Justice K.S. Puttaswamy (Retd.) v. Union of India (Aadhaar), (2019) 1 SCC 1, a 5-judge Constitution Bench decision of the Supreme Court of India (26 September 2018, writ petitions dismissed with Section 57 read down), remains the governing authority on state-mandated digital identity and data-collection statutes. The ratio — any state law that collects personal data must satisfy a four-part proportionality test — transfers today to every challenge brought under the Digital Personal Data Protection Act, 2023 (DPDP Act) and CERT-In Directions. Counsel drafting writ petitions in privacy, surveillance, or authentication matters should plead Puttaswamy-Aadhaar alongside Puttaswamy I and Anuradha Bhasin.
Key Takeaways for Counsel
- Plead the four-prong proportionality test when challenging any state data-collection statute, notification, or Aadhaar-linked KYC framework.
- Section 57 of the Aadhaar Act is dead — any private-sector authentication demand without sector-specific statutory backing is unconstitutional per se.
- Preserve the Money Bill objection — Rojer Mathew's pending 7-judge reference means the Article 110 ruling is vulnerable.
Case Fact Sheet
| Field | Value |
|---|---|
| Case name | Justice K.S. Puttaswamy (Retd.) v. Union of India (Aadhaar) |
| Citation | (2019) 1 SCC 1 |
| Neutral citation | — |
| Court | Supreme Court of India |
| Bench | 5-judge Constitution Bench |
| CJI-led | Yes |
| Judges | CJI Dipak Misra, Sikri J., Khanwilkar J., Chandrachud J., Bhushan J. |
| Judgment date | 26 September 2018 |
| Disposal | Dismissed (Aadhaar Act upheld 4:1; Section 57 read down) |
| Key statutes | Aadhaar Act 2016 (Sections 7, 57); Article 21; Article 110 |
| Judgment importance | Landmark |
Ratio Decidendi in One Line
Ratio: A state statute mandating collection of personal data is constitutional only if it satisfies the four-part proportionality test (legitimate aim, suitability, necessity, balancing); Section 7 of the Aadhaar Act, 2016 passes this test, but Section 57's permission for private-party authentication without sector-specific law does not.
Statutes Interpreted — and Their Current Form
| Statute in the Judgment | Current Equivalent | Role in the Ratio |
|---|---|---|
| Section 7, Aadhaar Act, 2016 | Section 7, Aadhaar Act (as amended by Amendment Act, 2019) | Upheld — mandatory Aadhaar for Consolidated-Fund subsidies |
| Section 57, Aadhaar Act, 2016 | Repealed / recast by 2019 Amendment into Section 4(4) regime | Read down — private authentication now requires separate law |
| Section 33, Aadhaar Act, 2016 | Section 33 (amended 2019) — higher-authority oversight | Upheld subject to procedural safeguards |
| Section 47, Aadhaar Act, 2016 | Section 47 — amended to permit data-principal complaints | Read down — individual-complaint bar relaxed |
| Article 21, Constitution of India | (Unchanged) | Source of the right to privacy and proportionality doctrine |
| Section 139AA, Income Tax Act, 1961 | Section 139AA (in force) | Upheld — PAN-Aadhaar linkage constitutional |
| Article 110, Constitution of India | (Unchanged; under 7-judge review) | Money Bill certification deferred to Speaker — pending reconsideration |
| Prevention of Money Laundering Rules, 2005 — Rule 9 | Rule 9 (amended post-judgment) | Anchor for bank Aadhaar-KYC post-amendment |
Who decided this case?
Answer: Justice K.S. Puttaswamy v. Union of India (Aadhaar) was decided by a 5-judge Constitution Bench of the Supreme Court of India on 26 September 2018. The ratio is binding on all High Courts and co-ordinate Benches. Sikri J. authored the majority (joined by CJI Misra and Khanwilkar J.); Bhushan J. concurred with separate reasoning; Chandrachud J. dissented in full.
| Role | Judge | Authored |
|---|---|---|
| Presiding (CJI) | Dipak Misra | No |
| Majority (lead) | A.K. Sikri | Yes |
| Majority (joined) | A.M. Khanwilkar | No |
| Concurring | Ashok Bhushan | Yes |
| Dissenting | D.Y. Chandrachud | Yes |
How did the case reach the Supreme Court?
Answer: The challenge arrived through a cluster of writ petitions under Article 32 filed between 2012 and 2018, initially resisting Aadhaar's mandatory roll-out for welfare schemes. After Puttaswamy I (2017, 9-Judge) recognised privacy as a fundamental right, this 5-judge Bench was constituted to test the Aadhaar Act itself on the merits; the appeal lay, strictly, as original-side writ jurisdiction, not appeal.
| Stage | Forum | Outcome | Governing provision |
|---|---|---|---|
| Writ petitions (batch) | SC | Tagged | Article 32 |
| 9-Judge privacy reference | SC Constitution Bench | Privacy fundamental right | Article 21 |
| Merits hearing | 5-Judge Constitution Bench (this case) | Aadhaar Act upheld 4:1 | Article 32 |
What are the facts in brief?
