When the Taxman Can Walk Into Your Inbox? Unpacking the Privacy Paradox of Search and Seizure Under the Income-tax Act, 2025
Summary: The Income-tax Act, 2025 significantly expands the traditional concept of search and seizure by extending investigative powers into “virtual digital space”, including email servers, social media accounts, online investment and trading accounts, banking platforms, cloud servers and digital applications. The article examines how these powers differ from the physical search framework traditionally associated with Section 132 of the Income-tax Act, 1961 and considers their implications for informational privacy. Particular attention is given to Section 247 of the new Act, which enables authorised officers, in specified search circumstances, to gain access to computer systems and virtual digital spaces, including by overriding access controls where access is unavailable. The article tests these powers against the constitutional privacy principles recognised in Justice K.S. Puttaswamy (Retd.) v. Union of India, particularly legality, necessity and proportionality, and considers concerns surrounding the breadth of digital searches, absence of prior independent approval, purpose limitation and retention of unrelated personal information. It also compares the Indian framework with approaches adopted in the United States, United Kingdom, European Union and Australia. Finally, the article proposes safeguards including independent authorisation, narrower digital-search parameters, data minimisation, deletion timelines and mechanisms allowing taxpayers to challenge the scope of digital access.
- Introduction
- What Actually Changed: From Lockers to Login Credentials
- Testing the Power Against the Constitution
- Legality
- Necessity
- Proportionality
- What Other Countries Do Differently
- Why This Should Worry More Than Just Taxpayers
- Scope Creep
- No Purpose Limitation
- Platforms Caught in Between
- Weak Safety Net
- What Better Safeguards Could Look Like
- Prior Independent Approval
- A More Precise Definition
- Automatically Embedded Data Minimization
- A “Deletion” Timeline
- A Mechanism to Contest the Access
- Conclusion
- Statutes, Constitutional Provisions & Cases Cited (Bluebook 21st ed.)
- References & Further Reading
Introduction
Imagine the situation where a tax official, on merely a suspicion of you earning black money, logs into your email account, goes through your WhatsApp backups or even accesses your trading portfolio without seeking a warrant, notice or permission. Sounds too much like fiction? However, the upcoming enactment of Income-tax Act, 2025, with the provision of a “virtual digital space” on 1 April 2026, makes it a legitimate and pertinent concern for one to ponder.
The Income-tax Act, 1961 was the central legislative framework of the country for the past sixty years for all the matters relating to the direct taxes. However, with the advent of digital payment options and online transactions, the government claimed that the provisions of an Act based on the physical documents could not keep pace with the current developments. Hence, the introduction of the new Income-tax Act, 2025 which is relatively short and modern.
What Actually Changed: From Lockers to Login Credentials
“Search and seizure” is a powerful tool at the disposal of the tax department. Under section 132 of the 1961 Act, “if an officer has ‘reason to believe’ that a person has concealed his income, he could enter premises, break into a locker, and seize cash, jewellery or account books.” This method was invasive, but it had physical limitations: houses have walls, lockers have bottoms.
The 2025 Act has removed away much of those limitations. Section 261(j) defines the phrase “virtual digital space” as encompassing any email servers, social media accounts, investment and trading accounts on-line, banking sites, cloud and remote servers, digital application platforms and “any other similar space.” Section 247(1)(b)(iii) then empowers the authorized officer to enter that space while executing the search. If the taxpayer resists giving a password to open that space, then the officer can bypass the access code to enter the space. No prior notice is necessary nor is there the need for a magistrate’s permission as the officer’s belief alone would suffice.
In essence, the Parliament has applied the reasoning behind the steel locker to the entirety of the individual’s digital footprint though not necessarily answering the more complex question of whether an inbox is truly equivalent to a locker.
Testing the Power Against the Constitution
The obvious point of comparison is that of the landmark decision of the Indian Supreme Court in K.S. Puttaswamy (Retd.) v. Union of India, wherein it was opined by a bench of nine judges that the right to privacy is a fundamental aspect of the right to life and liberty guaranteed under Article 21 of the Constitution. Any interference in such right should pass through three tests: legality, necessity and proportionality.
Legality
Legality: The provision is authorised by law, so this criterion is met. However, because the concept of “virtual digital space” is rather broadly defined, allowing almost anything that people do online to be covered by the search term, there is some flexibility in how the term may be applied.
Necessity
Necessity: Concealing sources of income is a valid aim, however, to be a necessity, the state must use the least intrusive way of achieving this aim possible. Allowing an officer access to all digital accounts on the basis of a mere suspicion of concealing income may go beyond what is strictly needed in this respect.
