Cognitive Surveillance Doctrine Accountability
1. Meaning
Cognitive Surveillance Doctrine Accountability is a legal and constitutional framework for ensuring that the monitoring, collection, analysis, prediction, or inference of a person's thoughts, beliefs, emotions, intentions, mental states, and cognitive behaviour is subject to effective legal safeguards and accountability.
The expression is best understood as a proposed analytical doctrine, rather than the name of an independently established doctrine formally recognized by a court. Its legal foundations can be found in established principles of privacy, personal liberty, dignity, freedom of expression, equality, due process, data protection, and accountability for state action.
Cognitive surveillance may involve:
Monitoring a person's online searches, reading patterns, communications, or browsing behaviour to infer beliefs or intentions.
Using artificial intelligence to predict emotions, personality traits, political preferences, or future behaviour.
Collecting brain-related information through neurotechnology, brain-computer interfaces, or other neurodata-producing systems.
Using biometric, behavioural, or psychological profiles in employment, policing, education, insurance, or public administration.
Monitoring individuals to identify supposed risks based on inferred mental states rather than proven conduct.
The central legal question is:
Who is responsible when a government agency, employer, technology company, or other institution uses cognitive surveillance in a way that violates an individual's rights, produces discriminatory outcomes, or causes unlawful harm?
The answer requires more than simply asking whether the surveillance was authorized. It also requires examining its necessity, proportionality, accuracy, purpose, oversight, transparency, and available remedies.
2. Objectives of the doctrine
Protection of cognitive liberty
Protects an individual's ability to think, form beliefs, change opinions, and make personal choices without unjustified coercion or intrusive monitoring.
Privacy and informational autonomy
Restricts unauthorized collection, inference, storage, disclosure, and reuse of sensitive personal or cognitive information.
Legality and proportionality
Requires surveillance to have a lawful basis, a legitimate objective, appropriate limits, and safeguards against excessive intrusion.
Institutional accountability
Requires organizations and public authorities to document decisions, investigate abuses, provide remedies, and face appropriate legal consequences.
3. Constitutional and legal foundations in India
The doctrine can be developed from several existing legal protections. It does not follow that every form of cognitive analysis is automatically unconstitutional; legality depends on the circumstances, the information involved, the purpose, and the safeguards available.
| Legal provision | Relevance to cognitive surveillance |
|---|---|
| Article 14, Constitution of India | Protects against arbitrary state action and legally impermissible discrimination. |
| Article 19(1)(a) | Protects freedom of speech and expression, including interests affected by intrusive monitoring and chilling effects. |
| Article 19(1)(d) | May be relevant where surveillance interferes with freedom of movement. |
| Article 21 | Protects life and personal liberty, including the constitutional right to privacy. |
| Information Technology Act, 2000 | Provides statutory rules relevant to electronic information, interception, monitoring and data-related offences, depending on the provision and facts. |
| Digital Personal Data Protection Act, 2023 | Establishes a statutory framework for covered digital personal data processing, subject to its provisions, commencement and applicable exemptions. |
| Bharatiya Sakshya Adhiniyam, 2023 | Governs evidentiary questions, including electronic and digital records, where applicable. |
The four principal constitutional tests
1. Legality: Is the surveillance authorized by a valid law, and are its scope and limits sufficiently clear?
2. Legitimate objective: Is it directed towards a legally permissible purpose, such as a properly grounded criminal investigation or national security?
3. Necessity and proportionality: Is the intrusion justified by the objective, and could the same objective be achieved through a less intrusive method?
4. Procedural safeguards and remedies: Is there meaningful oversight, reliable recordkeeping, protection against misuse, and a way to challenge unlawful surveillance?
These principles are particularly important where authorities infer a person's political beliefs, psychological characteristics, intentions, or likely future conduct from digital data. The Supreme Court's privacy jurisprudence recognizes that informational privacy and individual autonomy are constitutionally significant.
Indian Kanoon+1
4. Detailed explanation of accountability
Cognitive surveillance accountability concerns the legal responsibility of everyone involved in collecting, interpreting, using, or acting upon cognitive information.
A. State accountability
Government departments, police agencies, intelligence bodies and other public authorities must act within their lawful powers. The mere assertion of national security does not, by itself, resolve every constitutional objection.
Accountability may require:
A demonstrable legal basis for the surveillance.
