Covid-19 has spawned contact-tracing worldwide, triggering collection and processing of personal data. Privacy protections surrounding this are nascent, raising significant concerns about their permanence in our society. The Supreme Courts landmark Puttaswamy judgement recognised privacy as intrinsic to personal liberty under Article 21.
Concurrently, it recognised that a legitimate interest, say, an epidemic, might restrain the right provided the doctrines of necessity and proportionality are satisfied. In this context, a recent order from the Kerala High Court in Balu Gopalakrishnan assumes significance.
The Kerala government contracted US-based Sprinklr Inc for Covid-related medical data analysis. Petitioners assailed this contract for lacking adequate privacy safeguards, arguing that the jurisdictional choice of New York virtually renders Indian citizens defenceless against a breach.
The courts order pervasively focuses on data localisation, that data concerning Indian residents must reside within India to secure jurisdiction of her courts. This sentiment has been echoed by Union ministers as well. We submit that data localisation is an anachronism, and severely inhibits privacy protections envisaged under the Constitution.
A comprehensive safeguard instead necessitates attaching jurisdiction through the residence of the data subject. In fact, Delhis obsession with data localisation stalls the resolution of another obsolescence ailing Indias privacy regime the absence of a data-protection legislation.
Currently, statutory protections are entirely contained within the Information Technology Act, 2000 (IT Act). Data localisation advocates, and respondents in Gopalakrishnan argue that localisation attaches jurisdiction using Section 75(2) of the IT Act, which applies the Act extra-territorially (outside India) if a breach involves a computer located in India.
Any reassurance from Section 75(2) is a facade. Consider this, Sprinklr decides to use a supercomputer in Ohio and copies data from Indian servers. The supercomputer at Ohio containing data of Indian nationals is breached. In such a case, Section 75(2) will not operate since the computer located in India was not breached, and absurdly, an Indian will be without remedy.
The IT Act was designed to facilitate e-commerce, not for data protection. Thus, virtually, the entirity of its penal provisions are predicated on tangible loss (see Sections 43A, 66, 66C, 66D, and 66E). Disclosure that someone is diabetic may not cause a loss but is still a privacy violation yet, the IT Act provides no remedy here.
Resolving these absurdities requires a fundamental re-imagination of our privacy jurisprudence. Jurisdiction should attach to any entity collecting, processing, and/or storing personal data based on the residence of the data subject, not its location. This approach allows greater flexibility for processing while also comprehensively protecting privacy.
The spatial approach of data-localisation is incongruent to the very concept of privacy. This was first enunciated by the US Supreme Court (Scotus) in Katz v United States, where wiretapping without entering a persons home was challenged as a violation of Fourth Amendment rights.
The Fourth Amendment is textually spatial; it protects against unreasonable search and seizure of someones persons, houses, papers, and effects. Drafted around 1791, its text could not possibly predict the intrusion that remote technologies can accomplish today.
Therefore, like data-localisation, it was written with spatial limitations and a literal interpretation renders it redundant today. Cognizant of this vulnerability, Scotus held that privacy attaches to people, not places, and therefore, wiretapping even absent a literal intrusion was unconstitutional.
The Indian Supreme Court, in Dist Registrar & Collector v Canara Bank, adopted Katz with approval, placing individuals at the locus of privacy. In Puttaswamy, Justice Chandrachud wrote, Privacy is a concomitant of the right of the individual to exercise control over his or her personality. Justice Nariman distilled an informational aspect of privacy, distinct from an individuals physical body. As a principle seeking to preserve privacy, therefore, data localisation ignores its evolution and attempts to restrict it to an obsolete conception of tangibility and spatiality.
Restrictive view
To argue that Indian courts cannot pursue offenders abroad without data localisation is a restrictive view of jurisdiction. The Supreme Court in GVK Industries acknowledged Parliaments power to legislate extra-territorially for the interests or welfare of inhabitants of India. Article 73 of the Constitution makes the Union executive power contemporaneous with Parliaments legislative authority.
