Right to Be Forgotten in India: Balancing Digital Privacy, Free Speech, and the Future of Online Reputation

The internet has transformed how people communicate, learn, shop, and work. Every click, social media update, news report, court record, photograph, or comment contributes to a person's digital identity. While this permanent record offers convenience and transparency, it also raises an important question: should individuals have the ability to erase outdated or harmful personal information from the internet?

As digital footprints continue to expand, governments, courts, technology companies, and privacy advocates across the world are debating the concept known as the right to be forgotten. The principle seeks to give individuals greater control over their personal information by allowing them to request the removal or de-indexing of certain online content under specific circumstances.

In India, the discussion has gained significant momentum due to increasing internet penetration, growing concerns over cyber privacy, and evolving legal standards surrounding data protection. Courts have begun recognizing privacy as a fundamental right, while lawmakers have introduced legislation aimed at protecting personal data. Together, these developments have placed the right to be forgotten in India at the center of conversations surrounding digital rights and responsible data governance.

This article explores the legal framework, judicial developments, practical challenges, benefits, and future of the right to be forgotten in the Indian context.

Understanding the Right to Be Forgotten

The right to be forgotten refers to an individual's ability to request the removal, deletion, correction, or de-indexing of personal information that is no longer relevant, accurate, necessary, or whose continued availability causes disproportionate harm.

It does not imply complete erasure of historical facts or censorship of legitimate public interest information. Instead, it seeks to strike a balance between privacy rights and society's interest in accessing information.

Typically, requests under the right to be forgotten involve situations such as:

The objective is to prevent permanent digital punishment for events that no longer serve any public purpose.

Why Digital Privacy Matters Today

The internet rarely forgets.

Information uploaded years ago can remain searchable indefinitely, affecting employment opportunities, educational admissions, business relationships, and personal reputation. Search engines make archived content instantly accessible, often without context or updates.

A person acquitted of criminal charges may continue facing social stigma because search results prominently display the original accusation while ignoring the final judgment.

Similarly, individuals who were victims of cyber harassment, identity theft, or privacy breaches may find sensitive information circulating online long after the original incident.

As digital records increasingly influence hiring decisions, loan approvals, immigration applications, and social interactions, protecting personal privacy has become more important than ever.

Constitutional Foundation in India

The recognition of privacy as a constitutional right laid the groundwork for discussions surrounding the right to be forgotten in India.

In the landmark case of Justice K.S. Puttaswamy (Retd.) v. Union of India (2017), a nine-judge bench of the Supreme Court unanimously declared that the right to privacy forms an intrinsic part of Article 21 of the Constitution.

The judgment acknowledged informational privacy as an essential aspect of personal liberty.

Although the Court did not formally establish a separate right to be forgotten, it recognized that individuals should have greater control over personal information collected, stored, and processed by others.

This decision fundamentally changed India's privacy landscape and influenced subsequent legislative reforms.

Legislative Recognition Through Data Protection Laws

India has gradually developed a legal framework for personal data protection.

The Digital Personal Data Protection Act, 2023 introduces important rights for individuals regarding their personal data. While the Act does not expressly use the phrase "right to be forgotten," it grants individuals the ability to seek correction, updating, and erasure of personal data under specified conditions.

Data fiduciaries are required to process personal information responsibly and delete data when it is no longer necessary unless retention is legally required.

These provisions reflect the broader philosophy behind the right to be forgotten by promoting accountability in data handling and strengthening individual control over personal information.

Judicial Developments in India

Indian courts have increasingly dealt with petitions involving online privacy and digital reputation.

Several High Courts have considered requests seeking removal of court records, judgments, news reports, or search engine listings.

Karnataka High Court

One of the earliest recognitions came from the Karnataka High Court, where the Court permitted masking of a woman's identity in judicial records to protect her privacy and future prospects.

The judgment acknowledged that unrestricted public access to sensitive personal information could have long-term consequences.

Delhi High Court

The Delhi High Court has heard multiple petitions involving removal of online content, search engine links, and defamatory material.

The Court has repeatedly emphasized balancing privacy rights with freedom of speech and the public's right to information.

Rather than adopting an absolute approach, it has preferred case-by-case analysis.

Kerala High Court

The Kerala High Court has similarly examined requests involving publication of personal information and online accessibility of judicial records, highlighting the growing importance of informational privacy.

These judicial developments indicate that Indian courts are gradually shaping principles governing the right to be forgotten despite the absence of an exclusive statutory framework.

International Perspective

The concept gained worldwide recognition after the Court of Justice of the European Union delivered its famous Google Spain judgment in 2014.

The Court held that individuals could request search engines to remove links containing personal information that was inaccurate, excessive, irrelevant, or no longer necessary.

