[Answered] Critically analyze the WhatsApp and DPDP Act litigation as a ‘stress test’ for Indian constitutionalism. Evaluate the judiciary’s role in protecting digital privacy against the dual challenges of state surveillance and corporate dominance.

Introduction

With India’s digital economy nearing $1 trillion as noted in the Economic Survey 2025–26 and with Budget 2026-27 data centre tax holidays till 2047, the WhatsApp–DPDP litigation tests constitutional privacy protections in a data-driven republic.

Puttaswamy Legacy and the Digital Stress Test

1. The 2017 K.S. Puttaswamy judgment constitutionalised privacy under Article 21, mandating the triple test of legality, necessity and proportionality.
2. In 2026, the WhatsApp appeals and DPDP challenges (referred to a five-judge bench) apply this doctrine to metadata exploitation and state exemptions in an AI-driven economy.

Corporate Dominance and WhatsApp’s Coercive Consent

1. WhatsApp’s 2021 policy update forced 500+ million Indian users into metadata sharing with Meta via a take-it-or-leave-it clause. a
2. Despite end-to-end encryption, metadata maps social graphs, devices and locations more revealingly than content. Consent under market dominance may become economic compulsion, not autonomy.
3. The CCI’s ₹213 crore penalty and Supreme Court’s February 2026 observations, You can’t play with the right of privacy… Follow India’s Constitution or leave, expose how monopoly power renders consent illusory, unlike stronger GDPR protections in Europe. For Example- The CCI termed WhatsApp India’s digital town square.

State Surveillance Risks and DPDP Act Exemptions

1. Sections 7 and 36 of the DPDP Act 2023 grant sweeping exemptions to government agencies on vague grounds. For Example- exemptions in the interest of sovereignty and public order
2. The executive-appointed Data Protection Board lacks independence, while amendments affecting the Right to Information Act, 2005 weaken the public interest override potentially chilling investigative journalism. These provisions risk legitimising mass surveillance without adequate checks, turning citizens into data subjects.

Judiciary as Constitutional Gatekeeper

1. The Supreme Court is rigorously applying the proportionality test in WhatsApp hearings (demanding undertakings by March 2026) while refusing interim stay on DPDP.
2. This demonstrates its evolving role as the final arbiter balancing individual autonomy against corporate surveillance capitalism and state overreach.

Economic and Democratic Implications

1. Economically, robust privacy is essential for trust in India’s fast-expanding digital sector. For Example- NITI Aayog DPI reports.
2. Weak protections risk FDI flight and innovation chill. Democratically, the outcome will decide whether constitutionalism evolves to protect the digital self with the same vigour as the physical self.

Way Forward

1. Establish an independent Data Protection Authority with judicial members in appointments.
2. Mandate granular, revocable consent and prohibit take-it-or-leave-it policies for significant data fiduciaries.
3. Impose narrow, time-bound national security exemptions with mandatory judicial review.
4. Introduce data portability, localisation for sensitive data and annual privacy impact assessments. Align DPDP with Puttaswamy via amendments restoring RTI safeguards and competition-privacy convergence.
5. Global Context such as EU: GDPR model (rights-centric), US: Market-driven regulation and China: State-centric control. India’s constitutional choice will define its geopolitical digital alignment.

Conclusion

If the Court favors state and corporate interests over individual autonomy, it risks transforming the citizen into a subject of data. A robust ruling is required to ensure that Constitutionalism evolves to protect the Digital Self with the same vigor as the Physical Self.