Specific authorization and limits on its scope and duration.
Independent or judicial oversight appropriate to the legal regime.
Restrictions on sharing or repurposing collected information.
Investigation of unauthorized access, excessive monitoring or misuse.
Effective judicial remedies where a rights violation is established.
B. Corporate accountability
Private technology companies, employers and other organizations may collect data that is used to infer a person's interests, emotional state or behavioural tendencies.
Their potential responsibilities include lawful processing, appropriate notice, data security, purpose limitation, compliance with applicable data-protection obligations and safeguards against unjustified discriminatory decisions.
For example, an employer that uses an AI system to infer an applicant's emotional stability from facial movements or speech should not treat the output as unquestionable evidence of the applicant's actual mental state. Whether the practice is unlawful depends on the applicable legislation, the use of the information and the surrounding facts.
C. Algorithmic accountability
Where cognitive inferences are generated by AI, accountability should examine both the system and the resulting decision.
Relevant questions include:
What data was collected, and was collection lawful?
Is the inference scientifically supported and sufficiently reliable?
Does the model produce materially different error rates across relevant groups?
Did a human decision-maker meaningfully review the output?
Can the affected individual challenge an adverse decision?
Are the model's outputs retained, shared or reused beyond the original purpose?
A system can be technically accurate at predicting a particular behaviour and still be unlawful if the underlying data was obtained illegally or the decision infringes protected rights.
D. Individual and institutional remedies
Depending on the legal regime and evidence, remedies may include cessation of unlawful surveillance, deletion or correction of data where legally available, compensation where authorized, disciplinary proceedings, regulatory penalties, judicial review, or criminal liability where the elements of an offence are established.
Accountability must be proportionate to the violation. An allegation of surveillance does not automatically establish that every person involved is personally liable.
5. Leading case laws and judicial precedents
The following decisions provide the strongest legal foundations for developing an accountability framework for cognitive surveillance. They address privacy, surveillance, procedural safeguards, proportionality and institutional oversight, although none establishes the entire proposed doctrine under that exact name.
Case 1. Justice K.S. Puttaswamy (Retd.) v. Union of India
Supreme Court of India · (2017) 10 SCC 1 · Decided 24 August 2017
Facts: The Court considered whether privacy is protected as a fundamental right under the Constitution.
Held: A nine-judge Bench unanimously recognized privacy as a constitutionally protected fundamental right, grounded in liberty, dignity and autonomy.
Relevance to cognitive surveillance: The judgment's recognition of informational privacy is particularly significant when institutions collect or analyze information to construct profiles of individuals. Cognitive surveillance that infers beliefs, preferences or mental characteristics may interfere with privacy and autonomy even where no physical intrusion occurs.
Accountability principle: Public authorities must justify constitutionally significant intrusions. The judgment provides the foundational basis for scrutinizing the collection and use of sensitive personal information.
Indian Kanoon+1
Case 2. People's Union for Civil Liberties v. Union of India
Supreme Court of India · (1997) 1 SCC 301
Facts: The petition challenged telephone tapping and the risks of arbitrary interception of private communications.
Held: The Court treated telephone tapping as a serious invasion of privacy and prescribed procedural safeguards governing interception under the then-applicable legal framework.
Relevance: Cognitive surveillance frequently begins with communications data, searches, messages, recordings or behavioural traces. The same accountability concerns arise when such information is intercepted or analyzed to infer a person's beliefs or intentions.
Accountability principle: Surveillance powers require procedural controls capable of preventing arbitrary or indiscriminate use.
Indian Kanoon+1
Case 3. Manohar Lal Sharma v. Union of India
Supreme Court of India · 2021 INSC 682 · Decided 27 October 2021
Facts: The petitions raised allegations concerning the use of Pegasus spyware against individuals in India.
Held: The Court emphasized the constitutional importance of protecting citizens against privacy violations and established an independent technical committee overseen by a former Supreme Court judge to investigate the allegations.
The order did not establish that every alleged target had been infected or that every allegation of government involvement had been proved.
Relevance: Spyware can potentially expose extensive communications and device information. When such information is used to infer a person's associations, opinions or intentions, the risks extend beyond conventional interception.
Accountability principle: Credible allegations of intrusive surveillance may warrant independent investigation, technical expertise and judicial supervision rather than reliance solely on unsupported or general denials.
