The Right to Privacy and Cybercrime in India: A Critical Analysis of Legal Protection and Emerging Challenges

Abstract

The dramatic growth of digital technologies has not only redefined the nature of violations of privacy but also strengthened the link between informational autonomy, cybersecurity and criminal liability. Cybercrimes increasingly involve identity theft, unauthorised access to information, cyberstalking, the non-consensual dissemination of images, data breaches, digital impersonation and technologically facilitated intrusion. This poses a fundamental legal question: does India's constitutional and legal architecture sufficiently protect individuals from violations of digital privacy and, at the same time, allow the proportionate investigation of cybercrime? In upholding the right to privacy in Justice K.S. Puttaswamy (Retd.) v. Union of India, the Supreme Court established a constitutional foundation for the protection of dignity, autonomy and informational privacy. Constitutional recognition must, however, be translated into effective legal remedies, institutional accountability and safeguards. The paper critically analyses the constitutional dimensions of the right to privacy under Articles 14, 19 and 21 of the Constitution of India, the scope of the provisions of the Information Technology Act, 2000 and the Bharatiya Nyaya Sanhita, 2023, intermediary responsibilities and the emerging framework of the Digital Personal Data Protection Act, 2023, and draws on decisions relating to interception and surveillance, the dissemination of personal information, internet restrictions and spyware allegations. Using a doctrinal and analytical approach based on legislation and judicial pronouncements, the paper argues that the main impediment in India is not the absence of legal protection but the multiplicity of remedies, the difficulty of proving culpability in cybercrime, and the 'silos' of privacy, public security and surveillance. It suggests a proportionate, rights-based framework that addresses these concerns through balanced investigation procedures, safeguards for digital evidence, accountable data-governance practices, independent oversight mechanisms and remedies for victims.