Privacy in the Age of Surveillance: Reconciling State Security Interests with the Constitutional Right to Privacy in the Digital Era

Authors

  • Muhammad Babar Shaheen Lecturer, College of Law, Government College University, Faisalabad, Punjab, Pakistan.
  • Dr. Muhammad Shahid Sultan Assistant Professor of Law, Government College University, Faisalabad, Punjab, Pakistan.
  • Ahsin Ali Lecturer, Department of Law, University of Sahiwal, Sahiwal, Punjab, Pakistan.

DOI:

https://doi.org/10.55737/trt/v-v.293

Keywords:

Privacy Surveillance, National Security, Article 14, Digital Constitutionalism, Data Protection, Interception, Proportionality, Artificial Intelligence

Abstract

Digital surveillance has become a routine feature of governance, policing, intelligence, border control, welfare administration, and platform regulation. Its constitutional significance lies not merely in the quantity of data collected but in the capacity to combine communications content, metadata, location histories, biometric identifiers, device information, and algorithmic inferences into persistent profiles of individuals and groups. Pakistan faces a genuine security environment involving terrorism, violent extremism, espionage, organized crime, cyberattacks, and threats to critical infrastructure. Nevertheless, national security cannot convert secret technological capacity into legally unreviewable power. This paper examines how Pakistan can reconcile legitimate state-security interests with the constitutional right to privacy in the digital era. Using a doctrinal and comparative method, it interprets Articles 4, 8, 9, 10A, 14, 19, and 19A of the Constitution alongside Pakistan’s interception, telecommunications, cybercrime, digital-governance, and proposed data-protection frameworks. It then compares Pakistan with India, the United Kingdom and European human-rights system, the United States, and Canada. The paper argues that Article 14 must protect informational and communicational privacy beyond the physical home and that any surveillance measure must satisfy legality, legitimate aim, evidence-based necessity, strict proportionality, independent prior authorization, minimization, secure retention, accountable sharing, and effective remedy. The 2024 Islamabad High Court proceedings concerning the Lawful Intercept Management System and Amnesty International’s 2025 investigation illustrate the consequences of allowing infrastructure to outpace law. The paper proposes a Pakistan-specific model combining judicial authorization, specialized independent oversight, privacy-by-design, delayed notification, transparency reporting, and comprehensive data-protection legislation. Properly designed safeguards do not obstruct security; they improve intelligence quality, institutional legitimacy, evidentiary reliability, and constitutional trust.

Author Biography

  • Muhammad Babar Shaheen, Lecturer, College of Law, Government College University, Faisalabad, Punjab, Pakistan.

    Corresponding Author: [email protected]

References

Amnesty International. (2025). Pakistan: Shadows of control: Censorship and mass surveillance in Pakistan - Amnesty International. In Amnesty International. https://www.amnesty.org/en/documents/asa33/0206/2025/en/

Bhatia, G. (2019). The transformative Constitution: A radical biography in nine acts. HarperCollins India. https://cir.nii.ac.jp/crid/1971993809788603840

Big Brother Watch and Others v. United Kingdom [GC], Apps. Nos. 58170/13, 62322/14, and 24960/15 (European Court of Human Rights 2021).

Binns, R. (2018, January). Fairness in machine learning: Lessons from political philosophy. In Conference on fairness, accountability and transparency (pp. 149-159). PMLR. https://proceedings.mlr.press/v81/binns18a.html

Brayne, S. (2021). Predict and surveil: Data, discretion, and the future of policing. Oxford University Press.

Butt, M. F., Saleem, H. A. R., Hashmi, M. A. I., & Bano, N. (2024). The Right to Privacy in the Age of Surveillance: Legal Protections In Pakistan. ASSAJ, 2(4), 1449-1458. https://assajournal.com/index.php/36/article/view/601

Carpenter v. United States, 585 U.S. 296 (2018).

Centrum för Rättvisa v. Sweden [GC], App. No. 35252/08 (European Court of Human Rights 2021).

Chambers and Partners. (2026). Data protection & privacy 2026 - Pakistan | global practice guides | chambers and partners. Chambers.Com. https://practiceguides.chambers.com/practice-guides/data-protection-privacy-2026/pakistan

Citron, D. K. (2022). The fight for privacy: Protecting dignity, identity and love in the digital age. Random House.

