Post-Mortem Privacy in India: An Analysis
DOI:
https://doi.org/10.18041/0124-0102/a.46.13738Keywords:
post-mortem privacy, dead person, medical information, privacy, medical ethics , regulations, data protectionAbstract
Post-mortem privacy refers to the protection of a deceased person’s personal information, including medical information. The research paper delves into various aspects of how the rights of the dead person regarding their privacy are being protected within the legal framework, particularly within India. The paper explores multiple laws currently in place in India and also in other countries like the EU, the US, and the UK, as to how the privacy of a dead person should be preserved. After conducting a literature review on the topic, it can be concluded that the legal framework concerning the privacy of the dead person is at a nascent stage, and some countries have tried to maintain the confidentiality of the medical information of the dead for a certain period. However, there is a need for a comprehensive framework to address pertinent issues in India’s booming technology sector, where controversies and scams involving the hacking of data from thousands of individuals occur, and where there is no law to protect the information of the deceased. In conclusion, there is an urgent need for a robust mechanism to ensure privacy rights and ensure that the protection of information is extended to dead persons.
Downloads
References
Digital Personal Data Protection Act, 2023, No. 22 of 2023 (2023). https://www.meity.gov.in/static/uploads/2024/06/2bf1f0e9f04e6fb4f8fef35e82c42aa5.pdf
Justice K.S. Puttaswamy (Retd) v. Union of India, (2017) 10 SCC 1.
Constitution of India, Art. 21 (1950). Retrieved from: https://www.mea.gov.in/images/pdf1/part3.pdf
Indian Penal Code, § 499 (1860). Retrieved from: https://www.indiacode.nic.in/bitstream/123456789/2263/1/A1860-45.pdf
Mishra, N. (August, 2024). Liability of defamation of the dead. Academike. Restrieved from: https://www.lawctopus.com/academike/liability-defamation-of-dead-123/
Maixner, A. H., & Morin, K. (2001). Confidentiality of health information postmortem. Archives of Pathology & Laboratory Medicine, 125(9), 1189–1192. https://doi.org/10.5858/2001-125-1189-COHIP
Access to Health Records Act 1990, c. 23 (1990). Retrieved from: https://www.legislation.gov.uk/ukpga/1990/23/contents
Harbinja, E., & Pearce, H. (2020). Your data will never die, but you will: A comparative analysis of US and UK post-mortem data donation frameworks. Computer Law & Security Review, 36, 105403. https://doi.org/10.1016/j.clsr.2020.105403
General Data Protection Regulation, Regulation (EU) 2016/679, 2016 O.J. (L 119) 1 (2016). Retrieved from: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32016R0679
European Convention on Human Rights, Art. 8 (1950). Retrieved from: https://www.echr.coe.int/documents/d/echr/convention_eng
Harbinja, E. (2013). Does the EU data protection regime protect post-mortem privacy, and what could be the potential alternatives? Scripted, 10(1), 19–38. https://doi.org/10.2966/scrip.100113.19
Buitelaar, J. C. (2017). Post-mortem privacy and informational self-determination. Ethics and Information Technology, 19(2), 129–142. https://doi.org/10.1007/s10676-017-9421-9
National Human Rights Commission, India. (2020). Advisory for upholding the dignity and protecting the rights of the dead (pp. 1–8). Retrieved from: https://nhrc.nic.in/sites/default/files/NHRC%20Advisory%20for%20Upholding%20Dignity%20%26%20Protecting%20the%20Rights%20of%20Dead.pdf
Raju v. Chacko, (2005). KLT 197 (Kerala High Court 2005).
Subramanian Swamy v. Union of India, (2016) 7 SCC 221.
Markose, A., Krishnan, R., & Ramesh, M. (2016). Medical ethics. Journal of Pharmacy and Bioallied Sciences, 8(Suppl 1), S1–S4. https://doi.org/10.4103/0975-7406.191934
Medical Council of India. (2002). Indian Medical Council (professional conduct, etiquette and ethics) regulations, 2002. Retrieved from: https://www.nmc.org.in/rules-regulations/code-of-medical-ethics-regulations-2002/
Bar & Bench. (2024). Privacy in a pandemic: Is the Aarogya Setu app legal? Bar & Bench. Retrieved from: https://www.barandbench.com/columns/privacy-in-a-pandemic-is-the-aarogya-setu-app-legal
Live Law. (2024). Why mandating the Aarogya Setu app is not the solution to the COVID-19 pandemic. Live Law. Retrieved from: https://www.livelaw.in/columns/why-mandating-the-aarogya-setu-app-is-not-the-solution-to-the-covid-19-pandemic-156422
The Indian Express. (2024, October 14). Star Health Insurance data breach: 3.1 crore customers potentially at risk. Here is what happened. The Indian Express. Retrieved from: https://indianexpress.com/article/technology/tech-news-technology/star-health-insurance-data-breach-all-you-need-to-know-9613363/
Information Technology Act, 2000, No. 21 of 2000 (2000). Retrieved from: https://www.meity.gov.in/content/information-technology-act-2000
Health Insurance Portability and Accountability Act of 1996, Pub. L. No. 104-191, 110 Stat. 1936 (1996). Retrieved from: https://www.govinfo.gov/content/pkg/PLAW-104publ191/pdf/PLAW-104publ191.pdf
U.S. Department of Health and Human Services. (2019, January 30). Health information of deceased individuals. Retrieved from: https://www.hhs.gov/hipaa/for-professionals/privacy/guidance/health-information-of-deceased-individuals/index.html
European Union. (2016). General Data Protection Regulation: Recital 27 – Non-applicability to deceased persons. Retrieved from: https://www.privacy-regulation.eu/en/recital-27-GDPR.htm
General Medical Council. (2024, December 13). Confidentiality: Good practice in handling patient information. Retrieved from: https://www.gmc-uk.org/ethical-guidance/ethical-guidance-for-doctors/confidentiality
Personal Data Protection Act 2019 (Estonia 2019). Retrieved from: https://www.riigiteataja.ee/en/eli/523012019001/consolide
Downloads
Published
Issue
Section
License
Copyright (c) 2026 Advocatus
This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License.