Proportionality
Proportionality: Proportionality is where the biggest problems of the provision lie. The lack of prior judicial approval of the search and absence of proper safeguard from conducting the excessively broad search are clear signs of disproportionality.
In total, the extensive nature of the provision and the lack of protective measures constitute a major constitutional issue. If not restricted in its application and unless independent monitoring of the provision is undertaken, Section 247 may encounter problems on the basis of the privacy doctrine set by the Supreme Court.
What Other Countries Do Differently
When we compare the strategy followed by India to that of other democratic countries, the difference becomes stark. In the United States, the Fourth Amendment mandates that in order for the government to access any private digital communication, it must have a warrant or subpoena. Even the specially crafted “John Doe” summons used in cryptocurrency cases cannot grant an exception.
The UK follows a similar approach. HMRC relies upon advanced data analysis capabilities to detect discrepancies, but surveillance of any kind that involves intrusion into or interception of private communication demands a statutory authorization through the Investigatory Powers Act. The HMRC officials cannot just break into someone’s email account or crack open encryption.
There is a greater stress on necessity and proportionality in the case of the European Union. Access for law enforcement purposes is protected under Directive (EU) 2016/680 along with GDPR and the European Convention on Human Rights. Australia too provides wide-ranging investigation powers to the tax and financial crime investigators, though computer searches still need a court order.
What is important about the comparison is that it proves that efficient tax collection does not necessarily entail unlimited access to one’s private digital life. Other democracies have attempted to find an equilibrium between the power of investigation and control mechanisms that would be autonomous from investigators. The task of India is to avoid trading privacy for hidden income detection.
The pattern is consistent: wherever a government wants to reach into a citizen’s private digital space, some independent body, a judge, a commissioner, a magistrate, stands between the request and the access. India’s 2025 Act is the outlier that skips this step entirely.
Why This Should Worry More Than Just Taxpayers
The basis of such power by the government lies in some success stories. Government officials have cited instances where the chat messages from WhatsApp and Google Maps data had been useful in detecting tax fraud scams worth crores. This is certainly a valid reason for providing tax authorities with more digital powers. However, the scope of such wide power without any independent oversight can lead to other dangers too:
Scope Creep
Scope creep: A definition wide enough to include “any digital domain” would be easy to extend to permit access to much more information than the investigation at hand demands.
No Purpose Limitation
No purpose limitation: Once the officer accesses the account, the law does not prohibit them from accessing or holding personal data irrelevant to the tax investigation.
Platforms Caught in Between
Platforms caught in between: Email, cloud storage and social media platforms will have no choice but to cooperate quickly, especially given potential amendments to intermediary safe harbour regulations which would carry serious penalties for non-cooperation.
Weak Safety Net
Weak safety net: The Digital Personal Data Protection Act, 2023 seems to provide for the protection of personal data; however, the exception provided by Section 17 on government investigations may seriously undermine this protection during tax proceedings.
None of this means that the goal of catching genuine tax evasion hidden behind digital tools is wrong. The problem is the method. Powerful investigative tools need equally strong safeguards, and that is where the 2025 framework leaves important questions unanswered.
What Better Safeguards Could Look Like
A more balanced version of this power is not difficult to imagine. Several jurisdictions discussed above already use similar safeguards. The changes that would matter most are:
Prior Independent Approval
Prior independent approval: Have prior judicial or quasi-judicial approval prior to accessing the digital virtual environment instead of depending on the subjective opinion of the officer concerned alone.
A More Precise Definition
A more precise definition: Remove the purely personal information including pictures of one’s family members, personal conversations and the like except where it is demonstrably related to the case under investigation.
Automatically Embedded Data Minimization
Automatically embedded data minimization: Employ forensic tools that enable the collection of only the information needed while ignoring others.
A “Deletion” Timeline
A “deletion” timeline: Specify an enforced deadline for the removal of unnecessary data along with an audit trail showing that such deletion has been effected.
A Mechanism to Contest the Access
A mechanism to contest the access: Enable taxpayers to object against the scope of the search conducted despite the inability to reveal the grounds justifying the search at the time of such search.
None of these will stop the tax department from investigating cases of tax evasion. It is about imposing limits on the use of the powers by the tax department in such an investigation. It is not about making such investigations less efficient, but about ensuring safeguards robust enough to safeguard the privacy of those not targeted by the investigation.