Cohen, J. E. (2019). Between truth and power: The legal constructions of informational capitalism (Vol. 10). New York: Oxford University Press. https://cyber.harvard.edu/sites/default/files/2019-12/2019_11_21_Berkman_Julie_Cohen_NS.pdf

Commissioner of An Garda Síochána and Others, Case C-140/20, ECLI:EU:C:2022:258 (Court of Justice of the European Union 2022).

Council of Europe. (2018). Protocol amending the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data (CETS No. 223).

Daudpota, F. (2023). Pakistan: Overview of its draft data protection act, 2023. https://doi.org/10.2139/ssrn.4667042

Deibert, R. J. (2020). Reset: Reclaiming the internet for civil society. House of Anansi.

Digital Nation Pakistan Act, No. I of 2025 (Pakistan).

Digital Personal Data Protection Act, No. 22 of 2023 (India).

Digital Personal Data Protection Rules. (2025) (India).

Digital Rights Foundation. (2025). Digital Security Helpline annual report 2024. https://digitalrightsfoundation.pk/

DLA Piper. (2026). Data protection laws of the world: Pakistan. https://www.dlapiperdataprotection.com/

EU, G. (2016a). General data protection regulation. Official Journal of the European Union.

European Court of Human Rights, & European Union Agency for Fundamental Rights. (2025). Mass surveillance: Joint factsheet.

European Data Protection Board. (2021). Guidelines 10/2020 on restrictions under Article 23 GDPR (Version 2.1).

European Parliament & Council of the European Union. (2016b). Directive (EU) 2016/680 on data processing by competent authorities for law-enforcement purposes. Official Journal of the European Union, L 119, 89–131.

European Union Agency for Fundamental Rights. (2017). Surveillance by intelligence services: Fundamental rights safeguards and remedies in the EU—Volume II.

Ferguson, A. G. (2017). The rise of big data policing: Surveillance, race, and the future of law enforcement. In The rise of big data policing. New York University Press. https://doi.org/10.18574/nyu/9781479854608.001.0001

Freedom House. (2025). Freedom on the Net 2025: Pakistan. https://freedomhouse.org/country/pakistan/freedom-net/2025

Gellert, R. (2020). The risk-based approach to data protection. Oxford University Press.

Greenleaf, G. (2021). Asian data privacy laws: Trade and human rights perspectives (2nd ed.). Oxford University Press.

Haq, A. H. U. (2024). The right to privacy & personal data protection: An analysis of Pakistan’s proposed personal data protection bill. UCP Journal of Law & Legal Education, 2(2), 01-27. https://ojs.ucp.edu.pk/index.php/ucpjlle/article/view/122

Hildebrandt, M. (2020). Law for computer scientists and other folk. Oxford University Press.

Human Rights Commission of Pakistan. (2025). State of human rights in 2024.

Human Rights Council. (2021). The right to privacy in the digital age (A/HRC/RES/48/4). United Nations.

Human Rights Watch. (2025, February 3). Pakistan: Repeal amendment to draconian cyber law. https://www.hrw.org/news/2025/02/03/pakistan-repeal-amendment-draconian-cyber-law

Human Rights Watch. (2026). World report 2026: Pakistan. https://www.hrw.org/world-report/2026/country-chapters/pakistan

Hussain, Z., Chen, M., Yunjiao, X., Abbas, S., & Tabassam, A. (2026). Carbon neutrality through legislation, judicial oversight, and environmental policies in developing countries. Environment, Development and Sustainability, 1-34. https://doi.org/10.1007/s10668-026-07959-1

International Bar Association. (2025). The concept of authorisation under Pakistan’s data protection bill. https://www.ibanet.org/

International Comparative Legal Guides. (2026). Data protection laws and regulations: Pakistan 2026. https://iclg.com/practice-areas/data-protection-laws-and-regulations/pakistan/

Investigatory Powers (Amendment) Act 2024, c. 9 (United Kingdom).

Investigatory Powers Act 2016, c. 25 (United Kingdom).

Investigatory Powers Commissioner’s Office. (2025). Annual report 2024. https://www.ipco.org.uk/publication/annual-report-2024/

Islamabad High Court. (2024, June 25). Order in W.P. No. 2758/2023.