Therefore, where the welfare of Indians is concerned, legislative and executive powers of extend outside India too.The Constitutions Fundamental Rights Charter is meant to check state authority. Consequently, it too, must operate abroad if the state pursues extra-territorial acts.
Concluding otherwise would confer absolute impunity to state action abroad, even when it infringes the rights, interests or welfare of the people of India. The Constitution provides for writs under Articles 32 and 226 for enforcing rights of Indians, indicating that the jurisdiction of the Supreme Court and high courts would extend extra-territorially in such cases.
There is precedent for this understanding of jurisdiction. Section 4 of the IPC provides that an Indian citizen may be charged with an IPC offence committed while she is abroad, even if it is not an offence in that country. Parliament has therefore attempted to regulate the conduct of Indian citizens abroad to accord with Indias standards of criminality. In such cases, Indian courts gain congruent jurisdiction already. For data protection, Europes General Data Protection Regulation statutorily attaches jurisdiction based on residence of data-subject, rejecting data-localisation. Under the Protective Principle, international law also permits extra-territorial jurisdiction of states for its own preservation or protecting its interests. Clearly, critical personal data of its residents is at the core of a states interests.
In Maneka Gandhi, the SC noted that courts should expand the reach and ambit of Fundamental Rights, rather than to attenuate their meaning and content by a process of judicial construction. By relying on constricted and overly simplistic anachronisms like data-localisation, policy makers are turning away from this guiding principle.
(Maniktala is an LLB student, Campus Law Center, University of Delhi; Khurana, is an LLM graduate from the UCLA School of Law, USA)
See the rest here:
Assessing Indias obsession with data localisation - Deccan Herald
- Quinn: Supreme Court should clarify Fourth Amendment rights in the digital age - April 26th, 2014 [April 26th, 2014]
- Fourth amendment | Wex Legal Dictionary / Encyclopedia ... - April 26th, 2014 [April 26th, 2014]
- The Fourth Amendment is destroyed by the Roberts led Supreme Court. - Video - April 26th, 2014 [April 26th, 2014]
- Protections for e-data clear Senate committee - April 27th, 2014 [April 27th, 2014]
- Weighing The Risks Of Warrantless Phone Searches During Arrests - April 29th, 2014 [April 29th, 2014]
- Court may let cops search smartphones - April 29th, 2014 [April 29th, 2014]
- Supreme Court to hear case on police searches of cellphones - April 29th, 2014 [April 29th, 2014]
- Fourth Amendment in the digital age: Supreme Court to decide if police can search cellphones without a warrant - April 30th, 2014 [April 30th, 2014]
- What Scalia knows about illegal searches - April 30th, 2014 [April 30th, 2014]
- Should police be allowed to search your smartphone - Video - April 30th, 2014 [April 30th, 2014]
- The Shaky Legal Foundation of NSA Surveillance on Americans - May 1st, 2014 [May 1st, 2014]
- Pennsylvania Supreme Court rules police don't need warrants to search cars - May 3rd, 2014 [May 3rd, 2014]
- Local police: Updated vehicle-search law still requires probable cause - May 3rd, 2014 [May 3rd, 2014]
- Liberal Supreme Court Justice Comes To The Defense Of Scalia - May 3rd, 2014 [May 3rd, 2014]
- Smartphones and the Fourth Amendment - Video - May 4th, 2014 [May 4th, 2014]
