The Supreme Court of India has directed the Ministry of Electronics and Information Technology (MeitY) to examine a Public Interest Litigation (PIL) that seeks the recovery or destruction of stolen personal data of citizens. The plea highlights the growing menace of 'digital arrests' and extortion linked to data breaches, urging the court to intervene to protect citizens' privacy and security.
PIL seeks court intervention against data breaches
The PIL, filed before the Supreme Court, raises serious concerns about the rampant theft of personal data and its misuse for criminal activities such as digital arrests and extortion. The petitioner has requested the court to issue directions for the recovery or destruction of such stolen data, emphasizing the need for stringent action to safeguard citizens' digital rights.
MeitY to examine the issue
Taking cognizance of the matter, the Supreme Court bench asked MeitY to examine the PIL and submit its response. The ministry has been tasked with reviewing the feasibility of recovering or destroying stolen personal data and suggesting measures to prevent future breaches. The court also noted the importance of the Digital Personal Data Protection Act in addressing such issues.
Rise of digital arrests
The term 'digital arrests' refers to instances where cybercriminals use stolen personal data to impersonate law enforcement officials and extort money from victims. These crimes have become increasingly common, with fraudsters threatening victims with legal action unless they pay a ransom. The PIL argues that the government must take proactive steps to protect citizens from such threats.
Government's response awaited
The Supreme Court has directed MeitY to file a detailed report on the matter within four weeks. The ministry's response will likely outline the steps taken under the Digital Personal Data Protection Act and other relevant laws to address data breaches and cyber extortion. The court has scheduled the next hearing for June 2026.
This development underscores the growing recognition of data privacy as a fundamental right and the need for robust mechanisms to protect citizens' personal information from misuse.