Justice K.S. Puttaswamy (Retd.) (Aadhaar) v. Union of India, (2019) 1 S.C.C. 1 (India) (judgment delivered 2018).

Justice K.S. Puttaswamy (Retd.) v. Union of India, (2017) 10 S.C.C. 1 (India).

Justice Qazi Faez Isa v. President of Pakistan, P.L.D. 2021 S.C. 1 (Pakistan).

Justice Qazi Faez Isa v. President of Pakistan, P.L.D. 2022 S.C. 119 (Pakistan).

Kaye, D. (2019). Speech police: The global struggle to govern the internet. Columbia Global Reports.

Kerr, O. S. (2018). Implementing Carpenter. Harvard Law Review, 132, 617–646. https://www.lawfaremedia.org/article/implementing-carpenter

Khera, R. (Ed.). (2019). Dissent on Aadhaar: Big data meets Big Brother. Orient BlackSwan.

Kuner, C., Bygrave, L. A., & Docksey, C. (Eds.). (2020). The EU General Data Protection Regulation (GDPR): A commentary. Oxford University Press.

La Quadrature du Net and Others, Joined Cases C-511/18, C-512/18, and C-520/18, ECLI:EU:C:2020:791 (Court of Justice of the European Union 2020).

Leaders of a Beautiful Struggle v. Baltimore Police Department, 2 F.4th 330 (4th Cir. 2021) (en banc).

Lognoul, M. (2025). Regulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence (Artificial Intelligence Act–AI Act). Revue du Droit des Technologies de l'information, (3-4), 145-189. https://researchportal.unamur.be/en/publications/regulation-eu-20241689-laying-down-harmonised-rules-on-artificial/

Lyon, D. (2018). The culture of surveillance: Watching as a way of life. John Wiley & Sons.

Manohar Lal Sharma v. Union of India, W.P. (Crim.) No. 314 of 2021 (Supreme Court of India, Oct. 27, 2021).

Mantelero, A. (2022). Beyond data: Human rights, ethical and social impact assessment in AI. Springer.

Ministry of Electronics and Information Technology. (2026). Establishment of the Data Protection Board of India. Government of India.

Mittelstadt, B. D., Allo, P., Taddeo, M., Wachter, S., & Floridi, L. (2016). The ethics of algorithms: Mapping the debate. Big Data & Society, 3(2), 1–21. https://doi.org/10.1177/2053951716679679

Munir, A. (2025). Cybercrime laws and digital privacy in Pakistan. SSRN. https://papers.ssrn.com/sol3/papers.cfm?abstract_id=5950694

Naperville Smart Meter Awareness v. City of Naperville, 900 F.3d 521 (7th Cir. 2018).

National Assembly of Pakistan. (2025). The Constitution of the Islamic Republic of Pakistan (current official edition).

Office of the United Nations High Commissioner for Human Rights. (2018). The right to privacy in the digital age (A/HRC/39/29). United Nations. https://www.ohchr.org/en/documents/thematic-reports/ahrc3929-right-privacy-digital-age-report-united-nations-high

Office of the United Nations High Commissioner for Human Rights. (2021). The right to privacy in the digital age (A/HRC/48/31). United Nations. https://www.ohchr.org/en/documents/thematic-reports/ahrc4831-right-privacy-digital-age-report-united-nations-high

Office of the United Nations High Commissioner for Human Rights. (2025). The right to privacy in the digital age (A/HRC/60/45). United Nations. https://www.ohchr.org/en/documents/thematic-reports/ahrc6045-right-privacy-digital-age-report-office-united-nations-high

Organisation for Economic Co-operation and Development. (2022). Declaration on government access to personal data held by private sector entities. https://legalinstruments.oecd.org/en/instruments/OECD-LEGAL-0487

Pakistan Code. (2026a). Pakistan Telecommunication (Re-organization) Act, 1996 (official consolidated text consulted in 2026). Ministry of Law and Justice, Government of Pakistan.

Pakistan Code. (2026b). Prevention of Electronic Crimes Act, 2016 (official consolidated text consulted in 2026). Ministry of Law and Justice, Government of Pakistan.

