India’s Supreme Court strikes a blow against the use of spyware
Ruling offers ways to hold governments and companies accountable
The Supreme Court of India has ordered an independent investigation into whether the state used Pegasus spyware to watch its citizens. Photo: GroundUp Staff
A key ruling by the Supreme Court of India on the use of spyware against citizens may pave the way for similar litigation in other places.
Last month, the Supreme Court of India ordered an independent inquiry into whether the state used Pegasus spyware to spy on its citizens. The judgment, handed down in late October, comes after mounting evidence that the surveillance software has been used to target journalists, activists, and politicians in India, and around the world.
The Pegasus ruling offers guidance on how democratic institutions, and the people who rely on them, can hold governments and surveillance companies more accountable.
The judgment adds to the growing jurisprudence on the right to privacy in India (which was only confirmed as a right protected by India’s constitution in a Supreme Court ruling in 2017) and the limits of the state using “national security” as a blanket defence against judicial review.
Internationally, it’s starting to look like a good year for court judgments on surveillance abuses. In February, South Africa’s Constitutional Court struck down sections of the country’s surveillance law in the amaBhungane matter, demanding greater transparency and safeguards for state interception of communications. In May, the Grand Chamber of the European Court of Human Rights declared that the UK’s mass surveillance programmes violate privacy and freedom of expression.
The background
Pegasus is a brand of “weapons-grade” spyware, capable of remotely installing itself on someone’s mobile phone in order to covertly read messages, record calls, and harvest data from the device. Spyware like Pegasus hijacks the very technology that is meant to connect and empower us, and turns it against the user. It’s the very essence of the unchecked surveillance powers that have made digital privacy such a central question for contemporary democracy. The NSO Group, the Israeli firm that developed Pegasus, says it only sells the spyware to governments, for the purposes of combatting terrorism and serious crime. But there is a growing body of evidence that the software is used nefariously by governments to spy on their critics and suppress dissenting voices.
Earlier this year, an international consortium of news organisations revealed that a leaked database of thousands of suspected Pegasus targets included prominent journalists, human rights defenders, and elected officials across the world – including scores of journalists, politicians, activists and legal practitioners in India. This is not the first finding of its kind: a separate investigation by Citizen Lab and Amnesty International concluded that several Indian journalists and political figures were targeted in a Pegasus exploitation of WhatsApp in 2019.
These revelations prompted petitions to India’s Supreme Court from journalists, politicians, and public-interest groups, including several people who have been named as possible targets of the Pegasus software. Broadly, the petitioners wanted an independent inquiry into whether the government had any role in the purchase or use of the spyware against Indian citizens. And broadly, the Supreme Court agreed, with a few features in its ruling that are worth noting.
Infringement of privacy
The ruling expanded on the court’s previous landmark Puttaswamy judgment, which confirmed privacy as a constitutionally protected right in India, and which “recognized that the right to privacy is as sacrosanct as human existence and is inalienable to human dignity and autonomy”.
The court affirmed that privacy “is not the singular concern of journalists or social activists. Every citizen of India ought to be protected against violations of privacy. It is this expectation which enables us to exercise our choices, liberties, and freedom.”
Yet, in considering the facts in this case, the court also noted that threats to privacy can also have a chilling effect – and like South Africa’s Constitutional Court and the Grand Chamber of the European Court of Human Rights, the Indian Supreme Court noted that unchecked surveillance is a particular threat to media freedom:
“It is undeniable that surveillance and the knowledge that one is under the threat of being spied on can affect the way an individual decides to exercise his or her rights. Such a scenario might result in self-censorship. … Such chilling effect on the freedom of speech is an assault on the vital public watchdog role of the press, which may undermine the ability of the press to provide accurate and reliable information.”
“National security” as a defence
The Pegasus judgment also serves to set some limits on the extent to which the state can use “national security” as a blanket defence against scrutiny by its citizens or the courts. The court’s frustration at the state’s reluctance to go on record in the Pegusus matter is clear. Though the state was offered ample opportunities to respond to the petitioners’ allegations, and given repeated reassurances that there would be no need to disclose anything that would comprise national security, the court found the state had offered only “an omnibus and vague denial”, and its submission did not “shed any light on their stand or provide any clarity as to the facts of the matter at hand.”
The court also affirmed that, while there is limited scope for judicial review of national security matters, “this does not mean that the state gets a free pass every time the spectre of ‘national security’ is raised. National security cannot be the bugbear that the judiciary shies away from, by virtue of its mere mentioning.”
The court ordered the establishment of an independent panel, chaired by a former Supreme Court judge, to investigate whether Pegasus software was used to spy on Indian citizens, who was targeted, and whether any Indian government agencies were involved. The panel will also make policy recommendations for law reform on the use of surveillance, the creation of oversight and complaints procedures, and any steps needed to protect the unlawful invasion of citizens’ privacy.
Notably, the court rejected a proposal by the state’s Solicitor General for the government to be allowed to establish such an inquiry, on the basis that government agencies are alleged to be implicated in the matter – and that “justice must not only be done, but also be seen to be done”.
The way forward
Whether this independent panel can get to the bottom of the abuse of spyware in India remains to be seen. But the Supreme Court’s Pegasus judgment is notable in the global context of increasing surveillance abuses. First, it serves to shore up key principles on privacy and democratic oversight of state-security matters in the world’s biggest democracy. Second, the court’s order is aimed at fact-gathering, which has often proved to be a vital step in litigation and campaigning on surveillance issues.
South Africa’s Constitutional Court judgment in the amaBhungane case was only possible because the applicants spent years gathering evidence which indicated that the state had spied on an investigative journalist, using court records, freedom-of-information requests, and the findings of media investigations and civil society research. The ruling in Europe on the UK’s mass surveillance programmes was only possible because of disclosures by the whistleblower Edward Snowden, and torturous efforts to push complaints and investigations through arcane oversight bodies.
In the Pegasus judgment, India’s Supreme Court has found that governments cannot simply be taken at their word on surveillance matters, and that the path of transparency is sometimes the only way to redress.
As other societies grapple with surveillance abuses – and government agencies hoping to avoid any serious scrutiny or reform – it’s a lesson worth noting. It now falls on activists and public interest lawyers to take the Pegasus precedent forward. It’s a battle worth fighting and one that we need to win.
Views expressed are not necessarily those of GroundUp.
Next: Our faulty approach to life sentences is catching up with us
Previous: Thirsty villagers desert ANC for independent candidate
© 2021 GroundUp. This article is licensed under a Creative Commons Attribution-NoDerivatives 4.0 International License.
You may republish this article, so long as you credit the authors and GroundUp, and do not change the text. Please include a link back to the original article.
We put an invisible pixel in the article so that we can count traffic to republishers. All analytics tools are solely on our servers. We do not give our logs to any third party. Logs are deleted after two weeks. We do not use any IP address identifying information except to count regional traffic. We are solely interested in counting hits, not tracking users. If you republish, please do not delete the invisible pixel.