Conclusion
However, through the Income-tax Act, 2025, a step towards modernisation has been taken. Yet, by expanding search and seizure to “virtual digital space”, this new Act makes an unprecedented amount of information available for investigation to tax authorities. The Supreme Court has provided some clarity on this issue by holding in Vishwaprasad Alva v. Union of India that such exercise of powers is subject to judicial review, while leaving the issues surrounding the safeguards open. Thus, the real issue is not to deny tax authorities the right to investigate in case of tax evasion, but to ensure that their expansion into the digital space is accompanied by appropriate safeguards commensurate with the nature and quantity of information they may have access to. Independent scrutiny prior to use of the powers, purpose limitation, data minimisation, deletion safeguard and avenues of challenge are just some of the safeguards that will help in maintaining this balance.
Statutes, Constitutional Provisions & Cases Cited (Bluebook 21st ed.)
- Income-tax Act, 1961, § 132 (India).
- Income-tax Act, 2025, § 261(j) (India).
- Income-tax Act, 2025, § 247(1)(b)(iii) (India).
- Digital Personal Data Protection Act, 2023, § 17, Act No. 22 of 2023 (India).
- India Const. art. 21.
- Justice K.S. Puttaswamy (Retd.) v. Union of India, (2017) 10 S.C.C. 1 (India).
- Vishwaprasad Alva v. Union of India, W.P. (Civ.) (S.C.) (India).
- U.S. Const. amend. IV.
- Investigatory Powers Act 2016, c. 25 (UK).
- Council Directive 2016/680, 2016 O.J. (L 119) 89 (EU).
- Regulation (EU) 2016/679, 2016 O.J. (L 119) 1 (General Data Protection Regulation).
- European Convention on Human Rights art. 8.
- Proceeds of Crime Act 2002 (Cth) (Austl.).
References & Further Reading
1. Data Privacy and the Income Tax Bill, 2025
Rishab J, Bar & Bench: [https://www.barandbench.com/law-firms/view-point/data-privacy-and-the-income-tax-bill-2025](https://www.barandbench.com/law-firms/view-point/data-privacy-and-the-income-tax-bill-2025)
2. Digital Search and Seizure Under the Income Tax Act, 2025: Privacy in Peril
Arundhati Katju, Bar & Bench: [https://www.barandbench.com/amp/story/columns/digital-search-and-seizure-under-the-income-tax-act-2025-privacy-in-peril](https://www.barandbench.com/amp/story/columns/digital-search-and-seizure-under-the-income-tax-act-2025-privacy-in-peril)
3. From Physical Premises to Virtual Digital Space: Evaluating the Expansion of Search and Seizure Powers under Income-tax Act, 2025
SCC Online Blog: [https://www.scconline.com/blog/post/2026/07/25/income-tax-act-2025-virtual-digital-space-search-seizure-analysis/](https://www.scconline.com/blog/post/2026/07/25/income-tax-act-2025-virtual-digital-space-search-seizure-analysis/)
4. Privacy at Risk? Warrantless Access to ‘Virtual Digital Space’ Under Income Tax Bill 2025
Live Law: [https://www.livelaw.in/lawschool/articles/access-to-virtual-digital-space-income-tax-bill-2025-critical-analysis-298954](https://www.livelaw.in/lawschool/articles/access-to-virtual-digital-space-income-tax-bill-2025-critical-analysis-298954)
5. ‘Virtual Digital Space’ Under the Income-Tax (No. 2) Bill, 2025: Another Onslaught on the Right to Privacy?