VoxJuris+1
Case 4. Anuradha Bhasin v. Union of India
Supreme Court of India · (2020) 3 SCC 637
Facts: The case concerned restrictions on internet access in Jammu and Kashmir and their implications for constitutional freedoms.
Held: The Court emphasized proportionality, the need for sufficient justification and the availability of judicial review. It required publication of applicable orders and rejected indefinite suspension of internet services.
Relevance: Monitoring online activity can affect expression, association, access to information and the willingness to explore controversial ideas. A surveillance system may therefore raise constitutional concerns even without directly disclosing the contents of a person's thoughts.
Accountability principle: Restrictions affecting fundamental rights must be justified and appropriately limited in scope and duration.
Indian Kanoon
Case 5. Big Brother Watch and Others v. United Kingdom
European Court of Human Rights, Grand Chamber · 25 May 2021
Facts: The case concerned bulk interception of communications, intelligence sharing and the UK's secret surveillance regime.
Held: The Court identified fundamental deficiencies in aspects of the bulk-interception regime, including shortcomings in independent authorization and safeguards governing the selection of communications for examination.
Relevance: Large-scale cognitive profiling can arise when enormous quantities of communications and metadata are collected and subsequently filtered to identify individuals or infer their characteristics.
Accountability principle: Surveillance safeguards must operate throughout the process, from authorization and collection through selection, examination, retention and sharing.
Bailii+1
This European judgment is persuasive comparative material, not binding precedent on Indian courts in the same way as a Supreme Court of India decision.
6. Comparative case-law principles
| Case | Legal principle | Application to cognitive surveillance |
|---|---|---|
| K.S. Puttaswamy (2017) | Privacy, dignity and autonomy | Protects interests implicated by cognitive profiling. |
| PUCL (1997) | Interception safeguards | Supports regulated monitoring of private communications. |
| Manohar Lal Sharma (2021) | Independent technical investigation | Supports institutional scrutiny of alleged spyware misuse. |
| Anuradha Bhasin (2020) | Proportionality and judicial review | Limits unjustified restrictions affecting constitutional freedoms. |
| Big Brother Watch (2021) | End-to-end safeguards for secret surveillance | Supports oversight across the entire surveillance lifecycle. |
Taken together, these authorities support a strong legal argument that cognitive surveillance must not become an unreviewable mechanism for controlling individuals through information about their behaviour or presumed mental states.
7. Relationship with India's data-protection law
The Digital Personal Data Protection Act, 2023, and the Digital Personal Data Protection Rules, 2025, are relevant to cognitive surveillance where the processing of digital personal data falls within their scope.
The rules were notified in November 2025, but the Act's provisions have a phased commencement schedule. Therefore, the existence of the Act and Rules does not mean every substantive obligation became applicable on the same date.
eGazette+1
Important distinctions include:
Personal data versus cognitive inference: A system may use ordinary digital information to generate an inference about a person's mental state. The legal analysis must consider the underlying data, the inference and the use made of it.
Consent versus constitutional legality: Consent may be relevant under applicable data-protection rules, but consent alone cannot necessarily cure an unconstitutional state intrusion.
Privacy versus accuracy: A cognitive inference can be accurate yet unlawfully obtained; it can also be lawfully obtained yet unreliable or unfairly used.
General data protection versus surveillance-specific controls: Data-protection compliance does not automatically establish that interception or covert surveillance satisfies every applicable statutory and constitutional requirement.
For any actual dispute, the applicable commencement notification, statutory exemptions, relevant interception law and facts must be checked separately.
8. Hypothetical applications
Scenario A: Government political-opinion profiling
An agency secretly analyzes citizens' browsing histories to infer political beliefs and generates risk scores for police attention.
Legal concerns: Articles 14, 19 and 21; informational privacy; possible chilling effects; the legality and proportionality of surveillance; and the adequacy of independent oversight.
Accountability response: Examine the legal authority, purpose, necessity, collection methods, access controls and any adverse action taken using the profiles.
Scenario B: Employer emotion detection
An employer uses webcam analysis to infer employees' attention and emotional stability, then dismisses workers classified as insufficiently engaged.
Legal concerns: Data-protection obligations where applicable, contractual and employment law, possible discrimination and the reliability of the inference.
