Law of Torts
Privacy as a Tort: R. Rajagopal, Puttaswamy, the Four Invasions, and Breach of Confidence
Indian privacy law developed in the constitutional jurisdiction rather than in the law of torts. R. Rajagopal v. State of Tamil Nadu located a right of privacy in Article 21 in 1994 and drew the line between privacy and freedom of the press; K.S. Puttaswamy v. Union of India settled it as a fundamental right in 2017 by a Bench of nine judges. The tortious action between private persons is still being built, largely out of breach of confidence and the general principles of tort, and India has no statutory tort of invasion of privacy.
Rajagopal and Puttaswamy, the four recognised invasions, and breach of confidence
1. R. Rajagopal v. State of Tamil Nadu
📖 R. Rajagopal v. State of Tamil Nadu, (1994) 6 SCC 632 Facts A condemned prisoner wrote an autobiography describing his own crimes and his dealings with a number of police and prison officials. The manuscript reached the editor of a Tamil weekly, which announced that it would serialise it. The prison and police authorities threatened action to prevent publication, asserting that the material was false and defamatory and that publication would be an invasion of the officials' privacy. Held The State had no power to prevent publication in advance, and the publishers were entitled to publish subject to the consequences if what they published was actionable. Ratio The Court laid down broad propositions. The right to privacy is implicit in the right to life and liberty guaranteed by Article 21. A citizen has a right to safeguard the privacy of his own, his family, marriage, procreation, motherhood, child bearing and education, among other matters, and publication of such matters without his consent is actionable. The right does not extend to a matter which has become part of the public records, including court records, publication of such matter being based on the freedom of the press. Nor does it extend to a person who voluntarily thrusts himself into a controversy. A public official has no remedy in damages for publication concerning the discharge of his official duties unless he proves that the publication was made with reckless disregard for the truth, in which case it is enough for the defendant to show that he acted after a reasonable verification of the facts, and he need not prove that what he published was true. And neither the Government nor its officials may impose a prior restraint on publication in anticipation of being defamed. |
2. K.S. Puttaswamy v. Union of India
📖 Justice K.S. Puttaswamy (Retd.) v. Union of India, (2017) 10 SCC 1 Facts A challenge to the Aadhaar scheme raised the prior question whether the Constitution protects a right to privacy at all, earlier decisions in M.P. Sharma and Kharak Singh having suggested that it did not. The question was referred to a Bench of nine judges. Held The right to privacy is a fundamental right. M.P. Sharma and Kharak Singh, so far as they held otherwise, were overruled. Ratio Privacy is intrinsic to life and personal liberty under Article 21 and to the other freedoms guaranteed by Part III. It is not surrendered by entering society. It has at least three aspects: privacy of the person, which protects bodily and mental integrity; informational privacy, which concerns the control of information about oneself; and privacy of choice, which protects autonomy over personal decisions. Any invasion by the State must satisfy the tests of legality, a legitimate State aim, and proportionality. The Court recognised that an invasion of privacy by a private person is a matter for the ordinary law, and invited the legislature to enact a data protection framework. |
3. The Four Recognised Invasions
The invasion | What it covers |
Intrusion into seclusion | Physical or electronic intrusion into a person's private space or affairs: surveillance, unauthorised recording, interception of communications, entry into a private space, persistent following. The wrong is the intrusion, and no publication is required |
Public disclosure of private facts | Publishing true but private information which a reasonable person would find highly offensive and in which the public has no legitimate concern: medical information, sexual life, family matters, financial affairs. Truth is no defence |
False light | Publishing matter that places a person in a false light before the public, though it may not be defamatory: attributing to him views he does not hold, or using his photograph to illustrate a story he has nothing to do with. The least developed of the four in Indian law |
Appropriation of name or likeness | Using a person's name, image, voice or likeness for the defendant's own benefit without consent. Commercially this shades into personality rights and the right of publicity: TORT 089 |
- The four heads are drawn from American scholarship and are not a statutory classification in India, but they map the ground usefully and Indian courts have granted relief in each category.
- The second is the one that most sharply distinguishes privacy from defamation. In defamation the plaintiff complains that what was said about him was false; in privacy he complains that it was true and should not have been published.