Mondaq: [https://www.mondaq.com/india/tax-authorities/1668740/virtual-digital-space-under-the-income-tax-no-2-bill-2025-another-onslaught-on-the-right-to-privacy](https://www.mondaq.com/india/tax-authorities/1668740/virtual-digital-space-under-the-income-tax-no-2-bill-2025-another-onslaught-on-the-right-to-privacy)
6. ‘Virtual Digital Space’ Under the Income-tax (No. 2) Bill, 2025
CMS Induslaw: [https://cms-induslaw.com/en/ind/publication/virtual-digital-space-under-the-income-tax-no.-2-bill-2025-another-onslaught-on-the-right-to-privacy](https://cms-induslaw.com/en/ind/publication/virtual-digital-space-under-the-income-tax-no.-2-bill-2025-another-onslaught-on-the-right-to-privacy)
7. Digital Data Access and Privacy in the Income Tax Bill, 2025
Lexology: [https://www.lexology.com/library/detail.aspx?g=f90d4c2c-67cd-419d-b001-ec4dec10e739](https://www.lexology.com/library/detail.aspx?g=f90d4c2c-67cd-419d-b001-ec4dec10e739)
8. SC to Examine Challenge to I-T Law Allowing Searches of Digital Devices
CAalley: [https://www.caalley.com/news-updates/indian-news/sc-to-examine-challenge-to-i-t-law-allowing-searches-of-digital-devices](https://www.caalley.com/news-updates/indian-news/sc-to-examine-challenge-to-i-t-law-allowing-searches-of-digital-devices)
9. Case Summary: Justice K.S. Puttaswamy (Retd.) v. Union of India, 2017
LawLex.Org: [https://lawlex.org/lex-bulletin/case-summary-k-s-puttaswamy-retd-v-s-union-of-india-2017/18929](https://lawlex.org/lex-bulletin/case-summary-k-s-puttaswamy-retd-v-s-union-of-india-2017/18929)
10. The Digital Trail: What the Draft Income Tax Bill, 2025 Means for Privacy and Search
Saikrishna & Associates: [https://www.saikrishnaassociates.com/the-digital-trail-what-the-draft-income-tax-bill-2025-means-for-privacy-and-search/](https://www.saikrishnaassociates.com/the-digital-trail-what-the-draft-income-tax-bill-2025-means-for-privacy-and-search/)
11. Income Tax Bill 2025: Digital Search Powers and Privacy
Aryan Chauhan, The Law Blog: [https://thelawblog.in/2025/06/02/income-tax-bill-2025-digital-search-powers-and-privacy/](https://thelawblog.in/2025/06/02/income-tax-bill-2025-digital-search-powers-and-privacy/)
12. Income Tax Bill Powers Taxmen to Override Computers, Virtual Digital Space Access Codes in Search, Seizure
PTI / Deccan Herald: [https://www.deccanherald.com/amp/story/business%2Funion-budget%2Fbiz-income-tax-bill-virtual-3404985](https://www.deccanherald.com/amp/story/business%2Funion-budget%2Fbiz-income-tax-bill-virtual-3404985)
13. IFF Writes to the Select Committee to Review the Digital Search and Seizure Powers Under the Income Tax Bill, 2025
Internet Freedom Foundation: [https://internetfreedom.in/iff-writes-to-the-select-committee-to-review-the-digital-search-and-seizure-powers-under-the-income-tax-bill-2025/](https://internetfreedom.in/iff-writes-to-the-select-committee-to-review-the-digital-search-and-seizure-powers-under-the-income-tax-bill-2025/)
14. Digital Privacy Issues under Income Tax Act, 2025: Search Powers Explained
Taxscan: [https://www.taxscan.in/top-stories/digital-privacy-issues-under-income-tax-act-2025-search-powers-explained-1440688](https://www.taxscan.in/top-stories/digital-privacy-issues-under-income-tax-act-2025-search-powers-explained-1440688)
15. Income Tax Bill 2025: A Threat to Digital Privacy?
Chintan, India Foundation: [https://chintan.indiafoundation.in/articles/income-tax-bill-2025-a-threat-to-digital-privacy/](https://chintan.indiafoundation.in/articles/income-tax-bill-2025-a-threat-to-digital-privacy/)
16. Income Tax Bill 2025: Digital Access Clause Stirs Debate
Organiser: [https://organiser.org/2025/07/22/303888/bharat/can-income-tax-officials-demand-your-passwords-heres-what-the-new-2025-bill-proposes/](https://organiser.org/2025/07/22/303888/bharat/can-income-tax-officials-demand-your-passwords-heres-what-the-new-2025-bill-proposes/)
17. Counterview: Privacy Under Attack? The Alarming Digital Search Provisions in Income Tax Bill 2025
Apar Gupta & Medha Garg, The Quint: [https://www.thequint.com/opinion/the-new-income-tax-bill-search-threat-to-privacy-business-autonomy](https://www.thequint.com/opinion/the-new-income-tax-bill-search-threat-to-privacy-business-autonomy)
18. The Expansion of Tax Authorities’ Powers to Access ‘Virtual Digital Spaces’ Under the Income-tax Bill, 2025
PWOnlyIAS: [https://pwonlyias.com/mains-answer-writing/the-expansion-of-tax-authorities-powers-to-access-virtual-digital-spaces-under-the-income-tax-bill/](https://pwonlyias.com/mains-answer-writing/the-expansion-of-tax-authorities-powers-to-access-virtual-digital-spaces-under-the-income-tax-bill/)
****
Submitted in fulfilment of the Internal Continuous Evaluation for Law of Taxation I, Semester VII, Batch 2023–28, at the Silvassa Campus, DNHDD. The blog has been submitted by Naitik Katiyar (23SBAL031; [email protected]) to and under the guidance of Professor Aswathi Vakkayil, Assistant Professor of Law.






