Location tracking by mobile apps is a common practice that helps users navigate, find nearby services, or even personalize content. However, it raises important privacy concerns. Apps that track user location must adhere to legal guidelines, and users must be informed and give consent before their data is collected. In India, the legal landscape surrounding location tracking is influenced by privacy rights, data protection regulations, and the conditions under which consent is provided.
Legal Basis for Tracking: In India, location tracking by apps is generally legal if the user provides explicit consent. Most apps request permission to access location data when the user installs or first opens the app. This consent is vital for the app’s legal operation.
App’s Responsibility: Apps are required to inform users about what data will be collected and how it will be used. This transparency must be outlined in the app's privacy policy.
Users can generally revoke location tracking permission at any time through their device settings, which stops the app from collecting location data.
Right to Privacy: The Right to Privacy is protected under Article 21 of the Indian Constitution. The Supreme Court of India has recognized privacy as a fundamental right, which means that location tracking must be done with due regard to individuals' privacy.
Personal Data Protection Bill (PDPB), 2019: Under the Personal Data Protection Bill, 2019, location data is considered sensitive personal data. Apps that collect location information must ensure the data is stored securely and used only for the purposes for which consent was given. Additionally, users must have the right to access, correct, or delete their location data.
Data Retention: The PDPB also imposes restrictions on the retention of sensitive personal data, which means apps cannot keep location data for an indefinite period without a legitimate purpose.
Essential Services: Location tracking may be required for essential services such as navigation apps (e.g., Google Maps), ride-sharing apps (e.g., Uber, Ola), and food delivery services. In such cases, the purpose of tracking is clearly linked to providing the core service.
Advertising and Targeting: Some apps track location data for advertising and personalization. However, this must be explicitly stated in the app’s privacy policy, and users should be able to opt-out of location-based advertising if they choose.
Section 43A of the IT Act: Under the Information Technology Act, 2000 (IT Act), if apps collect or store sensitive personal data (such as location data) without adequate security or in violation of user consent, they can be held liable. This is part of the broader cybersecurity and privacy protection framework.
Section 72A of the IT Act: If an app discloses location data without proper authorization or violates privacy terms, it could face criminal penalties under Section 72A, which deals with the disclosure of personal information without consent.
For apps targeting users in the European Union, the General Data Protection Regulation (GDPR) provides strong guidelines on location tracking. Under the GDPR, consent must be freely given, specific, informed, and unambiguous. Users must be able to withdraw consent easily at any time, and the data controller (app developer) must ensure data security and limit data retention.
While GDPR applies to apps operating in the EU, its principles are globally recognized and can be seen influencing the data protection laws in other countries, including India.
In certain cases, law enforcement or government agencies may request access to location data for national security or criminal investigations under specific legal procedures. However, such actions typically require a warrant or judicial oversight.
Suppose a user installs a navigation app like Google Maps, which asks for access to the user’s location. The app explains that location data will be used for providing directions and traffic information. By agreeing to this request, the user grants consent for location tracking. However, if the app were to share this location data with third-party advertisers without user consent or clear disclosure in the privacy policy, it would violate privacy laws under both the PDPB, 2019 and the IT Act, which could result in penalties or the app being banned.
Location tracking by apps is legal as long as it is done with the explicit consent of the user and for legitimate purposes. The collection and use of location data must comply with privacy laws, including the Personal Data Protection Bill, 2019, and the Right to Privacy. Apps are required to inform users about the data they collect, the purposes of collection, and how users can opt out or manage permissions. If apps violate these rules, they can face legal consequences in India, including penalties and user data protection violations.
Answer By Law4u Team
Discover clear and detailed answers to common questions about Elder & Estate Planning law. Learn about procedures and more in straightforward language.