Accountability response: Investigate the lawful basis for processing, the validity of the model, the role of human decision-making and the availability of a meaningful challenge.
Scenario C: AI-assisted criminal investigation
Police use an AI model to infer that a person is likely to commit a crime based on online behaviour and treat the score as evidence of guilt.
Legal concerns: Arbitrary state action, privacy, procedural fairness and the distinction between prediction and proof.
Accountability response: A risk score should not automatically substitute for admissible evidence or the legally required proof of an offence. The underlying data, methodology and actual evidentiary basis must be scrutinized.
These are illustrative applications of existing legal principles, not summaries of court rulings on these exact facts.
9. A proposed framework for cognitive surveillance accountability
A comprehensive accountability framework could include the following safeguards.
Prior authorization: Require legally appropriate authorization for intrusive surveillance, particularly covert monitoring of sensitive information.
Purpose limitation: Prevent data collected for one lawful purpose from being reused for unrelated psychological or political profiling without an adequate legal basis.
Data minimization: Collect only the information reasonably necessary for the authorized objective.
Independent oversight: Enable courts, regulators or suitably independent supervisory bodies to examine surveillance decisions and practices.
Technical auditability: Preserve appropriate logs of data access, model versions, queries, inferences and consequential decisions.
Human review: Require meaningful review of high-impact decisions based on uncertain cognitive inferences.
Challenge and correction: Provide legally appropriate opportunities to dispute inaccurate profiles and challenge decisions based on them.
Deletion and retention controls: Establish lawful retention periods and secure deletion procedures, subject to legitimate preservation requirements.
Consequences for abuse: Provide for effective remedies, institutional discipline, regulatory action or criminal prosecution where the relevant legal requirements are met.
10. Evidentiary and enforcement challenges
Accountability is particularly difficult when surveillance is secret or when an algorithm's operation is opaque.
Three challenges are especially important.
Proof of surveillance: A person may suspect monitoring without possessing technical evidence. Independent forensic examination, system logs, disclosure procedures and judicially supervised investigations may help establish what occurred.
Causation: Even if unlawful surveillance occurred, a claimant may need to establish the legally relevant connection between the conduct and the harm claimed, subject to the applicable cause of action and evidentiary rules.
Attribution: Responsibility may be distributed among the organization collecting data, the software vendor, the operator, the decision-maker and other recipients. Their respective duties and liabilities depend on the applicable law and their actual conduct.
The constitutional or statutory remedy will therefore depend on the identity of the actor, the type of surveillance, the evidence, the right infringed and the forum hearing the matter.
11. Critical analysis
The strongest justification for a cognitive surveillance accountability doctrine is that technological systems can turn ordinary traces of human activity into sensitive judgments about a person's inner life.
However, the doctrine must avoid treating every form of behavioural analysis as inherently unlawful. Fraud prevention, cybersecurity, medical research and properly authorized criminal investigations may involve legitimate data analysis. The legal problem arises when collection or use is unlawful, disproportionate, discriminatory, unreliable, or insufficiently accountable.
A sound framework should therefore distinguish between:
Observing conduct and claiming to know a person's thoughts.
Predicting behaviour and establishing legal guilt.
Legitimate security monitoring and indiscriminate surveillance.
Voluntary participation and coerced or misleading consent.
Technical capability and lawful authority.
The distinction is especially important because psychological and cognitive inferences can be uncertain even when generated by sophisticated systems.
12. Conclusion
Cognitive Surveillance Doctrine Accountability can be developed as a coherent framework linking privacy, autonomy, constitutional freedoms, procedural safeguards and institutional responsibility.
In India, its principal judicial foundation is K.S. Puttaswamy, supplemented by PUCL, Manohar Lal Sharma and Anuradha Bhasin. Comparative guidance comes from Big Brother Watch and other surveillance jurisprudence.
The central proposition is that no institution should be permitted to use cognitive surveillance as an unchecked power over individual autonomy. Intrusive surveillance must be legally justified, appropriately limited, independently reviewable and open to effective remedies when rights are violated.
The qualification is important: as of November 2026, this is a proposed synthesis of established legal principles, not a formally named, independently recognized doctrine with a single controlling judgment. Any legal pleading or academic paper should cite the actual authorities and identify which propositions are established law and which are proposed extensions to cognitive surveillance.

comments