Written by Ms. Rishita Dasgupta & Mr. Samik Mukherjee students at School of Law and Justice, Adamas University, Kolkata
In recent times our lives have become digitalized like banking, communication, medical records, social relationships, even thoughts through digital notes, the Income Tax Bill, 2025 gives unprecedented power to tax authorities to invade into an individual’s private sphere. In the disguise of modernization and anti-evasion measures, this bill’s most debatable provisions risk normalizing a state of digital surveillance, where every little personal data is subject to governmental scrutiny. If left unrestricted, these measures may not just curtail our privacy, it could quietly push citizens into a digital prison, where frequent surveillance replaces the constitutional assurance of freedom.
The Income Tax Bill, 2025, which will replace the current Income Tax Act, 1961, from April 1, 2026, is being praised as a step towards simplification of procedures and increase of productivity. However, gently hidden within its legal prose is a shocking expansion of state power, that is the authorization for tax officers to access a taxpayer’s “virtual digital space”. This includes email accounts, cloud storage, mobile devices, social media platforms, investment apps, and several other online apps. Further, officers are not only allowed to request access from individuals, they may even override passwords and encryptions, without any permission from the judiciary. In simple terms, if you’re under investigation, the state can forcefully enter your digital life, extract your private data, and use it against you, all without you even knowing in reality. This isn’t just a tax tool, it’s a surveillance system.
Tax compliance is essential, but the instruments employed to enforce compliance have to withstand the test of constitutionality, especially the right to privacy identified by the Supreme Court in Justice K.S. Puttaswamy v. Union of India (2017) . This historic judgment held privacy to be a fundamental right, safeguarded under Article 21 of the Constitution. It laid down the threefold test: legality, necessity, and proportionality. The necessity test asks is the intrusion absolutely essential for achieving the state’s objective? While preventing tax evasion is a legitimate aim, the government has other less intrusive tools already at its disposal like PAN-Aadhaar linkage, Income Disclosure Schemes, TDS and GST data tracking, AI-based risk flagging systems. Thus, granting unrestricted access to personal cloud storage or encrypted chats isn’t strictly essential. This broad power looks more like convenience for the state than a necessary measure in a democratic society. Proportionality requires that the measure has a rational nexus to the objective, is the least restrictive option, and does not disproportionately harm rights compared to the benefit gained. In this case granting tax officers unfiltered access to all personal data, with no judicial safeguards, is highly disproportionate. The harms like loss of dignity, fear, censorship, and potential misuse, far outweigh the revenue benefits, especially for ordinary taxpayers.
At the heart of the controversy is the phrase “virtual digital space”, a term not clearly defined anywhere in the bill. In legal drafting, clarity and precision are key. Vague terms allow discretionary interpretation by authorities, and in the realm of fundamental rights, this vagueness becomes dangerously elastic. What falls under this space? Is it limited to financial accounts, or does it include health data, romantic messages, or cloud-synced writing apps? The government has left it ambiguous, perhaps intentionally. Such elasticity gives the state a key to every digital lock under the justification of preventing tax fraud. But this trade-off is grossly disproportionate and ripe for legal challenge. This is no longer about tax evasion, it’s about control.
One of the most chilling aspects of the bill is its suggestion to bypass encrypted security measures. With cybersecurity threats running amok in the modern world, encryption, as sensitive information, is what keeps citizens safe from hackers, identity thieves, and abuse of surveillance. By weakening encryption, the government is not only violating our personal space but disassembling the entire digital security framework. It violates EU GDPR, DPDP 2023, and IT Rules 2011 by not taking informed consent before accessing their data. It also constitutes a red flag under our Constitution. Article 20(3) of the Constitution also guarantees protection from self-incrimination. When a citizen is compelled to open their digital devices or give passwords, isn’t that a flagrant violation? This coercive tool essentially forces the taxpayer to help build a case against himself. In democracies, aggressive state action is counterbalanced by judicial supervision. Wiretapping, search and seizure, or invasion of private correspondence usually require advance court sanction. But under the new law, tax officials are able to gain cyber access with no such scrutiny. The mechanism is all executive and eliminates the judiciary from the chain. This absence of checks is not merely a defect, it is a risk in the system. It builds an ecosystem where there is much potential for abuse, harassment, and politicization. An official with bad intentions might threaten citizens, expose confidential information, or go after political rivals. History teaches us that unchecked power is often abused, and the state must be designed to prevent, not enable, such risks.
