Right to Privacy: Supreme Court Says Medical Data Can’t Be Shared Without Consent
In 2025, a woman in Bengaluru discovered her mental health report had been emailed to her employer by a private hospital—without her permission.
She sued—and her case triggered a judgment that reaffirmed a fundamental right many still overlook: Privacy.
The Background
Since the 2017 Puttaswamy judgment, privacy has been a fundamental right under Article 21. But it needed fresh reinforcement in light of growing concerns around data sharing, especially in healthcare.
The Supreme Court took this case and gave it a resounding verdict.
The Court’s Key Findings
- Medical data is sensitive personal information
- No entity (private or public) can share it without explicit written consent
- Even when required for official purposes, minimum disclosure principles must apply
“Right to privacy does not end at the hospital door,” said the bench.
Why This Matters
- Establishes digital health privacy boundaries
- Gives individuals legal grounds to challenge unauthorized data sharing
- Paves the way for India’s Personal Data Protection Bill, expected soon
The ruling was not just about one woman’s records. It was about every Indian’s right to say: “My body, my data.”

0 comments