- Fourth Amendment Defined & Explained - Law - May 6th, 2014 [May 6th, 2014]
- I-Team: Do police seek search warrant friendly judges? - May 8th, 2014 [May 8th, 2014]
- Is Big Brother Listening? Applying the Fourth Amendment in an Electronic Age - Video - May 9th, 2014 [May 9th, 2014]
- Magistrate waxes poetic while rejecting Gmail search request - May 10th, 2014 [May 10th, 2014]
- The Fourth Amendment - Video - May 10th, 2014 [May 10th, 2014]
- License reader lawsuit can be heard, appeals court rules - May 15th, 2014 [May 15th, 2014]
- Seize the Rojo - Video - May 16th, 2014 [May 16th, 2014]
- NSA Spying Has a Disproportionate Effect on Immigrants - May 16th, 2014 [May 16th, 2014]
- Motorists sue Aurora, police in 2012 traffic stop after bank robbery - May 18th, 2014 [May 18th, 2014]
- Judge Says NSA Phone Surveillance Likely Unconstitutional - Video - May 21st, 2014 [May 21st, 2014]
- New York Attorney Heath D. Harte Releases a Statement on Fourth Amendment Rights - May 22nd, 2014 [May 22nd, 2014]
- The Fourth Amendment Rights - Video - May 23rd, 2014 [May 23rd, 2014]
- Bangor Area School District teachers vote no to random drug - May 24th, 2014 [May 24th, 2014]
- I Don't Care About The Contitution, Take Your Fourth Amendment And Shove It The Hills Hotel - Video - May 27th, 2014 [May 27th, 2014]
- Lonestar1776 at Illegal Checkpoint 80 Miles Inside Border - Standing UP & Pushing Back! pt 2/2 - Video - August 31st, 2014 [August 31st, 2014]
- Suit charges Daytona Beach's rental inspection program violates civil rights - September 3rd, 2014 [September 3rd, 2014]
- 4th Amendment - Laws.com - September 4th, 2014 [September 4th, 2014]
- YOU CAN ARREST ME NOW (cops refuse, steal phone) - Video - September 7th, 2014 [September 7th, 2014]
- The Feds Explain How They Seized The Silk Road Servers - September 8th, 2014 [September 8th, 2014]
- Volokh Conspiracy: Does obtaining leaked data from a misconfigured website violate the CFAA? - September 9th, 2014 [September 9th, 2014]
- Defence asks judge in NYC to toss out bulk of evidence in Silk Road case as illegally obtained - September 10th, 2014 [September 10th, 2014]
- Family of a mentally ill woman files lawsuit against San Mateo Co. after deadly shooting - September 10th, 2014 [September 10th, 2014]
- Minnesota Supreme Court upholds airport drug case decision - September 12th, 2014 [September 12th, 2014]
- Law Talk - Obamacare Rollout; Fourth Amendment, NSA Spying Stop & Frisk DUI Check Points lta041 - Video - September 12th, 2014 [September 12th, 2014]
- Volokh Conspiracy: The posse comitatus case and changing views of the exclusionary rule - September 15th, 2014 [September 15th, 2014]
- Guest: Why the privacy of a public employees cellphone matters - September 16th, 2014 [September 16th, 2014]
- Volokh Conspiracy: Apples dangerous game - September 19th, 2014 [September 19th, 2014]
- Judge expounds on privacy rights - September 20th, 2014 [September 20th, 2014]
- Great privacy essay: Fourth Amendment Doctrine in the Era of Total Surveillance - September 20th, 2014 [September 20th, 2014]
- The Fourth Amendment By Maison Erdman - Video - September 20th, 2014 [September 20th, 2014]
- Volokh Conspiracy: When administrative inspections of businesses turn into massive armed police raids - September 22nd, 2014 [September 22nd, 2014]
- The chilling loophole that lets police stop, question and search you for no good reason - September 23rd, 2014 [September 23rd, 2014]
- Pet Owners Look to Muzzle Police Who Shoot Dogs - September 27th, 2014 [September 27th, 2014]
