves collecting or monitoring fingerprints, facial images, iris information and other biological identifiers without appropriate legal authority or safeguards.

3. Genetic surveillance

Genetic surveillance occurs when DNA information or genomic databases are accessed, analysed or shared without a lawful basis or appropriate safeguards.

It is particularly sensitive because genetic information may reveal hereditary characteristics and information about biological relatives.

4. Digital and internet surveillance

This involves unauthorized tracking of browsing activities, online communications, digital accounts and internet usage.

5. Workplace and institutional surveillance

Employers or research institutions may improperly monitor employees, students, patients or research participants beyond legitimate operational or legal requirements.

Major redress mechanisms for wrongful surveillance

1. Constitutional writ remedies

Individuals may approach the High Courts under Article 226 or the Supreme Court under Article 32 where government surveillance violates fundamental rights.

Courts may examine the legality, necessity and proportionality of surveillance measures.

Depending on the circumstances, remedies may include:

Declaration that the surveillance was unlawful.

Directions to discontinue unlawful monitoring.

Protection against further violations.

Appropriate compensation in established cases.

Orders requiring compliance with constitutional safeguards.

2. Compensation for privacy violations

Where unlawful surveillance causes a violation of fundamental rights or other legally recognized injury, affected individuals may seek compensation through appropriate judicial proceedings.

Compensation depends on the applicable legal basis, evidence and circumstances of the violation.

3. Data protection grievance mechanisms

Where surveillance involves unlawful processing of digital personal data, individuals may exercise applicable rights and pursue grievances under the Digital Personal Data Protection Act, 2023.

The statutory framework provides for the Data Protection Board of India to perform adjudicatory functions concerning contraventions under the Act.

4. Criminal complaints

Where surveillance involves unauthorized access, interception or disclosure that constitutes an offence, affected individuals may approach the appropriate law enforcement authorities.

The Information Technology Act and other applicable criminal laws may provide remedies depending on the facts.

5. Departmental and regulatory complaints

Complaints may also be submitted to appropriate departmental authorities, regulatory bodies or institutional grievance mechanisms.

For example, wrongful surveillance by a healthcare institution may involve complaints concerning unauthorized access to patient records or misuse of confidential medical information.

6. Injunctions and preventive orders

Courts may grant appropriate interim or permanent injunctions where the legal requirements are satisfied.

Such orders may restrict continuing unlawful surveillance, disclosure or misuse of confidential information.

Important case laws

1. Justice K.S. Puttaswamy (Retd.) v. Union of India, (2017) 10 SCC 1

The Supreme Court of India unanimously recognized privacy as a fundamental right under Article 21 and other freedoms guaranteed by Part III of the Constitution.

The Court recognized several dimensions of privacy, including bodily privacy, informational privacy and decisional autonomy.

It also explained that restrictions on privacy must satisfy constitutional requirements of legality, legitimate state purpose and proportionality.

Relevance: This judgment provides the constitutional foundation for challenging wrongful surveillance involving telephone communications, genetic information, biometric databases and personal digital records.

2. People's Union for Civil Liberties (PUCL) v. Union of India, (1997) 1 SCC 301

The Supreme Court examined telephone tapping and the protection of privacy under Article 21.

The Court held that telephone conversations are an important aspect of private life and that unauthorized interception may violate constitutional rights.

It prescribed procedural safeguards governing telephone interception under Section 5(2) of the Indian Telegraph Act, 1885.

Relevance: The judgment establishes that surveillance powers cannot be exercised arbitrarily. It supports the availability of judicial remedies where communication interception violates statutory or constitutional safeguards.

3. Kharak Singh v. State of Uttar Pradesh, AIR 1963 SC 1295

The Supreme Court examined police surveillance regulations that permitted monitoring of individuals suspected of criminal activity.

The Court invalidated certain surveillance practices involving unauthorized intrusion into private residences and recognized the importance of personal liberty.

Although the judgment preceded the express recognition of privacy as a fundamental right in Puttaswamy, it contributed significantly to the development of Indian privacy jurisprudence.