4. Breach of Confidence and Privacy
Breach of confidence | Privacy | |
What must be shown | That the information had the necessary quality of confidence, that it was imparted in circumstances importing an obligation of confidence, and that there was an unauthorised use of it | That the information was private, and that it was obtained, used or published without consent |
Does it need a relationship | Yes. It depends on a relationship, existing or implied, between the parties | No. It protects the information because of its character, whoever obtained it and however |
The typical defendant | An employee, a professional adviser, a doctor, a banker, a business partner | Anyone, including a stranger |
The illustration | A doctor who discloses a patient's records | A stranger who photographs through a window, who owes no duty of confidence and is answerable in privacy alone |
Its position in India | Long established, and available in contract and in equity | Established against the State, and still developing between private persons |
5. Defences and the Limits of the Right
- Consent, express or implied, to the obtaining or the publication.
- Matters on the public record, including court records, which Rajagopal expressly excludes from the right.
- Voluntary entry into public controversy. A person who thrusts himself into a public dispute cannot complain of scrutiny of what he has made public.
- Public interest, which is narrower than what interests the public, and covers the exposure of crime, of serious misconduct, and of matters affecting public health or safety.
- Official conduct of a public servant, where the publication is protected unless made with reckless disregard for the truth.
- Lawful authority, where the intrusion is authorised by a statute satisfying the Puttaswamy tests of legality, legitimate aim and proportionality.
6. What the Law Still Lacks
- There is no Indian statutory tort of invasion of privacy, and no general civil remedy created by legislation.
- The Digital Personal Data Protection Act, 2023 regulates the processing of personal data and provides a penalty regime enforced by a Data Protection Board, but it does not create a private right of action in damages for the data principal.
- So the civil remedy of a person whose privacy has been invaded by another private person remains the ordinary law of torts, supplemented by breach of confidence, by defamation where the matter is false, by passing off where his identity has been used commercially, and by the writ jurisdiction where the State is involved.
- Injunctive relief is the practically important remedy, since damages rarely repair an exposure, though the prior restraint principles in Rajagopal and in Bloomberg v. Zee restrict what a court will do before trial.
⚠ Why privacy and defamation must not be run together The two torts look similar because both concern what is said about a person, and they are structurally opposite. Defamation requires falsity: the plaintiff says the statement was untrue, falsity is presumed in his favour, and the defendant escapes entirely by proving that it was true. Privacy requires the opposite: the plaintiff complains precisely because the statement was true, and truth is no defence at all. That difference has consequences a pleader must attend to. A plaintiff who frames a privacy complaint as defamation invites the defendant to justify, and if the defendant can prove what he published the claim collapses, though the exposure was the very injury complained of. A plaintiff who frames a defamation complaint as privacy gives up the presumption of falsity that would have done most of his work for him. Where the publication is partly true and partly false, as it usually is, both may be pleaded, but they must be pleaded separately and the particulars of each kept distinct. |
7. The Position Stated Shortly
1. R. Rajagopal v. State of Tamil Nadu held that the right to privacy is implicit in Article 21, and that publication of private matters without consent is actionable.
2. The right does not extend to matters on the public record, including court records, or to a person who voluntarily thrusts himself into controversy.
3. A public official has no remedy for publication about his official conduct unless he proves reckless disregard for the truth, the defendant answering by showing reasonable verification.
4. Neither the Government nor its officials may impose a prior restraint on publication in anticipation of defamation.
5. K.S. Puttaswamy v. Union of India, decided by nine judges, held privacy to be a fundamental right and overruled M.P. Sharma and Kharak Singh on that point.
6. Privacy has three aspects: privacy of the person, informational privacy, and privacy of choice, and any State invasion must satisfy legality, legitimate aim and proportionality.
7. The four recognised invasions are intrusion into seclusion, public disclosure of private facts, false light, and appropriation of name or likeness.
8. Breach of confidence depends on a relationship between the parties; privacy protects the information because of its character, whoever obtained it.
9. Truth is a complete defence to defamation and no defence at all to a privacy claim, which is the central structural difference between them.
10. India has no statutory tort of invasion of privacy, and the Digital Personal Data Protection Act, 2023 creates a penalty regime and not a private right of action in damages.