A recent Karnataka High Court judgment has dramatically expanded law enforcement powers to search digital devices, allowing police to compel citizens to provide passwords and access cloud services—raising alarm among civil liberties advocates who say India's privacy protections are being systematically weakened.The ruling in Virendra Khanna v State of Karnataka equates searching a smartphone to seizing a physical document, such as a printed letter. But the judgment goes further, explicitly stating that access to a device includes access to cloud services connected to it, meaning investigators can examine data far beyond what's physically stored on the phone.In India, as across the subcontinent, scale and diversity make simple narratives impossible—and fascinating. The country recognized the right to privacy in 2017—not through legislation but via a Supreme Court judgment—yet that same decision legitimized the Aadhaar biometric identification system, which has since been plagued by data leaks and security breaches.The Karnataka High Court's decision represents another step in what civil liberties experts describe as the systematic erosion of privacy safeguards. If a citizen refuses to provide their password, the court ruled, investigating officers can obtain a magistrate's order compelling disclosure. Continued refusal allows courts to draw "adverse inference" against the accused.This provision effectively renders meaningless Article 20 of India's Constitution, which protects citizens against self-incrimination. Legal scholars argue that forcing someone to provide a password that could reveal incriminating evidence violates this fundamental protection.Perhaps most troubling is the absence of independent oversight. The duty to protect sensitive data pulled from devices falls entirely on investigating officers, with no independent data protection board, no mandatory audit of what data was accessed, and no mechanism to verify proper handling.The irony is stark: Indian law considers statements given to police officers so unreliable that they're inadmissible as evidence unless repeated before a magistrate—yet the same police officers are now trusted with unfettered access to citizens' most intimate digital information.The ruling comes alongside the recently enacted Digital Personal Data Protection Act (DPDPA), which critics argue uses privacy as a pretext to suppress the Right to Information Act while granting blanket access to government agencies for all forms of data."We recognized privacy rights in principle, then immediately began carving out exceptions that swallow the rule," said a legal expert at the , which has published detailed guidance on search and seizure of electronic devices. The expansion of digital surveillance powers has accelerated under the current government. Finance Minister recently targeted WhatsApp conversations in parliamentary proceedings, demonstrating the government's willingness to pursue private digital communications—possible only because regulatory frameworks provide minimal protection.The Aadhaar system illustrates the pattern. Presented as secure and tamper-proof, it has suffered numerous , with credentials reportedly obtained by nationals of countries including . Yet rather than strengthening protections, subsequent policies have mandated Aadhaar linkage for more services, expanding the vulnerability surface.India's approach contrasts sharply with the 's General Data Protection Regulation (GDPR), which imposes strict requirements on data collection, storage, and access, with significant penalties for violations. While India has a larger population and different governance challenges, the gap in protection standards is substantial.The Karnataka High Court ruling has particular implications for , who face heightened risk of targeted investigations. With police able to compel password disclosure and access cloud data, the potential for abuse is significant, especially given India's broad sedition and national security laws.Digital rights activists point to concerning patterns: internet shutdowns have become routine tools of state control, with leading the world in such disruptions. Combined with expanded device search powers and weak data protection, citizens face a surveillance apparatus with minimal accountability.The last major mobilization around digital governance occurred when Facebook attempted to introduce Free Basics, a zero-rating service that would have created a two-tier internet. Public outcry and regulatory intervention blocked the initiative, demonstrating that collective action can protect digital rights.Yet that energy has dissipated. Despite the Karnataka High Court ruling's sweeping implications, public response has been muted. Civil liberties organizations attribute this partly to complexity—privacy issues lack the immediate visibility of issues like inflation or employment.Legal challenges to the ruling are expected, potentially reaching the Supreme Court. But experts caution that judicial relief is uncertain, and even favorable rulings may not prevent legislative workarounds or administrative practices that achieve similar surveillance capabilities. wrote one Reddit user in a post highlighting the ruling.