Answer: The Aadhaar Act, 2016 mandated biometric enrolment (fingerprints, iris scans) stored in a centralised UIDAI database and required Aadhaar authentication for accessing welfare subsidies, PAN, bank accounts, and mobile SIMs. Petitioners argued that the compulsion violated privacy, that the Act was improperly passed as a Money Bill, and that the absence of a dedicated data-protection statute was fatal.
The Union defended the scheme as a proportionate means of leakage-free welfare delivery and pointed to in-Act safeguards (encryption, Section 33 oversight). The petitions were consolidated and heard by this 5-judge Bench after Puttaswamy I.
What issues did the court frame?
Answer: The Court framed five principal issues on validity, privacy, and statutory procedure.
- Issue 1: Was the Aadhaar Act validly passed as a Money Bill under Article 110?
- Issue 2: Does Section 7 (mandatory Aadhaar for subsidies) survive Puttaswamy-I proportionality?
- Issue 3: Is Section 57 (private-party authentication) constitutional?
- Issue 4: Are Section 33 (national-security disclosure) and Section 47 (cognisance bar) sustainable?
- Issue 5: Does Section 139AA, Income Tax Act, 1961 (PAN-Aadhaar linkage) violate Articles 14 and 21?
What did the court hold?
Answer: In Puttaswamy-Aadhaar, (2019) 1 SCC 1, the Bench held, by 4:1, that the Aadhaar Act 2016 is constitutionally valid with Section 57 read down. Each holding is a pleadable proposition.
- Holding 1: The Aadhaar Act is a Money Bill — Speaker's certification under Article 110 is amenable only to limited judicial review.
- Holding 2: Section 7 satisfies the four-part proportionality test: legitimate aim (targeted subsidy), suitability, necessity (least-intrusive means), and balancing.
- Holding 3: Section 57 is read down — private entities may not compel Aadhaar authentication without a separate statute.
- Holding 4: Section 33(2) is valid subject to procedural safeguards (higher-level committee); Section 47 is read down to permit individual complaints.
- Holding 5: Section 139AA, Income Tax Act, 1961, is constitutional — affirms Binoy Viswam, (2017) 7 SCC 59.
Why does Puttaswamy-Aadhaar matter today?
Answer: It is the operational manual for privacy litigation under the DPDP Act, 2023. Every notification issued by the Data Protection Board, every Consent Manager framework, every SEBI/RBI Aadhaar-KYC circular, and every CERT-In Direction on data-collection is reviewable against the four-prong proportionality test laid down here. Downstream, Anuradha Bhasin v. Union of India, (2020) 3 SCC 637, applied this framework to internet shutdowns.
Current Statutory Framework (as of 2026-04)
Answer: The Aadhaar regime has evolved through the Aadhaar and Other Laws (Amendment) Act, 2019, and now sits alongside the Digital Personal Data Protection Act, 2023. The proportionality ratio transfers in full to both instruments. Counsel pleading a challenge today must cross-walk the old Sections to the current regime.
Section 57, Aadhaar Act 2016 → Section 4(4), Aadhaar Act (post-2019 Amendment)
Section 57 was effectively repealed and replaced by a regime under Section 4(4) which permits offline verification and sector-specific Aadhaar authentication only where explicitly authorised by Parliament (e.g., PMLA Rule 9 for banks). Counsel should treat any private KYC demand lacking such statutory anchor as vulnerable to writ challenge.
Aadhaar Act data-protection safeguards → DPDP Act, 2023
The DPDP Act, 2023, notified 11 August 2023, is now the primary data-protection statute. Sections 4–12 (lawful processing, notice, consent) and Sections 18–26 (Data Protection Board) supply the data-protection framework whose absence was flagged by the Puttaswamy-Aadhaar majority. UIDAI processing is now additionally subject to DPDP Rules, 2025 (notified phased roll-out).
Article 110 Money Bill finding → pending Rojer Mathew reference
The Article 110 holding is under reconsideration by a 7-judge Bench per Rojer Mathew v. South Indian Bank Ltd., (2020) 6 SCC 1. The Money Bill point should therefore be preserved in pleadings where material.
Practice Implications
For counsel drafting a privacy writ under Article 32 or 226
- Open with the four-prong test. Plead legitimate aim, suitability, necessity, and balancing — exactly as structured by Sikri J. at paras 319–321 of the judgment.
- Anchor the challenge in Article 21 read with Puttaswamy I and cite Puttaswamy-Aadhaar as the operational precedent that applies Puttaswamy-I doctrine to a data statute.
- Add DPDP Act cross-reference. Where the impugned notification post-dates 11 August 2023, cross-plead non-compliance with Sections 4–7 of the DPDP Act, 2023.
For counsel advising a regulated entity (bank, fintech, telecom, e-commerce)
- Audit every Aadhaar touchpoint — any authentication flow relying on Section 57 alone is non-compliant. Map each flow to its underlying statute (PMLA, Telegraph/Telecom Act, SEBI Master Circular).
