Current Affairs Topics Archive
International Relations Economics Polity & Governance Environment & Ecology Science & Technology Internal Security Geography Social Issues Art & Culture Modern History

Rethinking tax searches for the digital age

March 02, 2026 5 min read Polity & Governance Science & Technology GS2 (Governance Fundamental Rights) GS3 (Indian Economy)
On This Page ▼

What Happened

  • India's new Income Tax Act (Income-Tax No.2 Bill, 2025), passed by Parliament on August 12, 2025, came into effect from April 1, 2026, replacing the six-decade-old Income Tax Act of 1961.
  • The new law significantly expands the state's power to conduct tax searches by extending the scope of Section 132 (now Section 247) from physical premises to "virtual digital space" — encompassing emails, social media accounts, cloud storage platforms, online banking accounts, and remote servers.
  • Tax officials are empowered to demand passwords, encryption keys, and to override access controls of any digital device or account if they have "reason to believe" that hidden income or evidence exists — without prior judicial authorisation.
  • The expansion has raised serious constitutional concerns about the right to privacy under Article 21 as affirmed in the 2017 K.S. Puttaswamy judgment, and the proportionality doctrine laid down by the Supreme Court.
  • Civil liberties organisations, including the Internet Freedom Foundation (IFF), have submitted representations to Parliament's Select Committee calling for independent judicial oversight before digital searches are authorised.
  • Revenue enforcement remains legitimate, but legal experts argue the current framework lacks adequate procedural safeguards proportionate to the intrusive nature of digital searches.

Static Topic Bridges

Right to Privacy as a Fundamental Right: The Puttaswamy Judgment

In Justice K.S. Puttaswamy (Retd.) v. Union of India (2017), a nine-judge bench of the Supreme Court unanimously held that the right to privacy is a fundamental right under Article 21 of the Constitution. The court recognised privacy as intrinsic to life, liberty, and human dignity. Critically, the judgment established a three-part test for any state action that infringes privacy: (i) legality — existence of a law authorising the intrusion; (ii) necessity — the action must pursue a legitimate state aim; and (iii) proportionality — a rational and reasonable nexus between the objective and the means adopted. This proportionality framework has since become the primary constitutional lens for evaluating surveillance and enforcement measures.

  • The Puttaswamy judgment overruled the earlier M.P. Sharma (1954) and Kharak Singh (1962) judgments that had denied privacy as a fundamental right.
  • The 9-judge bench produced six concurring opinions, making it one of the most extensively reasoned constitutional judgments in Indian history.
  • Post-Puttaswamy, several laws including the Aadhaar Act and proposed data protection frameworks have been tested against the proportionality standard.

Connection to this news: The new income tax law's digital search powers must now be assessed against the Puttaswamy proportionality framework — critics argue that warrantless access to cloud accounts fails the necessity and proportionality prongs.

Income Tax Search and Seizure: Section 132 and Its Evolution

Section 132 of the Income Tax Act, 1961 was the foundational provision authorising "search and seizure" operations — colloquially known as IT raids. The provision empowered tax authorities to enter premises, inspect documents, and seize undisclosed assets if there was "reason to believe" that taxable income was being concealed. The threshold was deliberately broad to enable effective revenue enforcement, but over decades courts have interpreted it to require more than mere suspicion. The new Act's Section 247 retains this framework but extends it into the digital realm, defining "virtual digital space" to include social media, emails, cloud servers, and digital applications.

  • Section 132 requires authorisation from specified senior tax officials — it does not require a court warrant, unlike police searches under the CrPC.
  • The absence of prior judicial oversight in income tax searches has been a long-standing criticism; the new law does not remedy this gap despite expanding the scope of searches.
  • Section 247(1)(ii)-(iii) of the new Act mandates individuals to disclose passwords and permits officers to "override access control" of devices — a provision critics describe as constitutionally overbroad.
  • The Finance Ministry clarified that Section 247 cannot be used for routine scrutiny or general data mining, but the restriction is not explicitly codified in the statute.

Connection to this news: The evolution from physical to virtual search powers without commensurate procedural safeguards — particularly judicial authorisation — lies at the heart of the debate on rethinking tax enforcement for the digital age.

Digital Personal Data Protection Act, 2023 and the Data Governance Framework

India enacted the Digital Personal Data Protection (DPDP) Act, 2023, establishing a framework for the processing of digital personal data. The Act grants data principals (individuals) rights including the right to access, correct, and erase personal data, and requires data fiduciaries to obtain consent for processing. However, Section 17 of the DPDP Act carves out broad exemptions for state agencies on grounds of national security, public order, and sovereignty — exemptions that critics argue are overly wide and could undermine privacy protections. The coexistence of the DPDP Act and the expansive digital search powers under the new Income Tax Act creates potential structural tension in India's data governance architecture.

  • The DPDP Act applies to processing of digital personal data within India and to processing abroad if it involves offering goods or services to individuals in India.
  • The Data Protection Board — the adjudicatory body under the DPDP Act — is not empowered to review state agency data access in exempt categories.
  • India does not yet have a comprehensive framework requiring prior judicial authorisation for government access to stored digital communications, unlike the US Electronic Communications Privacy Act or the EU's GDPR framework.

Connection to this news: The tax search debate highlights the need for coherent cross-legislation standards for state access to digital data — a gap that persists despite the enactment of the DPDP Act.

Key Facts & Data

  • Income Tax Act, 1961 replaced by Income-Tax Act, 2025 with effect from April 1, 2026.
  • Section 247 of the new Act replaces Section 132 of the 1961 Act; it now covers "virtual digital space" including cloud storage, email servers, and social media accounts.
  • The Puttaswamy judgment (2017) established the three-prong privacy test: legality, necessity, proportionality.
  • Article 21 of the Constitution guarantees the right to life and personal liberty, interpreted to include the right to privacy.
  • India's IT search and seizure regime does not require prior judicial authorisation — this distinguishes it from several democratic jurisdictions where court warrants are mandatory.
  • Internet Freedom Foundation submitted detailed recommendations to Parliament's Select Committee on the Income Tax Bill, 2025, specifically addressing digital search powers.
  • The Digital Personal Data Protection Act, 2023 was notified in August 2023 but its rules were still pending finalisation as of early 2026.