Kerala High Court flags citizen privacy concerns, orders swift Data Protection Board setup

The Kerala High Court has raised serious concerns about the erosion of citizen privacy in the country and issued directions to the Union government to establish a functional Data Protection Board within eight weeks. The court's intervention underscores growing anxiety over data protection mechanisms at a time when digital transactions and personal information collection have become ubiquitous across India.

The Data Protection Board is a statutory body envisioned under the Digital Personal Data Protection Act, 2023, which was passed to provide a comprehensive framework for safeguarding personal data in India. Despite the legislation coming into force, the board has remained dormant, leaving a significant gap in the regulatory architecture meant to protect citizen privacy.

The court's directive carries considerable weight, as it highlights the urgency of implementing data protection safeguards in an increasingly digital economy. The eight-week timeline set by the bench suggests the judiciary's determination to ensure that constitutional protections for privacy are translated into functional institutional mechanisms.

The establishment of the Data Protection Board is seen as critical to addressing complaints related to unauthorized data collection, misuse of personal information, and ensuring compliance by organizations handling citizen data. The court's intervention is expected to accelerate the government's action on constituting the board with qualified members and providing it with necessary administrative support.