Karmanya Singh Sareen: A Pivotal Moment in India's Digital Privacy Renaissance

The case of Karmanya Singh Sareen vs. Union of India, centred around WhatsApp's 2016 Privacy Policy update, highlighted significant concerns about protecting personal data and privacy rights under the Indian Constitution. Karmanya argued that the policy allowed WhatsApp to collect extensive user data, such as phone numbers, addresses, and third-party records, which could be used for various purposes, including advertising, thus violating privacy rights​​.

The High Court of Delhi acknowledged the infringement of the Right to Privacy but did not grant the reliefs sought due to the unestablished legal position of the fundamental right to privacy at that time. However, it directed that data of non-existent members as of September 25, 2016, should be deleted and that data of existing members up to that date should not be shared with Facebook. Notably, the Court directed the state and the Telecom Regulatory Authority of India (TRAI) to create a regulatory framework for applications like WhatsApp​​.
While the immediate impact of the case on the legislative process is not explicitly detailed, it underscored the urgent need for precise data protection laws in India. The Supreme Court, in its ongoing considerations, recognized the need to establish the contours of informational privacy, leaving the drafting of such legislation to the legislature. This has led to subsequent data security lawsuits, highlighting the shortcomings of the new data protection system and paving the way for more robust data safety laws in India​​.

Prologue to a Digital Crusade

In an era where digital footprints define our existence, Karmanya Singh Sareen emerged not merely as a litigant but as a vanguard in the effort for improved digital privacy. His legal odyssey against WhatsApp's data-sharing policy became a touchstone in the annals of India's digital privacy law, echoing the zeitgeist of a society grappling with the nuances of online privacy.

Chronicle of a Legal Odyssey

• 2014 - The Beginning of Concerns: The acquisition of WhatsApp by Facebook raised initial concerns about potential changes in privacy standards. Despite WhatsApp's assurances through blog posts that their privacy standards would remain intact, there was growing unease among users about their data privacy.
• August 2016 - Policy Change Announcement: WhatsApp announced an update to its privacy policy, signalling a shift towards greater data sharing with Facebook. This move sparked public dissent and worry about the implications for user privacy, leading to widespread debate and criticism.
• September 2016 - The Legal Battle Commences: Karmanya Singh Sareen filed a Public Interest Litigation (PIL) in the Delhi High Court, challenging WhatsApp's new privacy policy. This marked the beginning of a significant legal battle concerning digital privacy rights in India.
• September 2016 - Delhi High Court's Initial Ruling: The Delhi High Court ruled on the case, laying down the first legal foundation for the protection of digital privacy in India. The Court's decision was a partial victory for privacy advocates and set the stage for further legal challenges.
• January 2017 - Escalation to the Supreme Court: The case escalated to the Supreme Court of India, bringing national attention to the issue of digital privacy. This represented a significant elevation in the legal battle, indicating the seriousness and far-reaching implications of the case.
• 2017-2020 - Governmental Promises of Legislation: Over these years, the Indian government repeatedly assured the introduction of new data protection legislation. These assurances came in response to the ongoing legal proceedings and growing public concern about digital privacy.
• January 2021 - WhatsApp's Revised Policy and Renewed Challenges: WhatsApp updated its privacy policy again, leading to renewed legal challenges and public outcry. The updated policy raised further concerns about user data privacy and the extent of data sharing with Facebook.
• February 2023 - Supreme Court's Significant Order: The Supreme Court issued a crucial order, bolstering the fight for digital privacy. This order was a critical moment in the legal battle, indicating the Court's recognition of the importance of protecting digital privacy rights.
• August 2023 - Enactment of the Digital Personal Data Protection Act: The culmination of relentless advocacy and legal battles led to enacting the Digital Personal Data Protection Act 2023. This Act represented a significant advancement in the legal framework for digital privacy in India.

The inception of the Legal Challenge and the High Court's Verdict

Embarking on a David vs. Goliath legal quest, Sareen's petition before the Delhi High Court culminated in a watershed verdict, where the Court declared: "For existing users of WhatsApp who wish to completely delete WhatsApp from their phones, all information and data shall be fully deleted from the WhatsApp servers and the same should not be shared. For users who opt to remain on WhatsApp, existing information of Users till 25.09.2016 shall not be shared with Facebook. Central Government and TRAI shall consider the issues regarding functioning internet messaging applications like WhatsApp and decide whether it is feasible to bring the same under the statutory regulatory framework."

Ascent to the Supreme Court and the Government's Epiphany

The Supreme Court's engagement catalyzed a governmental epiphany, acknowledging the imperative of robust data protection legislation: "The learned Attorney General and the Solicitor General brought to our notice the fact that a Bill called the Digital Personal Data Protection Bill 2022 is on the anvil. They contend that the Bill would deal with all the aspects which are the subject matter of the petitions before this Court and their approach is that the matters may not be taken up for hearing..." submitted the Government before the Supreme Court.

Karmanya's Key Arguments in a nut-shell

Violation of Privacy Rights: WhatsApp's new privacy policy infringed upon the privacy rights of its users. They argued that the policy allowed for the collection and sharing of a vast array of user data, such as phone numbers, addresses, comments, system information, and third-party records.

Manipulative Consent Acquisition: Questioned the manner in which WhatsApp obtained user consent for the new policy, suggesting it was manipulative or not fully transparent.
Need for Regulation: Lack of clear legislation in India regarding privacy for data users. They advocated for the state to step in and regulate data sharing, and to enact legislation to protect privacy rights.

Comparison with Global Standards: Global references where steps had been taken to regulate data sharing and protect privacy rights, suggesting that India should follow suit.
Fundamental Right to Privacy: Privacy is a fundamental right under Article 21 of the Indian Constitution and that the new privacy policy of WhatsApp violated this right. [This is confirmed by a 9-judge Supreme Court bench in the Puttaswamy judgement.]

Request for Regulatory Framework: Need for a response to the problem of online protection, asking the state to assist in the protection of private data.

These arguments aimed to highlight the implications of WhatsApp's policy on user privacy and the need for a legal framework to safeguard digital privacy rights in India

Perseverance and the Legal Denouement

Sareen's unyielding legal pursuit, epitomized by the Supreme Court's orders, was instrumental in the genesis of the Digital Personal Data Protection Act 2023.

Legacy and Impact: A Testament to Tenacity

Sareen, akin to global digital privacy doyens like Schrems and Denham, stands as a testament to the power of tenacious advocacy in sculpting the contours of digital privacy laws.

Current Status of the Case: The Unfolding Chapter

The current status of Karmanya Singh Sareen's case against WhatsApp and its reverberations in the judicial corridors remain a subject of keen observation. The Supreme Court case has led to significant legislative developments and is still pending final adjudication.

Epilogue: The Herald of Digital Privacy

Karmanya Singh Sareen's odyssey underscores his indelible mark on India's digital privacy renaissance. His journey is a compelling narrative of how relentless legal pursuit and sophisticated advocacy can forge monumental changes in law, fortifying the bastions of digital rights in an interconnected world.