Adhikar is an independent citizen-awareness initiative — not a Government of India website.
Home Citizen & Digital Digital & Cyber Rights

Digital & Cyber Rights

Your right to privacy is a recognised Fundamental Right, and a growing body of law — the IT Act, the new data protection law, and updated criminal codes — gives you real tools against cyber fraud, data misuse, and online harassment.

Privacy is a Fundamental Right

The Supreme Court's Puttaswamy ruling (2017) unanimously held that privacy is intrinsic to the Right to Life under Article 21.

Right over your personal data (DPDP Act, 2023)

The Digital Personal Data Protection Act gives you the right to know what data a company holds about you, correct it, and request erasure in many cases.

One national portal for reporting cybercrime

The National Cyber Crime Reporting Portal covers everything from financial fraud to harassment, with a fast-track for time-critical financial fraud.

Right to takedown of non-consensual content

Sharing intimate images or deepfakes without consent is a criminal offence, and platforms must act quickly on valid takedown requests.

Real-Life Scenarios

What actually happens, and what to do

Click a scenario to see the law, the exact steps, and who to call.

01

I lost money to online or UPI fraud

The Situation

Every minute matters — reporting speed directly affects whether the money can be recovered.

What The Law Says

Banks and payment systems can sometimes freeze or reverse a fraudulent transfer if reported within a golden window, coordinated through the Citizen Financial Cyber Fraud Reporting system.

What To Do — Step By Step
  1. Call 1930 (national cyber fraud helpline) immediately — don't wait.
  2. File a detailed complaint on cybercrime.gov.in with transaction IDs, screenshots, and account details.
  3. Inform your bank directly too, to flag or freeze the receiving account if possible.
  4. File a police complaint/FIR for the record and any offline follow-up.
Who To Contact
Cyber Fraud Helpline

Call immediately — speed determines recovery chances.

1930
cybercrime.gov.in
02

Someone is harassing me online, or shared my private photos without consent

The Situation

Stalking, doxxing, or non-consensual intimate imagery.

What The Law Says

Covered by BNS provisions (stalking, defamation, insult to modesty), IT Act Sec. 66E (privacy violation) and Sec. 67/67A (obscene/sexually explicit content). Platforms are required under the IT Rules, 2021 to act on valid complaints, including a fast-track for non-consensual intimate imagery.

IT Act Sec. 66EIT Rules, 2021
What To Do — Step By Step
  1. Preserve all evidence — screenshots, URLs, timestamps — before reporting or blocking.
  2. Report directly to the platform (most have a dedicated non-consensual content reporting flow).
  3. File on cybercrime.gov.in, which has a specific fast-track category for this.
  4. File a police complaint at the local Cyber Cell.
03

A company is misusing my data or won't delete it on request

The Situation

Your data rights are now backed by a dedicated law, not just a company's privacy policy.

What The Law Says

The DPDP Act, 2023 gives you the right to access, correct, and request erasure of your personal data held by a company ('Data Fiduciary'), and requires a Grievance Officer to handle such requests within a defined timeframe.

DPDP Act, 2023
What To Do — Step By Step
  1. Send a written request to the company's Grievance Officer/Data Protection Officer, listed in their privacy policy.
  2. If unresolved, escalate to the Data Protection Board of India for your case category — check current rollout status, as implementation has been phased.
  3. For financial data, RBI/SEBI-regulated entities also have their own sector-specific grievance routes.
04

I want to report a scam website/app, or a lost/stolen phone

The Situation

Prevention and device recovery both have dedicated national tools.

What To Do — Step By Step
  1. Report suspicious apps, websites, or numbers on cybercrime.gov.in or the Chakshu facility on the Sanchar Saathi platform.
  2. For a lost or stolen phone, use the CEIR (Central Equipment Identity Register) portal to block or track your device by IMEI.
Who To Contact
Sanchar Saathi / CEIR

Block a lost phone, report fraud calls/SMS.

sancharsaathi.gov.in
Know The Law

The legal basis, in plain terms

 Key provisions that apply here

Article 21 + Puttaswamy (2017)

Right to privacy recognised as a Fundamental Right.

DPDP Act, 2023

Your rights over personal data held by companies — access, correction, erasure.

IT Act, 2000, Sec. 66E/67/67A

Privacy violation and obscene/sexual content offences.

IT Rules, 2021

Platform obligations for grievance redressal and content takedowns.

Landmark Cases

Court rulings that shaped this right

The precedents behind the plain-language explanations above.

Justice K.S. Puttaswamy v. Union of India (Aadhaar Case)(2019) 1 SCC 1 — Upheld the Aadhaar scheme's core structure while striking down some provisions and requiring proportionality safeguards on how much personal data the State can collect and link. Verify this case
Frequently Asked

Quick answers

Is there really a 'golden window' to recover fraud money?
Yes, in many cases — the sooner you report via 1930/cybercrime.gov.in, the higher the chance banks/payment systems can freeze funds before withdrawal. Report immediately, regardless of the amount involved.
Can I ask a company to delete all my data?
Under the DPDP Act, 2023, you generally can request erasure, though companies may retain data where required by other laws (tax records, KYC rules) — the right isn't absolute in every situation.
Do I need to know the offender's identity to file a cybercrime complaint?
No — you can file even against an unknown person; tracing the identity is the police/cyber cell's job.
What is Chakshu?
A facility on the Sanchar Saathi portal for reporting suspected fraud calls, SMS, and WhatsApp messages to telecom authorities for action against the source.
Can an app legally track my location without asking?
No — under the DPDP Act and existing IT Rules, apps must obtain clear, informed consent before collecting sensitive data like location, and must state the purpose; silently tracking without disclosure violates these norms.
What should I do if my Aadhaar or PAN is being misused?
Report it immediately via cybercrime.gov.in / 1930, and separately raise it with UIDAI (for Aadhaar) or the Income Tax Department (for PAN) — both allow you to flag suspected misuse and, where needed, lock/freeze the identifier.

Still not sure what applies to you?

Describe your situation and we'll help you find the right category, law, and authority to approach.

Ask Adhikar

This page explains general Indian law for information purposes and is not legal advice. Laws, portal names, fees and helpline numbers change — please verify current details on the official government website linked above before taking action, and consult a qualified advocate for advice on your specific case.