The Hon’ble Supreme
Court of India in the case of K.S. Puttaswamy v. Union of
India (supra) held that purpose limitation is integral for
executive projects involving data collection – unless prior
permission is provided, third parties cannot be provided access
to personal data.See Para 166 of K.S. Puttaswamy Judgment
This principle is embodied in S.5 of the yet to-
be-implemented Personal Data Protection Bill, 2019.
Purpose Limitation enhances transparency in data processing
and helps examine the proportionality of the mechanism used
to collect data for a specific purpose. Moreover, it prevents the
emergence of permanent data ‘architectures’ based on
interlinking databases without consent. In the present case
the proposition of purpose limitation is not applicable as the
question of seeking consent does not arise at all. No person
much less a woman would want to create and display gray
shades of her character. In most of the cases, like the present
one, the women are the victims. It is their right to enforce the
right to be forgotten as a right in rem. Capturing the images
and videos with consent of the woman cannot justify the
misuse of such content once the relation between the victim
and accused gets strained as it happened in the present case.
If the right to be forgotten is not recognized in matters like the
present one, any accused will surreptitiously outrage the
modesty of the woman and misuse the same in the cyber
space unhindered. Undoubtedly, such an act will be contrary
to the larger interest of the protection of the woman against
exploitation and blackmailing, as has happened in the present
case. The sloganeering of “betibachao” and women safety
concerns will be trampled.
14. Section 27 of the draft Personal Data Protection Bill, 2018
contains the right to be forgotten. Under Section 27, a data
principal (an individual) has the right to prevent continuing
disclosure of personal data by a data fiduciary. The aforesaid
provision which falls under Chapter VI (Data Principal Rights)
of the Bill, distinctly carves out the "right to be forgotten" in no
uncertain terms. In terms of this provision, every data
principal shall have the right to restrict or prevent continuing
disclosure of personal data (relating to such data principal) by
any data fiduciary if such disclosure meets any one of the
following three conditions, namely if the disclosure of personal
data:
(i) has served the purpose for which it was made or is no
longer necessary; or (ii) was made on the basis of the data
principal's consent and such consent has since been
withdrawn; or (iii) was made contrary to the provisions of the
bill or any other law in force.
In addition to this, Section 10 of the Bill provides that a
data fiduciary shall retain personal data only as long as may
be reasonably necessary to satisfy the purpose for which it is
processed. Further, it imposes an obligation on every data
fiduciary to undertake periodic reviews in order to determine
whether it is necessary to retain the personal data in its
possession. If it is not necessary for personal data to be
retained by a data fiduciary, then such personal data must be
deleted in a manner as may be specified.
15. In the instant case, prima facie, it appears that the
petitioner has not only committed forcible sexual intercourse
with the victim girl, but has also deviously recorded the
intimate sojourn and uploaded the same on a fake Facebook
account. Statement recorded under Section 161 of Cr. P.C. of
the victim girl is also clearly in sync with FIR version.
Considering the heinousness of the crime, the petitioner does
not deserve any consideration for bail at this stage. However,
this Court is of the view that Indian Criminal Justice system is
more of a sentence oriented system with little emphasis on
the disgorgement of victim’s loss and suffering, although the
impact of crime on the victim may vary significantly for
person(s) and case(s)-- for some the impact of crime is short
and intense, for others the impact is long-lasting. Regardless,
many victims find the criminal justice system complex,
confusing and intimidating. Many do not know where to turn
for help. As in the instant case, the rights of the victim to get
those uploaded photos/videos erased from Facebook server
still remain unaddressed for want of appropriate legislation.
However, allowing such objectionable photos and videos to
remain on a social media platform, without the consent of a
woman, is a direct affront on a woman’s modesty and, more
importantly, her right to privacy. In such cases, either the
victim herself or the prosecution may, if so advised, seek
appropriate orders to protect the victim’s fundamental right to
privacy, by seeking appropriate orders to have such offensive
posts erased from the public platform, irrespective of the
ongoing criminal process.