Pegasus Spyware Scandal and Right to Privacy Oversight
Source:Indian Express ↗
Why It Matters
The issue underscores the critical tension between state security imperatives and individual civil liberties. It highlights the urgent need for structural reforms, parliamentary oversight of intelligence agencies, and stringent data protection laws to safeguard the Right to Privacy in India.
Summary
The article contrasts the efficacy of law enforcement in handling the Pegasus spyware scandal in India and the United States. While the US saw decisive legal actions—including lawsuits by tech giants like Apple and WhatsApp against the NSO Group—and active law enforcement intervention, India's response has been marked by opacity and delays. The Indian government refused to fully cooperate with a Supreme Court-appointed probe committee, citing "national security" concerns. This divergence highlights structural weaknesses in India's institutional accountability, executive oversight over intelligence agencies, and the enforcement of the fundamental right to privacy, emphasizing the need for robust legal frameworks to counter illegal surveillance.
Key Points
- The Pegasus spyware scandal revealed severe threats to cybersecurity and the fundamental right to privacy through alleged state-sponsored surveillance.
- A stark contrast exists between the robust legal and law enforcement response in the US (including lawsuits by tech giants) and the opaque, sluggish investigation in India.
- In India, the executive cited 'national security' to justify its non-cooperation with the Supreme Court-appointed expert committee probing the surveillance allegations.
- The disparity highlights systemic weaknesses in India concerning institutional accountability, executive oversight of surveillance agencies, and the practical enforcement of civil liberties.
Important Terms
Right to Privacy (Article 21)
A fundamental right under Article 21, protecting individual autonomy against unwarranted state or private intrusion into personal data, choices, and space, as reaffirmed by the Supreme Court in 2017.
UPSC context
GS II: Fundamental Rights. Tests knowledge of civil liberties and the evolving scope of personal liberty in the digital age.
K.S. Puttaswamy Judgment (2017)
The landmark 2017 Supreme Court ruling that declared privacy a fundamental right. It established a three-pronged test—legality, necessity, and proportionality—for any state interference with this right.
UPSC context
GS II: Landmark Judgments. Essential for understanding the constitutional basis for privacy and limits on executive surveillance power.
Pegasus Spyware
A military-grade spyware developed by the Israeli firm NSO Group. It covertly infiltrates smartphones, often using 'zero-click' exploits, providing attackers full access to messages, calls, and real-time surveillance.
UPSC context
GS III: Internal Security. Evaluates understanding of cyber-warfare, state-sponsored surveillance, and threats to digital communication infrastructures.
Justice R.V. Raveendran Committee
A Supreme Court-appointed expert panel (2021) tasked with investigating Pegasus allegations in India. Its report noted the central government's lack of cooperation and recommended enhancing legal protections against surveillance.
UPSC context
GS II: Judiciary/Governance. Important for discussing institutional accountability and judicial oversight of executive actions in security matters.
Information Technology Act, 2000 (Section 69)
India’s primary cyber-law framework. Section 69 specifically empowers the central and state governments to intercept, monitor, or decrypt digital information for reasons like national security and public order.
UPSC context
GS III: Cybersecurity. Tests awareness of the legal provisions governing surveillance and the balance between state security and individual rights.
NSO Group
An Israeli cyber-intelligence firm that developed Pegasus. It claims to sell its technology exclusively to 'vetted governments' for anti-terror purposes, though it faces global scrutiny over human rights abuses.
UPSC context
GS III: Security. Highlights the role of private actors in global espionage and the ethical challenges of dual-use technologies.
Prelims Trap
"Digital surveillance under the IT Act requires prior authorization from a judicial magistrate."
In India, surveillance and interception orders under the IT Act are authorized solely by the executive branch (e.g., Union or State Home Secretary), completely lacking independent judicial oversight.
Static Concepts Connected
What is the three-fold test for restricting the Right to Privacy (Puttaswamy judgment)?
- Legality: The restriction must be backed by a valid, existing law.
- Need & Proportionality: It must serve a legitimate state aim (like national security) and be proportionate to that specific aim.
- Procedural Safeguards: It must be subject to fair, just, and reasonable procedures to prevent executive abuse.
Which primary laws govern electronic communications surveillance by the Indian State?
- Section 5(2) Telegraph Act: Allows interception of messages strictly in times of public emergencies or for public safety.
- Section 69 IT Act: Permits interception/decryption of digital information for sovereignty, integrity, or state security (a much broader threshold than the Telegraph Act).
- Review Committees: Executive-led committees (headed by the Cabinet Secretary) review interception orders, rather than judicial bodies.
Cross-Topic Patterns
Zero-click spyware & Article 21
The evolution of state-sponsored malware from phishing to zero-click exploits forces a constitutional re-evaluation of individual privacy and data protection mandates under Article 21.
Intelligence accountability gap
Unlike the US, where Senate committees oversee intelligence, India's IB and R&AW operate purely via executive orders without statutory backing or direct parliamentary scrutiny.
Expect a 2026 GS-2 Mains question linking Section 69 of the IT Act, the Puttaswamy proportionality test, and executive oversight.
Linked PYQs · 4
Linked PYQs · 4
- 2017MainsGS2
Examine the scope of Fundamental Rights in the light of the latest judgement of the Supreme Court on Right to Privacy.
- 2024MainsGS2
Right to privacy is intrinsic to life and personal liberty and is inherently protected under Article 21 of the constitution. Explain. In this reference discuss the law relating to D.N.A. testing of child in the womb to establish its paternity.
- 2017MainsGS3
Discuss the potential threats of Cyber attack and the security framework to prevent it.
- 2020MainsGS3
Discuss different types of cyber crimes and measures required to be taken to fight the menace.
