Asymmetric Surveillance Governance: A Thematic Analysis of Privacy, National Security, and AI Regulation in India

Abstract

The rapid integration of artificial intelligence into state surveillance practices has intensified longstanding tensions between consumer privacy and national security governance. In India, the enactment of the Digital Personal Data Protection Act, 2023, represents a significant regulatory development in data protection; however, its broad exemptions for state agencies raise critical constitutional and structural concerns. This paper undertakes a qualitative thematic analysis of Indian surveillance and data protection laws, supplemented by a comparative examination of regulatory frameworks in the European Union and the United States. Drawing upon statutory provisions, judicial decisions, and regulatory principles, the study identifies recurring themes including regulatory asymmetry between corporate and state actors, definitional ambiguity surrounding national security, executive-centric oversight structures, the convergence of surveillance capitalism and state data acquisition, and the algorithmic intensification of surveillance through AI systems. These themes are synthesized into a conceptual framework described as an “asymmetric surveillance governance model,” in which expanded state informational power operates alongside comparatively limited institutional counterweights. The paper argues that while national security remains a legitimate constitutional objective, meaningful harmonization requires clearer definitional standards, strengthened judicial oversight, proportionality-based safeguards, and principled AI governance mechanisms. By situating India within broader comparative debates on surveillance regulation, this study contributes to ongoing scholarship on privacy, constitutionalism, and algorithmic governance in the digital state.