India's Section 23 Voids Employee Surveillance Clauses Under 2023 DPDPA
Updated
Updated · Live Law - Indian Legal News · Jul 6
India's Section 23 Voids Employee Surveillance Clauses Under 2023 DPDPA
1 articles · Updated · Live Law - Indian Legal News · Jul 6
Summary
Section 23 of the Indian Contract Act can render many employee surveillance clauses void from signing—not merely voidable—if they authorize broad email, keystroke, browsing or screenshot monitoring.
The argument turns on the DPDPA’s two routes for processing data: Section 6 consent and Section 7(i) “purposes of employment.” The report says onboarding consent is not truly free, while Section 7(i) covers narrow, security-focused uses.
Broad monitoring clauses therefore fail in two ways: they try to manufacture consent in a structurally unequal job setting and stretch a defensive exception into a general workplace-surveillance license.
That reading draws support from Supreme Court privacy rulings, including Puttaswamy, which recognized informational privacy, and leaves employers with little protection from template clauses copied into offer letters.
The report says the bigger gap is legislative: India still lacks GDPR-style employee-specific data rules, leaving a 19th-century contract provision to police 21st-century workplace monitoring.
India's new data law bans broad monitoring. What specific surveillance can your employer still legally use?
With surveillance clauses gone, are Indian companies now defenseless against corporate espionage and internal data theft?
The End of Blanket Employee Surveillance: DPDPA 2023 Makes Broad Monitoring Clauses Void in India
Overview
With the enactment of the Digital Personal Data Protection Act, 2023 (DPDPA), India’s approach to employee surveillance changed dramatically. The law made most broad surveillance clauses in employment contracts legally void from the start, especially those allowing tracking of emails, browsing history, or keystrokes without clear purpose or consent. This shift is rooted in the DPDPA’s strong focus on consent and purpose limitation, meaning employers can no longer rely on old contract terms to justify extensive monitoring. As a result, organizations must now ensure all monitoring is specific, necessary, and transparent to comply with the new legal standards.