- Document proportionality — maintain an internal data-protection impact assessment (DPIA) showing the four prongs satisfied, to pre-empt writ challenge and DPDP Board inquiry.
- Use Offline Verification or QR-code Aadhaar wherever possible in place of biometric authentication, aligning with the majority's "least-intrusive-means" prong.
Twin-citation formula
In any privacy or data-mandate challenge, pair Puttaswamy-Aadhaar with one of the following companion authorities:
- Justice K.S. Puttaswamy v. Union of India (Privacy-9J), (2017) 10 SCC 1 — for the foundational recognition of privacy as a fundamental right.
- Anuradha Bhasin v. Union of India, (2020) 3 SCC 637 — for applying the proportionality test to a restrictive state action (internet shutdown).
- Rojer Mathew v. South Indian Bank Ltd., (2020) 6 SCC 1 — when the impugned statute was enacted as a Money Bill.
Downstream applications and interpretations
- Anuradha Bhasin v. Union of India, (2020) 3 SCC 637 — applied the Puttaswamy-Aadhaar four-part test to Section 144 CrPC internet shutdowns.
- Beghar Foundation v. Justice K.S. Puttaswamy (Retd.), (2021) 3 SCC 1 — review petition dismissed; confirms the 2018 ratio in full.
- Rojer Mathew v. South Indian Bank Ltd., (2020) 6 SCC 1 — 5-judge Bench referred the Money Bill holding to a 7-judge Bench.
- Gujarat Mazdoor Sabha v. State of Gujarat, (2020) 10 SCC 459 — applied proportionality in a labour-rights context.
- Internet and Mobile Association of India v. RBI, (2020) 10 SCC 274 — applied proportionality to crypto-banking circular.
Practitioner FAQ
Does the Puttaswamy-Aadhaar ratio apply to challenges under the DPDP Act, 2023?
Yes. The four-part proportionality test in this judgment is the constitutional yard-stick against which every DPDP-era notification, Consent Manager framework, or cross-border transfer restriction will be measured. Counsel should plead Puttaswamy-Aadhaar alongside Puttaswamy I, (2017) 10 SCC 1, in any Article 32/226 petition challenging DPDP Rules.
Can a private bank or fintech still demand Aadhaar e-KYC today?
Only under sector-specific statutory backing — e.g., Rule 9 of the Prevention of Money Laundering (Maintenance of Records) Rules, 2005 read with the Aadhaar (Authentication and Offline Verification) Regulations, 2021, as enabled by the 2019 Amendment Act. Pure reliance on Section 57 is unconstitutional post-this judgment.
Is the Money Bill finding still good law?
Partially. A 5-judge Bench in Rojer Mathew v. South Indian Bank Ltd., (2020) 6 SCC 1, referred the Money Bill question to a 7-judge Bench. Until that reference is decided, the majority view in Puttaswamy-Aadhaar remains binding but vulnerable on this narrow point — preserve the objection in pleadings where the impugned statute was certified under Article 110.
How do I plead a privacy challenge to a post-DPDP notification?
Frame the petition under Article 32/226 alleging violation of Article 21 per Puttaswamy I, and apply the Puttaswamy-Aadhaar four-prong test: legitimate aim (Section 7 of the DPDP Act 2023), necessity (least-intrusive-means), and balancing (harms to the data principal versus the state's welfare or security objective). Support with Anuradha Bhasin for proportionality-in-action.
Can Section 33 of the Aadhaar Act be used to justify bulk surveillance?
No. The majority upheld Section 33(2) only subject to a high-level committee mechanism before national-security disclosures, and the 2019 Amendment further tightened it. Any blanket bulk-data access order can be challenged under this reading as failing the necessity and balancing prongs of proportionality.
Does the 2019 Aadhaar amendment override this judgment?
It complements, not overrides, it. The Aadhaar and Other Laws (Amendment) Act, 2019, re-introduced voluntary Aadhaar authentication for banks and telecoms subject to statutory safeguards — precisely the conditions the judgment demanded for Section 57 to be sustained. A Supreme Court reference challenging the 2019 Amendment itself is pending.
Cross-references
- Student summary: Justice K.S. Puttaswamy v. Union of India (Aadhaar) — Summary & Exam Relevance.
- Glossary: proportionality test; Money Bill; Aadhaar; DPDP Act 2023.
- Related practitioner articles: Puttaswamy I — Practitioner Guide; Anuradha Bhasin — Practitioner Guide.
Source
This analysis is produced from the Veritect AI Legal Database — Veritect's proprietary, authoritatively-verified corpus of Supreme Court of India judgments, curated with our legal-AI pipeline. The underlying decision is Justice K.S. Puttaswamy (Retd.) v. Union of India (Aadhaar), WP(C) 494/2012, decided by the Hon'ble Supreme Court of India on 26 September 2018, reported at (2019) 1 SCC 1. Statutory text cross-referenced from India Code; current statutory position should be verified against egazette.gov.in before advising on a live matter. This analysis is for informational purposes and does not constitute legal advice.