- Volokh Conspiracy: A few thoughts on Heien v. North Carolina - September 29th, 2014 [September 29th, 2014]
- Volokh Conspiracy: Third Circuit on the mosaic theory and Smith v. Maryland - October 1st, 2014 [October 1st, 2014]
- Volokh Conspiracy: Third Circuit gives narrow reading to exclusionary rule - October 2nd, 2014 [October 2nd, 2014]
- Volokh Conspiracy: Supreme Court takes case on duration of traffic stops - October 3rd, 2014 [October 3rd, 2014]
- Search & Seizure, Racial Bias: The American Law Journal on the Philadelphia CNN-News Affiliate WFMZ Monday, October 6 ... - October 3rd, 2014 [October 3rd, 2014]
- Argument preview: How many brake lights need to be working on your car? - October 3rd, 2014 [October 3rd, 2014]
- The 'Barney Fife Loophole' to the Fourth Amendment - October 3rd, 2014 [October 3rd, 2014]
- Search & Seizure: A New Fourth Amendment for a New Generation? - Promo - Video - October 4th, 2014 [October 4th, 2014]
- Ap Government Fourth Amendment Project - Video - October 4th, 2014 [October 4th, 2014]
- Lubbock Liberty Workshop With Arnold Loewy On The Fourth Amendment - Video - October 5th, 2014 [October 5th, 2014]
- Feds Hacked Silk Road Without A Warrant? Perfectly Legal, Prosecutors Argue - October 7th, 2014 [October 7th, 2014]
- Supreme Court Starts Term with Fourth Amendment Case - October 7th, 2014 [October 7th, 2014]
- Argument analysis: A simple answer to a deceptively simple Fourth Amendment question? - October 9th, 2014 [October 9th, 2014]
- Feds Say That Even If FBI Hacked The Silk Road, Ulbricht's Rights Weren't Violated - October 9th, 2014 [October 9th, 2014]
- Mass Collection of U.S. Phone Records Violates the Fourth Amendment - Video - October 9th, 2014 [October 9th, 2014]
- Leggett sides with civil liberties supporters - October 10th, 2014 [October 10th, 2014]
- Search & Seizure / Car Stops: A 'New' Fourth Amendment for a New Generation? - Video - October 10th, 2014 [October 10th, 2014]
- The Fourth Amendment- The Maininator Period 4 - Video - October 10th, 2014 [October 10th, 2014]
- Judge nukes Ulbricht's complaint about WARRANTLESS FBI Silk Road server raid - October 11th, 2014 [October 11th, 2014]
- Montgomery County will not hold immigrants without probable cause -- Gazette.Net - October 13th, 2014 [October 13th, 2014]
- Debate: Does Mass Phone Data Collection Violate The 4th Amendment? - October 14th, 2014 [October 14th, 2014]
- Does the mass collection of phone records violate the Fourth Amendment? - October 19th, 2014 [October 19th, 2014]
- When Can the Police Search Your Phone and Computer? - October 21st, 2014 [October 21st, 2014]
- Supreme Court to decide if cops can access hotel registries without warrants - October 22nd, 2014 [October 22nd, 2014]
- Third Circuit Allows Evidence from Warrantless GPS Device - October 22nd, 2014 [October 22nd, 2014]
- US court rules in favor of providing officials access to entire email account - October 24th, 2014 [October 24th, 2014]
- EL MONTE POLICE OFFICER VIOLATES ARMY VETERAN'S FOURTH AMENDMENT RIGHT - Video - October 25th, 2014 [October 25th, 2014]
- FBI demands new powers to hack into computers and carry out surveillance - October 30th, 2014 [October 30th, 2014]
- Fourth Amendment (United States Constitution ... - November 4th, 2014 [November 4th, 2014]
- Fourth Amendment - Video - November 4th, 2014 [November 4th, 2014]
- Call Yourself a Hacker and Lose Fourth Amendment Rights - Video - November 5th, 2014 [November 5th, 2014]
- Volokh Conspiracy: Magistrate issues arrest warrants for 17 years but is new to probable cause - November 7th, 2014 [November 7th, 2014]