Privacy Rights And Biometric Protection
Summary
The issue involves the violation of privacy rights under Article 21 of the Indian Constitution by a company, M/s Zebra Technologies. The petitioner argues that the company failed to inform users about revised terms and conditions and shared sensitive health data without explicit consent, violating the Digital Personal Data Protection Act, 2023. The case references include Justice K.S. Puttaswamy vs Union of India and R. Rajagopal vs State of Tamil Nadu, emphasizing the need for informed consent and data protection. The relief sought includes a declaration of rights violation, deletion of retained biometric data, and a mandate for explicit consent for data sharing.Full Conversation
Sub-issue *: Importance of Biometric DetailsStatutes:
- Digital Personal Data Protection (DPDP) Act, *
Facts:
- M/s Zebra Technologies retained biometric data despite Mr. X's withdrawal of consent.
- Biometric data is highly sensitive and requires stringent protection.
Points:
- Biometric data is unique and irreplaceable, making its protection paramount.
- Unauthorized retention and sharing of biometric data can lead to severe privacy breaches and misuse.
Case Laws:
- Puttaswamy (Aadhaar Case) (*): The Supreme Court underscored the importance of securing biometric data and the need for robust safeguards.
- Selvi vs State of Karnataka (*): Highlighted the sensitive nature of biometric data and the need for consent and protection.
Judgments:
- In the Aadhaar Case, the court ruled that the collection and storage of biometric data must be accompanied by adequate security measures and informed consent.
- Selvi emphasized that biometric data collection must be voluntary and with the individual's consent.
Doctrines:
- Doctrine of Informed Consent: Users must be fully aware and consent to the collection and use of their biometric data.
- Doctrine of Data Minimization: Only the minimum necessary data should be collected and retained.
Relief Sought:
- Declaration: That M/s Zebra Technologies violated Mr. X's right to privacy.
- Order: For the deletion of all retained biometric data.
- Mandate: Explicit consent for any further data sharing.
These points comprehensively address the issues raised by Mr. X regarding the higher responsibility for sensitive data and the importance of biometric details.
Sub-issue *: Importance of Biometric Details- Declaration: That M/s Zebra Technologies violated Mr. X's right to privacy.
- Order: For the deletion of all retained biometric data.
- Mandate: Explicit consent for any further data sharing.
These points comprehensively address the issues raised by Mr. X regarding the higher responsibility for sensitive data and the importance of biometric details.
Statutes:
- Digital Personal Data Protection (DPDP) Act, *
Facts:
- M/s Zebra Technologies retained biometric data despite Mr. X's withdrawal of consent.
- Biometric data is highly sensitive and requires stringent protection.
Points:
- Biometric data is unique and irreplaceable, making its protection paramount.
- Unauthorized retention and sharing of biometric data can lead to severe privacy breaches and misuse.
Case Laws:
- Puttaswamy (Aadhaar Case) (*): The Supreme Court underscored the importance of securing biometric data and the need for robust safeguards.
- Selvi vs State of Karnataka (*): Highlighted the sensitive nature of biometric data and the need for consent and protection.
Judgments:
- In the Aadhaar Case, the court ruled that the collection and storage of biometric data must be accompanied by adequate security measures and informed consent.
- Selvi emphasized that biometric data collection must be voluntary and with the individual's consent.
Doctrines:
- Doctrine of Informed Consent: Users must be fully aware and consent to the collection and use of their biometric data.
- Doctrine of Data Minimization: Only the minimum necessary data should be collected and retained.
---
Relief Sought:
- Declaration: That M/s Zebra Technologies violated Mr. X's right to privacy.
- Order: For the deletion of all retained biometric data.
- Mandate: Explicit consent for any further data sharing.
These points comprehensively address the issues raised by Mr. X regarding the higher responsibility for sensitive data and the importance of biometric details.
- Declaration: That M/s Zebra Technologies violated Mr. X's right to privacy.
- Order: For the deletion of all retained biometric data.
- Mandate: Explicit consent for any further data sharing.
These points comprehensively address the issues raised by Mr. X regarding the higher responsibility for sensitive data and the importance of biometric details.