Unintended Listeners: A Critical Analysis Of Ambient Voice Recordings Under India’s Digital Personal Data Protection Act, 2023
- IJLLR Journal
- 2 hours ago
- 2 min read
Saanvi Aggarwal, School of Law, CHRIST (Deemed to be University), Bangalore
ABSTRACT
This paper examines voice-activated assistants such as smart speakers and phone-based voice agents, for example, Amazon Alexa, Google Assistant, and Apple Siri, with particular focus on their impact on users’ privacy under India’s Digital Personal Data Protection (DPDP) Act, 2023. While these devices are marketed as being activated only by clear “wake words”, the researcher uses global evidences to show that they often trigger accidentally and capture sensitive background conversations without the knowledge of users. The paper adopts a doctrinal approach and critically analyses the DPDP Act to assess how well it addresses or fails to address such issues. The scope of this paper is limited to the Indian context of the DPDP Act, 2023, and does not provide an exhaustive study of privacy laws in other jurisdictions. Further, the focus is restricted to smart speakers and phone- based voice assistants, excluding other forms of Internet of Things (IoT) devices. The key finding of this paper is that the DPDP Act introduces principles of consent and purpose limitation, yet it neglects continuous ambient recordings and accidental recordings. The lack of explicit rules for such situations weakens user control and fails to adequately protect personal information, allowing Data Fiduciaries to potentially retain and misuse sensitive conversations. To fill this gap, the paper proposes reforms such as introducing a clear definition of “ambient data”, requiring explicit consent for its collection, mandating on-device processing by default, and enforcing strict deletion protocols for mis-triggered recordings. The paper also suggests greater responsibility on companies to disclose how often such mis- triggered activations happen, and to undergo independent audits to enhance wake-word listening and data management by voice assistants. In conclusion, although the DPDP Act shows progress, the existing gaps pose a threat to digital dignity and the fundamental right to privacy as under Article 21 of the Constitution.
Keywords: Voice assistant surveillance, Ambient recording, Accidental activation, Digital Personal Data Protection Act (DPDP Act), Right to Privacy
