Women’s digital privacy in India: consent, data and safer accounts
Understand personal-data consent, safer account settings, intimate-image risks, children’s privacy and practical complaint options without treating privacy as a luxury.
In this guide
Digital data is part of personal safety
A phone can hold identity documents, health information, intimate images, location, work, money and relationships. Control over that data can affect whether a woman can move, seek care, leave violence or keep a job.
Name the data that reveals a life
Contacts, call history, location, photos, biometrics, school or health records, bank details and messages can expose a woman even when she never posts publicly.
Consent is not a family entitlement
A partner or relative does not automatically get a woman’s passwords, live location, intimate images, medical records or messages because they share a home or pay for a device.
Check who can access a shared device
Review screen lock, browser sessions, cloud backups, notification previews, location sharing and recovery email from a safer device when possible.
Privacy and safety may conflict
Changing a password or deleting a shared account can alert a controlling person. Make a plan with a trained supporter before changing access if retaliation is possible.
Keep a low-risk contact route
Choose a safe number, email, code word or staffed place for urgent support. Call 112 for imminent violence, confinement or serious injury.
Consent and the Digital Personal Data Protection Act
The Digital Personal Data Protection Act, 2023 describes notice, clear consent, purpose-limited processing and withdrawal rights. The Act’s commencement and rules may be phased or updated, so check the current position before relying on a particular remedy.
Look for a clear notice
A service should explain what personal data it wants, why it needs it and how to contact the responsible person. Ask for the notice in a language or format you can use.
Consent should be specific and informed
The Act describes consent as free, specific, informed, unconditional and unambiguous, limited to data necessary for the stated purpose. Bundled permission can be questioned.
Ask how to withdraw consent
Where consent is the basis, the Act describes withdrawal with ease comparable to giving consent. Withdrawal may affect the service, and other lawful processing may still apply.
Do not confuse a notice with protection
A privacy policy does not make stalking, image-based abuse, doxxing or coercive monitoring acceptable. Use the relevant safety, police or cybercrime route as well.
Keep a copy of the request
Save the notice, consent screen, account ID, data-access request, response and date. Do not upload more sensitive material than the official process requires.
Safer accounts and devices
Small settings changes can reduce exposure, but a monitored device may make sudden changes risky. Choose the least visible safe step first.
Use a unique passphrase and multi-factor sign-in
Where safe, create a passphrase that another person cannot guess and turn on an authenticator or security key. Store recovery codes privately.
Review sessions and connected apps
Sign out unknown browsers, remove unnecessary app permissions and check whether a family member or workplace account receives copies of messages or photos.
Limit location and contact access
Give an app only the access it needs. Turn off live location and contact syncing where safe, and check whether a change will alert a controlling person.
Back up essential records carefully
Keep identity, complaint, health and financial records in a secure place the woman can reach. An unprotected shared cloud folder can increase risk.
Do not share OTPs or recovery codes
Banks, government services and legitimate support staff do not need a private OTP sent to another person. If an account is compromised, contact the service from a safe channel.
| Account or device | Who can see or change it? | Safest next setting or support |
|---|---|---|
| Phone, SIM and email | ||
| Banking or payment app | ||
| Photos, cloud and location | ||
| Health, school or work portal |
Intimate images, harassment and evidence
Image-based abuse, threats, impersonation and doxxing can be used to punish a woman for leaving, refusing sex, speaking publicly or seeking work. Preserve evidence without spreading it further.
Do not forward an intimate image
Forwarding or reposting can multiply harm and may create legal risk. Keep the original link, account name, date and message only as safely as necessary.
Record the threat, not a public story
Screenshots, URLs, transaction IDs, call logs and witness names can help a complaint. Avoid tagging friends, publishing the woman’s address or asking strangers to investigate.
Use the official cybercrime route
The National Cyber Crime Reporting Portal can be a reporting route for cyber offences. Ask a legal-aid worker or trained support person what category and evidence are appropriate.
Consider police and urgent safety together
Threats, extortion, stalking or physical access may require a police or emergency response as well as a platform report. Call 112 for imminent danger.
Protect children’s material
Do not download, circulate or bargain with a child’s sexual image. Use child-protection and cybercrime routes and seek trained advice.
What institutions should do
Schools, employers, hospitals, banks, platforms and government offices hold sensitive data. Their process should reduce collection, explain access and respond to misuse without making a woman relive harm publicly.
Collect only what the service needs
An app or office should not demand contacts, photos, location or family details unrelated to the service. Ask why a field is required and what happens if it is left blank.
Make the privacy contact visible
Provide a named data or grievance contact, a usable notice and an accessible way to request correction, deletion or explanation where the current law provides it.
Restrict internal access
Health, complaint, disability, caste, pregnancy and financial records should be available only to authorised people for a legitimate purpose. Keep access logs where appropriate.
Respond to a breach without blame
Tell the affected person what happened, what was contained, what support exists and how to prevent recurrence. Do not demand that she publicly prove the breach.
Build privacy into safety planning
A shelter, hospital, police station or workplace should ask whether contact, address, identity or case details may be shared and record the woman’s safe preference.
Questions people ask
Can my partner demand my phone password?
Sharing a home or relationship does not make a woman’s account or messages another person’s property. Plan safely before changing access if monitoring or retaliation is possible.
Can I withdraw consent to data processing?
The Digital Personal Data Protection Act describes withdrawal where consent is the basis, with comparable ease to giving it. Commencement, rules and other lawful grounds should be checked for the service.
What if someone posts my intimate image?
Do not forward it. Preserve the minimum safe evidence, report through the official cybercrime route and consider police or legal-aid support. Call 112 for immediate danger.
Should I delete threatening messages?
If safe, preserve screenshots, URLs, dates and account details before blocking or reporting. Do not remain in danger to collect evidence; safety comes first.
What can a supporter say?
‘Your data is part of your safety. We can choose the least visible account step, keep evidence private and use the service, cybercrime or legal route that fits your situation.’
Related practical guides
Related issue guides
Sources and publication record
Draft prepared 16 September 2026; project-team editorial review pending · Sources checked .
- Digital Personal Data Protection Act, 2023India Code, Legislative Department
- Justice K.S. Puttaswamy (Retd.) v. Union of India, Supreme Court judgment (24 August 2017)Supreme Court of India
- Information Technology Act, 2000India Code, Legislative Department
- National Cyber Crime Reporting PortalIndian Cybercrime Coordination Centre, Ministry of Home Affairs
- The Constitution of India (official 2024 edition)Legislative Department, Ministry of Law and Justice
- Bharatiya Nyaya Sanhita, 2023India Code, Legislative Department
- Protection of Children from Sexual Offences Act, 2012India Code, Legislative Department
- Legal Services Authorities Act, 1987India Code, Legislative Department
- Free legal services and National Legal Aid Helpline 15100National Legal Services Authority
- Women Helpline 181Ministry of Women and Child Development
- Emergency Response Support System 112Ministry of Home Affairs