Relevance: It demonstrates that surveillance must remain within constitutional boundaries and cannot justify arbitrary interference with individual liberty.

4. District Registrar and Collector v. Canara Bank, (2005) 1 SCC 496

The Supreme Court examined the privacy interests associated with confidential banking records and the power of authorities to access private documents.

The Court emphasized that privacy protections extend to confidential documents and records maintained by institutions.

Relevance: This judgment is important for biotechnology and healthcare institutions because genetic databases, medical records and confidential research documents require appropriate legal safeguards against unauthorized access.

5. Anuradha Bhasin v. Union of India, (2020) 3 SCC 637

The Supreme Court examined restrictions on internet access in Jammu and Kashmir.

The Court emphasized the importance of proportionality, transparency and periodic review when governments impose restrictions affecting fundamental rights.

Although the case did not directly concern surveillance, its reasoning is relevant to digital privacy and governmental monitoring.

Relevance: It supports the principle that restrictions affecting digital freedoms must be legally justified, proportionate and subject to appropriate review.

International legal framework

International human rights instruments provide additional protection against arbitrary surveillance.

1. International Covenant on Civil and Political Rights (ICCPR), 1966

Article 17 protects individuals against arbitrary or unlawful interference with their privacy, family, home or correspondence.

It also recognizes the right to legal protection against such interference.

2. Universal Declaration of Human Rights, 1948

Article 12 prohibits arbitrary interference with privacy, family, home or correspondence.

It establishes an important international human rights foundation for privacy protection.

3. European Convention on Human Rights, 1950

Article 8 protects the right to respect for private and family life, home and correspondence.

European human rights jurisprudence has developed significant safeguards concerning surveillance, data retention and interception of communications.

Challenges in obtaining redress for wrongful surveillance

Despite constitutional and statutory protections, individuals may face considerable difficulties in challenging unlawful surveillance.

First, surveillance activities may remain confidential, making it difficult for affected individuals to establish that monitoring occurred.

Second, government agencies may rely on national security or law enforcement grounds when defending surveillance measures.

Third, digital surveillance can involve multiple service providers and jurisdictions, complicating the identification of responsible entities.

Other significant challenges include:

Difficulty obtaining documentary evidence.

Lack of awareness regarding available legal remedies.

Delays in judicial proceedings.

Technical complexity of surveillance systems.

Limited transparency in interception procedures.

Cross-border transfer of personal information.

Difficulty establishing financial or psychological harm.

Measures for strengthening redress mechanisms

Effective protection against wrongful surveillance requires stronger legal safeguards and accessible complaint procedures.

Important measures include:

Establishing independent oversight of surveillance activities.

Requiring lawful authorization for interception and monitoring.

Introducing regular audits of government surveillance systems.

Strengthening data protection and cybersecurity safeguards.

Providing accessible complaint and compensation procedures.

Ensuring transparent investigation of unauthorized access.

Establishing strict controls over genetic and biometric databases.

Improving judicial supervision of surveillance powers.

Healthcare institutions, biotechnology companies and research organizations should also adopt clear confidentiality policies and maintain access logs for sensitive personal and genetic information.

Conclusion

Redress mechanisms for wrongful surveillance are essential for protecting constitutional privacy, informational autonomy and individual liberty. The increasing use of artificial intelligence, biometric identification, genetic databases and digital monitoring technologies has made effective surveillance safeguards increasingly important.

In India, Article 21 of the Constitution, the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and the Indian Telegraph Act, 1885, provide important legal foundations for challenging unlawful surveillance.

Judicial decisions such as Justice K.S. Puttaswamy v. Union of India, PUCL v. Union of India and Kharak Singh v. State of Uttar Pradesh establish important principles concerning privacy, legality and procedural safeguards.

Ultimately, effective redress requires independent oversight, judicial review, compensation where legally justified, accountability of responsible institutions and protection against repeated privacy violations. These mechanisms ensure that technological development and legitimate surveillance activities remain consistent with constitutional rights and democratic principles.