Introduction
The intersection of digital speech, state authority, and individual privacy has once again come to the forefront of Indian legal discourse. On October 19, 2026, the Maharashtra Cyber Police issued a sweeping directive to X Corp (formerly Twitter), demanding the disclosure of sensitive personal data pertaining to several users who had posted content critical of Amruta Fadnavis, the wife of Maharashtra Chief Minister Devendra Fadnavis.
The notice, issued under Section 94 of the Bharatiya Nagarik Suraksha Sanhita (BNSS), 2023, has ignited a firestorm of debate regarding the extent of state surveillance powers. As the police seek to unmask anonymous users behind posts characterized as “defamatory” and “offensive,” legal experts and privacy advocates are questioning whether the request adheres to the proportionality standards recently established by the Supreme Court of India.
The Chronology of the Dispute
The controversy centers on a series of social media posts that emerged following public comments made by Amruta Fadnavis regarding the celebration of Garba. Fadnavis had advocated for a secular approach to the festivities, suggesting that entry to Garba venues should not be restricted based on religious affiliation.
The remarks triggered a polarized response on X. While some supported the call for inclusivity, others launched a barrage of criticism. The police notice claims that several of these posts contained “sexist and communal language” and explicit references to “love Jihad.”
The Notice and Its Reach
On October 19, 2026, the Nodal Cyber Police Station in Navi Mumbai formally reached out to X Corp. The notice references FIR 82/2026, which invokes serious charges under the Bharatiya Nyaya Sanhita (BNS) and the Information Technology Act.
Within days of the notice surfacing on X, many of the flagged posts were either deleted by the users or restricted by the platform, returning a “this page does not exist” error. However, the police directive remains active, demanding that X Corp preserve all electronic records associated with these accounts until the legal investigation concludes.
Legal Framework: The Charges and Provisions
The Maharashtra Cyber Police have anchored their request in a combination of legacy and newly enacted legislation. The investigation is primarily focused on three key legal pillars:
1. Section 352 of the BNS
This provision targets “intentional insult intended to provoke a breach of public peace.” The police allege that the posts in question were not merely critical but were calculated to incite social unrest.
2. Section 353 of the BNS
This section addresses the dissemination of false information, rumors, or reports that cause public mischief. The authorities argue that the nature of the content—specifically the communal rhetoric—falls under the ambit of endangering public tranquility.
3. Section 67 of the IT Act
This long-standing provision deals with the publication or transmission of “obscene material” in electronic form. The police contend that the derogatory language used against Amruta Fadnavis constitutes obscenity under this act.
The Procedural Engine: Section 94 of the BNSS
The most significant aspect of the notice is its reliance on Section 94 of the BNSS, 2023. This section grants police officers the authority to compel the production of documents or physical evidence deemed “necessary or desirable” for an investigation. By invoking this, the state essentially mandates that X Corp bypass its standard privacy protocols to surrender user data.
The Breadth of the Request: What Information Is Sought?
The notice does not merely ask for the identity of the users; it requests a comprehensive digital dossier. The scope of the demand includes:
- Account Registration Details: Full names, verified email addresses, and associated phone numbers.
- Access Logs: Comprehensive login records, including timestamps and historical access patterns.
- Technical Identifiers: IP addresses (including historical logs), device IDs, and browser fingerprints.
- Metadata: Location data at the time of posting and details of linked accounts or third-party integrations.
- Preservation Orders: A requirement for X to maintain all data in a “frozen” state, ensuring that even if a user deletes their account, the forensic trail remains accessible to law enforcement.
The Supreme Court’s “Upadhyay” Precedent
The timing of this notice is critical, as it arrives in the shadow of the Supreme Court’s recent landmark ruling in the case of journalist Abhishek Upadhyay. In that instance, the Court placed definitive guardrails on how law enforcement agencies can harvest data from social media platforms.
The Supreme Court ruled that the police cannot obtain personal information relating to a period before the alleged offense occurred. Furthermore, any request for data must be “proportionate” and “necessary.” The Court specifically quashed a similar police notice in the Upadhyay case, noting that the investigators had failed to provide a valid, case-specific justification for the wide-ranging scope of the data they were seeking.
Legal analysts point out that the Maharashtra Cyber Police’s notice appears to ignore these nuances. By requesting phone numbers, IP logs, and device identifiers without clearly demonstrating how each piece of data is essential to proving the specific offense of “defamation” or “insult,” the police risk violating the privacy rights of the users under the broader umbrella of the Puttaswamy judgment, which affirmed the right to privacy as a fundamental right.
Implications for Digital Expression in India
The ongoing standoff between the state and the platform raises fundamental questions about the future of online discourse in India.
The Chilling Effect
Critics argue that when the state uses heavy-handed police tactics to target criticism of political figures—or their families—it creates a “chilling effect.” If citizens fear that an anonymous post criticizing a government figure could lead to a police demand for their physical address, phone number, and location history, they are less likely to participate in public discourse. This contraction of the “digital public square” threatens democratic accountability.
The Platform’s Dilemma
X Corp, under its current leadership, has frequently navigated conflicts between local law and its commitment to free speech. The company is now caught between two fires: complying with the BNSS notice to avoid penalties in the Indian market, or resisting the request to protect user privacy. If X complies, it sets a precedent for future requests. If it refuses, it risks legal battles with the state government, potentially leading to restricted operations within the region.
Official Responses and Public Sentiment
As of the time of writing, the Maharashtra Chief Minister’s Office has not issued a formal statement regarding the specific notice. However, supporters of the administration argue that the police are simply performing their duty to curb hate speech and maintain law and order. They argue that “freedom of speech” is not absolute and does not grant users the right to engage in “sexist, communal, or defamatory” attacks against women in public life.
Conversely, digital rights activists have taken to the same platform to highlight the irony of the situation. Many users are sharing the notice with the hashtag #PrivacyRights, arguing that the “offense” is subjective and that the state is weaponizing criminal law to silence political dissent.
Conclusion: A Test of Proportionality
The notice issued by the Maharashtra Cyber Police is a microcosm of the larger struggle between state security and individual liberty in the digital age. While the state has a legitimate interest in preventing public mischief and protecting the dignity of individuals, the use of draconian data-collection requests must be tempered by judicial oversight and the principle of proportionality.
If the police intend to pursue these users, they must clear the hurdle established by the Supreme Court: proving that the information sought is strictly necessary and that the intrusion into the user’s private life is the least restrictive means to achieve the goal of the investigation. As this case moves forward, it will likely serve as another litmus test for the independence of the judiciary in balancing the power of the state against the constitutional rights of its citizens in the virtual realm.
The resolution of this case will not only impact the users involved but will also establish the baseline for how far Indian authorities can reach into the digital lives of the populace in the years to come.
