Justice Shah Committee
The first formal step India took toward a data protection law.
🎯 Learning Objectives
- ▸ Understand the mandate of the Justice Shah Committee
- ▸ Analyze its key recommendations
- ▸ Understand why its report was not immediately implemented
The First Step
In 2011, the Indian government recognized the need for a privacy law. It appointed a committee headed by former Chief Justice of Delhi High Court, Justice A.P. Shah.
Their report, "Privacy and Data Protection in India," was submitted in 2012. It was a visionary document that recommended a comprehensive privacy law, the establishment of a Privacy Commissioner, and strong protections for sensitive data.
Legacy
Although the government did not pass the law immediately, the Shah Committee report became the intellectual foundation for all future privacy debates in India. When the DPDPA was drafted, many of its core concepts (like notice, consent, and data controller obligations) traced back to the Shah Committee.
The Shah Committee was the first time India formally acknowledged that "privacy" as a fundamental right needed a dedicated statutory framework.
📖 Glossary
- Privacy Commissioner
- An independent regulatory authority proposed by the Shah Committee to oversee data protection.
🔑 Key Takeaways
- Formed in 2011, chaired by Justice A.P. Shah.
- It recommended a "Right to Privacy" framework and a draft bill.
- It introduced the concept of "data controllers" and "data processors" to India.
📚 Further Reading
- Report of the Group of Experts on Privacy — Planning Commission (2012)

Shilpi Kulshrestha
Shilpi is a corporate lawyer with over a decade of experience in data protection, company law, and regulatory compliance. She has advised 50+ startups and enterprises on DPDPA readiness, privacy gover...