The End of "Password for Bail": Supreme Court Draws a Hard Line on Article 20(3) and Digital Privacy

A Line in the Sand for Digital Privacy in Criminal Law

If you practice criminal defense in India, you are intimately familiar with the modern Investigating Officer’s favourite extortion tactic: holding an accused’s liberty hostage for their smartphone password. For years, trial courts and even High Courts have casually permitted IOs to weaponize the statutory condition of "cooperating with the investigation" under anticipatory and regular bail provisions, conflating cooperation with sheer self-incrimination.

This week, the Supreme Court finally called their bluff. In a massive constitutional law development for 2026, the Apex Court ruled in a matter concerning the NDPS Act and anticipatory bail that the obligation to cooperate with police does not extend to violating the constitutional right against self-incrimination under Article 20(3). Specifically, the State cannot force an accused to hand over their mobile phone or its access credentials as a prerequisite for bail if doing so compels them to be a witness against themselves.

"Cooperation with an investigation is a procedural duty; it cannot be interpreted as a waiver of a fundamental right. The State cannot use the threat of incarceration to bypass the constitutional shield of Article 20(3)."

Why This Changes Your Bail Strategy Tomorrow

For practicing advocates, this ruling is the ammunition we have been waiting for. Under the new Bharatiya Nagarik Suraksha Sanhita (BNSS) and the erstwhile CrPC, the standard condition for pre-arrest bail is that the accused must make themselves available for interrogation. Investigating agencies have grown exceptionally lazy, relying heavily on digital footprints—WhatsApp chats, location history, and emails—rather than traditional detective work. When an accused refuses to unlock their device, the IO routinely files a report claiming "non-cooperation," leading magistrates to deny or cancel bail.

This judgment definitively unlinks "cooperation" from "confession." It builds upon the foundational jurisprudence of Selvi v. State of Karnataka, extending the protection of bodily autonomy to digital autonomy.

What you need to do now: When drafting bail applications or arguing before the Sessions Court, preemptively cite this ruling. If the IO demands the device, get that demand on record. Argue that a refusal to supply potentially incriminating digital evidence is an exercise of a constitutional right, not an obstruction of justice. The burden is on the State to decrypt devices through forensic means, not to coerce passwords out of citizens under the threat of jail.

The Broader Trend: The Court is Forcing the State to Do Its Job

While the Article 20(3) ruling is the most actionable for criminal practitioners, it is part of a fascinating broader trend in the Supreme Court’s 2026 jurisprudence. We are witnessing a forceful expansion of Article 21 (Right to Life), specifically focusing on the State's positive obligations.

Historically, fundamental rights have been viewed as negative injunctions against the State (e.g., "The State shall not deprive..."). But the latest slew of 2026 judgments shows the Court demanding proactive governance:

• The Right to Walk Safely: In a landmark June ruling, the Court read the right to safe footpaths into Article 19(1)(d) and Article 21. For lawyers dealing with municipal corporations and tort claims, this elevates civic negligence from a mere statutory breach to a fundamental rights violation. Unsafe footpaths and encroachments are now constitutional issues, opening the door for widespread writ petitions under Article 226 against municipal apathy.
• Commuter Safety and Systemic Negligence: Following the tragic "Phalodi Accident," the Court took suo motu cognizance to declare commuter safety an integral facet of the right to live with dignity. The State must now answer for infrastructure failures that cost lives.
• No-Fault Vaccine Compensation: The Court directed the Union to formulate a "no-fault" compensation framework for serious adverse events stemming from COVID-19 vaccinations. This is a massive leap in public health law, establishing that while the State can mandate or heavily incentivize public health interventions, it bears absolute liability for the collateral damage.

Connecting the Dots: A Victim-Centric and Citizen-First Jurisprudence

Whether it is protecting survivors of human trafficking (in Prajwala v. Union of India, where rehabilitation was declared a constitutional guarantee, not just a policy) or recognizing the Right to Be Forgotten as an enforceable facet of privacy, the Supreme Court is sending a clear message to the Executive: Complacency is unconstitutional.

For law students and practitioners, the takeaway is clear. The era of defending the State's inaction by citing "policy decisions" or "lack of resources" is waning. When arguing writ petitions, lawyers must pivot from merely pointing out statutory violations to framing infrastructural and procedural failures as direct violations of positive constitutional duties.

But above all, take that Article 20(3) judgment to court tomorrow. The next time an IO tells the magistrate your client isn't cooperating because they won't hand over their iPhone, remind the court that digital privacy is no longer a luxury—it is a fundamental right that survives the filing of an FIR.