The petitioner challenged the Aarogya Setu app’s 2020 Data Protocol, arguing that sharing users’ health data with government agencies without explicit consent violated privacy rights under Article 21. The High Court ruled the Protocol prima facie unlawful, emphasizing that “informed consent” and “purpose limitation” are essential to informational privacy, as established in KS Puttaswamy. It directed the government to cease implementing the Protocol without prior user consent. The judgment upheld privacy safeguards over public health surveillance. The matter clarified boundaries of data-sharing in digital governance