This decision significantly influenced the European Union's General Data Protection Regulation (GDPR).

Under Article 17 of the GDPR, individuals possess a legally enforceable right to request deletion of personal data in specific situations.

Technology companies operating in Europe must evaluate such requests while balancing competing legal interests.

The European model has inspired policymakers across several jurisdictions, including India.

Situations Where the Right May Apply

The right to be forgotten is generally invoked in situations involving disproportionate harm arising from continued publication of personal information.

Common examples include:

Each request requires careful examination based on facts, legal obligations, and competing public interests.

When Information Should Not Be Removed

The right is not unlimited.

Courts and regulators generally reject requests involving information that continues to serve legitimate public purposes.

Examples include:

Society benefits from preserving accurate public records that contribute to accountability and democratic governance.

Challenges in Implementing the Right

Although the principle appears straightforward, implementation presents several practical difficulties.

Balancing Privacy and Free Speech

Perhaps the greatest challenge lies in balancing individual privacy with freedom of expression guaranteed under Article 19(1)(a).

Removing lawful content too aggressively may undermine journalistic freedom and public accountability.

Defining Public Interest

Determining whether information remains relevant to society is often subjective.

Information concerning politicians, celebrities, corporate executives, and professionals may continue serving legitimate public interest long after publication.

Technology Limitations

Even after removal from one platform, identical information may continue appearing on mirror websites, social media, archived databases, screenshots, or foreign servers.

Complete deletion is often technically impossible.

Cross-Border Jurisdiction

The internet operates globally.

Content hosted outside India may remain accessible despite domestic legal orders, making enforcement particularly complex.

Judicial Workload

Individual petitions requiring detailed factual analysis increase pressure on already burdened courts.

Clear statutory procedures could simplify decision-making and improve consistency.

Responsibilities of Digital Platforms

Technology companies play an increasingly important role in protecting privacy.

Platforms should establish transparent procedures allowing users to submit removal requests.

These mechanisms should include:

Search engines should also distinguish between deleting information entirely and merely de-indexing search results.

Often, de-indexing adequately protects privacy without removing original publications.

Role of Individuals

Digital privacy begins with responsible online behaviour.

Individuals should:

Personal awareness remains one of the strongest safeguards against future privacy disputes.

Impact on Businesses

Businesses handling customer information must pay close attention to evolving privacy expectations.

Organizations should adopt comprehensive data governance policies covering:

Strong compliance frameworks reduce legal risks while improving customer trust.

Companies that prioritize privacy often enjoy stronger brand reputation and greater consumer confidence.

The Road Ahead for India

India's digital economy continues expanding rapidly.

Artificial intelligence, facial recognition, cloud computing, social media, and big data analytics generate unprecedented volumes of personal information every day.

As these technologies become more sophisticated, demands for stronger privacy protections will continue increasing.

Future developments may include:

The evolution of privacy law will likely focus on balancing innovation with constitutional freedoms while ensuring individuals retain meaningful control over their digital identities.

Frequently Asked Questions

Is the Right to Be Forgotten an Absolute Right in India?

No. Indian courts balance privacy against freedom of speech, public interest, transparency, and access to information before granting relief.

Can Search Engines Remove Personal Information?

Search engines may remove or de-index certain search results where legal requirements are satisfied, particularly if continued publication causes disproportionate harm and lacks public relevance.

Does the Digital Personal Data Protection Act Provide This Right?

While the Act does not explicitly mention the phrase, it grants rights relating to correction, updating, and erasure of personal data under prescribed circumstances.

Can Court Judgments Be Removed?

Generally, judicial records remain public. However, courts may permit masking of identities or restrict accessibility in exceptional situations involving privacy concerns, sexual offences, juveniles, or other sensitive matters.

Can Businesses Receive Such Requests?

Yes. Organizations processing personal data may receive requests relating to correction, deletion, or erasure depending on applicable legal obligations and the circumstances of each case.

Conclusion

The internet has changed the meaning of memory. Information that once disappeared with time can now remain searchable forever, affecting individuals long after the original event has lost its significance. This permanent digital record creates new legal and ethical challenges that traditional privacy laws were never designed to address.

The right to be forgotten represents an important step toward restoring individual control over personal information in the digital age. At the same time, it cannot exist in isolation. Privacy must coexist with freedom of expression, transparency, historical accuracy, and the public's right to know.

The ongoing evolution of the right to be forgotten in India reflects this delicate balance. Judicial decisions, constitutional principles, and modern data protection legislation are steadily shaping a framework that recognizes privacy without compromising democratic values. As technology continues to evolve, India will need clear legal standards, effective enforcement mechanisms, and responsible digital governance to ensure that both personal dignity and public interest remain protected in an increasingly connected world.