Criminal Procedure Act 2022 privacy concerns
When the Criminal Procedure (Identification) Act, 2022, came into force on April 18, 2022, it marked one of the most significant overhauls of India’s criminal identification laws in a century. The new law replaced the Identification of Prisoners Act, 1920, and dramatically widened both the scope of data that can be collected from individuals and the categories of people who can be subjected to such collection.
Under this Act, law enforcement agencies can now collect fingerprints, photographs, iris and retina scans, biological samples, and even behavioral attributes from individuals. What makes the provision controversial is the inclusion of “biological samples” a term left undefined which could include invasive methods such as drawing blood, collecting DNA or hair samples, and even conducting narco-analysis or brain mapping.
The Act empowers Judicial and Executive Magistrates, police officers not below the rank of Head Constable, and prison officers not below Head Warder to take such measurements for identification and investigation purposes. Failure to comply with these directions, according to Section 186 of the Indian Penal Code (IPC), 1860, is punishable with imprisonment of up to three months or a fine of up to ₹500, or both.
Expanding State Power and Data Retention
The National Crime Records Bureau (NCRB) has been tasked with collecting, storing, and preserving this data at a national level. The Bureau can share this information with any law enforcement agency across the country and retain it for up to 75 years. The law also provides for the destruction of records in cases where individuals are acquitted, discharged, or released without trial but only if they have no prior conviction. However, this safeguard depends on the discretion of the Magistrate or the court.
The broad data-sharing powers granted to NCRB have raised serious concerns about purpose limitation, a key principle in data protection that restricts data usage to its original purpose. The Act’s wording allows the NCRB to share personal data with any law enforcement agency, potentially enabling misuse and unauthorized profiling of individuals who may not even be convicted.
Constitutional and Legal Concerns
Legal experts argue that the Act poses a threat to several fundamental rights, including the right to privacy under Article 21 and the protection against self-incrimination under Article 20(3) of the Constitution. Critics also say that giving sweeping powers to police and prison authorities could lead to coercion and discrimination in enforcement.
The Hon’ble Supreme Court of India, in K.S. Puttaswamy v. Union of India (2019), affirmed privacy as a fundamental right but acknowledged it could be limited in cases of compelling public interest. While the new law justifies the collection of data as essential for efficient investigation, many believe it strikes an unfair balance between state security and individual liberty.
In Ritesh Sinha v. State of U.P. (2019), the Supreme Court allowed Magistrates to order collection of voice samples during investigations, using powers under Article 142 until Parliament legislated on the matter. The Criminal Procedure (Identification) Act, 2022, formalizes this power, but in doing so, it raises the specter of surveillance without adequate oversight.
The judgments in Pravinsinh Nrupatsinh Chauhan v. State of Gujarat and CBI v. Abdul Karim Ladsab Telgi have also emphasized the need to balance investigative efficiency with individual rights. However, the new law’s broad language and lack of clear limits have sparked fears of data misuse and erosion of civil liberties.
Privacy vs. Policing: A Constitutional Dilemma
The Act has blurred the line between investigation and intrusion. Even those under preventive detention who have not been convicted can now be compelled to provide their measurements. This inclusion raises fundamental questions about the presumption of innocence and the right to privacy of individuals who have not been proven guilty of any wrongdoing.
The law’s critics argue that while modernizing criminal investigations is necessary, efficiency cannot come at the cost of constitutional freedoms. The power to collect biological data does not just affect the individual but could reveal sensitive genetic or familial information, undermining privacy not only for suspects but for their relatives as well.
India, as a democratic country, must ensure that the fight against crime does not compromise the foundational rights guaranteed by its Constitution. Balancing public safety with privacy will require not only legal reform but also strong oversight, accountability, and transparency mechanisms to prevent abuse of power.
Conclusion
The Criminal Procedure (Identification) Act, 2022, represents a turning point in India’s approach to criminal identification. While it aims to enhance investigative efficiency and improve conviction rates, it also opens the door to potential violations of privacy and misuse of personal data.
In a digital age where data is power, unchecked authority over citizens’ biological and behavioral information could erode public trust in law enforcement. Protecting privacy and ensuring justice are not mutually exclusive both are essential pillars of a constitutional democracy.
Disclaimer: This content has been produced and published by Local Law Media Network for informational purposes only. It does not constitute legal advice. The views and opinions expressed are independent and do not reflect the position of any legal practice or organization associated with the individuals mentioned.