Pakistan Digital Authority. (2026). Digital governance, data, and AI regulatory framework. https://pda.gov.pk/

Personal Data Protection Bill. (2023) (Pakistan) (draft).

Prevention of Electronic Crimes (Amendment) Act, No. II of 2025 (Pakistan).

Prevention of Electronic Crimes Act, No. XL of 2016 (Pakistan).

Privacy and Civil Liberties Oversight Board. (2023). Report on the surveillance program operated pursuant to Section 702 of the Foreign Intelligence Surveillance Act.

Privacy International v. Secretary of State for Foreign and Commonwealth Affairs, Case C-623/17, ECLI:EU:C:2020:790 (Court of Justice of the European Union 2020).

Privacy International. (2017). The right to privacy in the Islamic Republic of Pakistan: UPR 28th session. Privacy International. https://privacyinternational.org/advocacy/834/right-privacy-islamic-republic-pakistan-upr-28th-session

R. v. Bykovets, 2024 SCC 6 (Canada).

R. v. Jarvis, 2019 SCC 10 (Canada).

Rana, A., & Iqbal, A. (2025). Privacy and surveillance: Legal and technical perspectives. UCP Journal of Law & Legal Education, 3(2), 01–28. https://doi.org/10.24312/ucp-jlle.03.02.552

Reforming Intelligence and Securing America Act, Pub. L. No. 118-49 (2024) (United States).

Selbst, A. D., Boyd, D., Friedler, S. A., Venkatasubramanian, S., & Vertesi, J. (2019). Fairness and Abstraction in Sociotechnical Systems. Proceedings of the Conference on Fairness, Accountability, and Transparency - FAT* ’19, 59–68. https://doi.org/10.1145/3287560.3287598

Solove, D. J., & Schwartz, P. M. (2020). Information privacy law (7th ed.). Wolters Kluwer.

SpaceNet AG and Telekom Deutschland GmbH, Joined Cases C-793/19 and C-794/19, ECLI:EU:C:2022:702 (Court of Justice of the European Union 2022).

Tabassam, A., & Husaain, Z. (2024). Sustainable resource management and economic development: evaluating the impact of rare earth mining on local economies and environmental sustainability in China. Journal of Environmental Science and Economics, 3(4), 1-11. https://doi.org/10.56556/jescae.v3i4.997

Tele2 Sverige AB and Watson, Joined Cases C-203/15 and C-698/15, ECLI:EU:C:2016:970 (Court of Justice of the European Union 2016).

Tufekci, Z. (2017). Twitter and tear gas: The power and fragility of networked protest. Yale University Press.

United States v. Moore-Bush, 36 F.4th 320 (1st Cir. 2022) (en banc).

United States v. Tuggle, 4 F.4th 505 (7th Cir. 2021).

Véliz, C. (2020). Privacy is power: Why and how you should take back control of your data. Bantam Press.

Wachter, S., & Mittelstadt, B. (2019). A right to reasonable inferences: Re-thinking data protection law in the age of big data and AI. Columbia Business Law Review, 2019(2), 494–620. https://doi.org/10.31228/osf.io/mu2kf

Wachter, S., Mittelstadt, B., & Floridi, L. (2017). Why a right to explanation of automated decision-making does not exist in the General Data Protection Regulation. International Data Privacy Law, 7(2), 76-99. https://doi.org/10.1093/idpl/ipx005

Wachter, S., Mittelstadt, B., & Russell, C. (2021). Why fairness cannot be automated: Bridging the gap between EU non-discrimination law and AI. https://doi.org/10.31228/osf.io/jq2b6

Wajahat, J., Tarana, M., & Gul, S. (2025). Vague Laws and Digital Censorship: The Constitutional Challenges of the Prevention of Electronic Crimes Act (PECA) Amendments, 2025. The Lighthouse Journal of Social Sciences, 4(01), 1-12.

Zuboff, S. (2019). The age of surveillance capitalism: The fight for a human future at the new frontier of power. PublicAffairs.

Downloads

Published

2026-05-30

How to Cite

Shaheen, M. B., Sultan, M. S., & Ali, A. (2026). Privacy in the Age of Surveillance: Reconciling State Security Interests with the Constitutional Right to Privacy in the Digital Era. The Regional Tribune, 5(5), 300-317. https://doi.org/10.55737/trt/v-v.293