When people know they are under surveillance, they talk differently, think differently, and live differently. This is the chilling effect, where the threat of surveillance chills freedom of expression, association, and dissent. Now consider knowing that a government official may read your private messages, memes, jokes, diary entries, or even photos. This fear can result in self-censorship both online and in thought. The bill, in granting complete access to online platforms, instills fear and compels citizens into a state of mental imprisonment. We might have not witnessed prison bars, but they exist in disguise of digital submission and behavioural compliance.
Privacy activists have drawn similarities between this bill and China’s surveillance ecosystem, where the state monitors digital behaviour of it’s citizens to assign “citizen scores” impacting their mobility, employment, and social standing. While India is far from such apocalypse, the basic frameworks of a surveillance state are introduced, justified by noble-sounding objectives like security of the citizens or revenue generation. Adding to India’s growing interest in facial recognition technology, SIM card registration databases, Aadhaar-linked services, and centralised digital ID tracking, the new Income Tax Bill fits amply into a wide surveillance tapestry. This isn’t just a reform in the field of taxation, it is a reform in an infrastructural surveillance with long-term impact on democracy of the country. Legal experts and digital rights activists have not remained quiet and made their submissions. The Internet Freedom Foundation (IFF), has called the bill an open invitation to abuse of one’s privacy. Constitutional law scholars argue that the bill does not pass the Puttaswamy test, especially on proportionality and procedural safeguards. Media editorials have questioned the necessity of such fierce measures, especially when tax evasion can be traced using audit trails, banking compliance, and AI-based detection tools. Giving government unrestricted access to digital footprints makes the system prone to injustice and arbitrariness, which often affects the most susceptible. Beyond legal theory lies the reality of being monitored. Constant digital oversight impacts mental health, leading to anxiety, hyper-vigilance, and emotional distress. People stop exploring alternative opinions online, avoid conversations, and stops trusting their own devices. As Michael Foucault’s Panopticon illustrates, the mere possibility of being watched forces people to self-regulate, turning surveillance into a silent control. The New Income Tax Bill, by digitizing and giving unrestricted access and liberty to it’s officers, builds an unseen railing, where fear shapes behaviour. This is the true definition of a digital prison, where freedom is not taken away violently but eroded slowly, replaced by invisible walls built from compliance, fear, and routine state access to one’s private self. We cease to be citizens with rights and become subjects with duties to be transparent in every byte we transmit. In the age of data-driven economies, privacy is power. By weakening it, the government effectively tips the scales of control. Today it’s the Income Tax Department. Tomorrow, other departments may want similar access for “national security,” “public morality,” or “development.” The slope is slippery and steep. Surveillance rarely retracts, it expands, one policy at a time. Citizens must demand that tax enforcement not come at the cost of civil liberties. Efficiency is welcome, but not at the price of democratic erosion.
The question is not whether the state should investigate tax evasion, it absolutely must. The real question is how it does so. What we need is narrow, well-defined terms like “virtual financial records” instead of “virtual digital space”. A requirement for judicial authorization before accessing private data is absolutely necessary. This will ensure fairness. Canada is a live example of it. Anonymized audits and algorithmic flags should be done for large discrepancies instead of intrusive blanket access. Integration with India’s Digital Personal Data Protection Act, 2023 will ensure transparency, which mandates purpose limitation and informed consent. Lastly mandate IT reports should be published by the department to build public trust and to ensure an added layer of transparency and fairness. This is not an anti-tax stance, it is a pro-democracy position. Tax collection should never be an excuse for constitutional regression.
George Orwell wrote, “If you want a picture of the future, imagine a boot stamping on a human face, forever.” In 2025, that boot may not be literal. It may come in the form of a login override, a surveillance alert, or a silent extraction of your thoughts stored on a cloud. The Income Tax Bill, 2025, is a loud knock on the door of our digital sanctuaries. As citizens, lawyers, journalists, and thinkers, we must ask ourselves, what is the cost of convenience? Is the modern state’s hunger for data going to outpace the constitutional limits designed to restrain it? We are at a fork in the road. One path leads to accountable governance and secure privacy. The other leads to a digital prison, silently built while we’re distracted by the facade of reform. The choice must be ours.