Posting Your Luxury Life on Social Media? New Tax Law Expands Digital Search Powers
Posting Your Luxury Life on Social Media? New Tax Law Expands Digital Search Powers
The Income-Tax (No. 2) Act, 2025 modernises enforcement but critics warn it grants sweeping access to citizens’ virtual lives with minimal safeguards
On August 12, 2025, Parliament passed the Income-Tax (No. 2) Bill, 2025, replacing the six-decade-old 1961 law and ushering in a new digital-age enforcement regime. The Act, which comes into effect from April 1, 2026, introduces unprecedented powers for tax authorities — extending search and seizure operations beyond homes and offices to encompass “virtual digital spaces”.
Under the new Section 247, authorised tax officers can now search not just physical premises, but any computer system, network, or online platform where they believe undisclosed income or evidence is stored. This includes emails, cloud accounts, social media handles, online trading and banking accounts, remote servers, and even encrypted devices. In essence, tax raids can now reach into an individual’s or company’s digital life, with the same legal force as physical searches.
Previously, under Section 132 of the Income Tax Act, 1961, searches were largely confined to tangible spaces — bank lockers, residences, and business premises — where officials could seize undeclared cash, jewellery, or documents. While electronic records could be inspected, the statute did not explicitly authorise breaking into phones or cloud servers. Critically, it never compelled individuals to disclose passwords or decrypt data.
The new law changes that. Section 247(1)(ii)–(iii) mandates citizens and businesses to disclose passwords or encryption keys during a search. Tax officers are also empowered to “override access control” and hack into any device or account if passwords are not provided. Refusal to comply is now a punishable offence.
Privacy advocates say these provisions represent a dramatic expansion of state power. The Global Encryption Coalition, in its open letter to Parliament’s Select Committee, warned that such powers “effectively undermine end-to-end encryption”, the core of secure digital communication. Forcing disclosure of passwords or permitting backdoor access, the group said, threatens the security infrastructure that protects not just individuals, but also businesses and government data.
The definition of “virtual digital space” in Section 261(e) is notably broad, covering everything from personal chats to Internet of Things (IoT) device data. Legal experts caution that such a sweeping mandate could bring even private conversations or device logs within the reach of tax authorities.
India’s constitutional guarantee of privacy, reaffirmed in the Justice K.S. Puttaswamy v. Union of India (2017) judgment, requires that any state intrusion be necessary, proportionate, and backed by robust safeguards. Critics argue that the new Act fails this test. The standard for initiating a search — merely an officer’s “reason to believe” that income has been concealed — remains unchanged, even as the scope of intrusion expands dramatically.
Tax experts note that the intent behind the reform — to tackle sophisticated tax evasion in a digitised economy — is legitimate. However, without strong external oversight, independent review mechanisms, and strict limits on data use, these powers could be misused for surveillance or to target dissent.
In the absence of clear guardrails, the Income-Tax Act, 2025 risks eroding public trust. As one tax analyst put it, “Compliance grows when citizens trust the system — not when they fear it.” While the new law aims to modernise enforcement, its reach into citizens’ digital footprints blurs the line between financial accountability and personal freedom.
Disclaimer: Readers are advised to refer to the official Gazette notification or seek professional advice for legal clarity.
