📄 Citizen Pocket Legal Shield (Printable 1-Page Offline Card)
Top 10 essential everyday protections formatted to print on 1 page or save on phone.
Privacy Shield
⚠️ UNCONSTITUTIONAL VIOLATION
🌐 All-India Central Act
Can Police check your phone, WhatsApp, or gallery on the street?
NO. Arbitrary phone searching without a judicial warrant or formal criminal FIR investigation is illegal.
Governing Law:
Article 21 (Fundamental Right to Privacy - Puttaswamy Judgment) & Section 91 CrPC
Constitutional Articles:
Article 21 (Protection of Life & Personal Liberty)
(Art 21 →)
Exact Words to Speak Calmly:
🛡️ Article 21 Shield
“Officer, my phone contains personal private data protected under Article 21. Do you have a search warrant or court order?”
What the Law Says
- • In K.S. Puttaswamy v. Union of India (2017), a 9-judge Supreme Court bench declared Privacy as a Fundamental Right.
- • Routine street checking, naka checking, or traffic stops do NOT authorize police to demand your phone unlock password or read private chats.
- • A digital device can only be seized during formal criminal investigation with a proper seizure memo and hash value protocol.
What to Say & Do Calmly (Step-by-Step)
- Politely say: "Officer, my phone contains personal private data protected under Article 21. Do you have a search warrant or court order?"
- Do not provide your passcode under verbal pressure.
- Request to speak with the Station House Officer (SHO) or senior supervisory officer.
- File a complaint with the State Human Rights Commission or Police Complaints Authority.
RBI Mandate
⚠️ ZERO LIABILITY
🌐 All-India Central Act
Are you liable for money stolen in an unauthorized bank phishing or OTP fraud?
ZERO LIABILITY. If you report an unauthorized electronic banking fraud to your bank within 3 working days, you have ZERO liability under RBI guidelines.
Governing Law:
RBI Circular on Customer Protection - Limiting Liability in Unauthorized Electronic Banking Transactions (2017)
Constitutional Articles:
Article 21 (Financial Security & Fair Consumer Protection)
(Art 21 →)
Exact Words to Speak Calmly:
🛡️ Article 21 Shield
“Officer / Authority, with due respect, as per RBI Circular on Customer Protection - Limiting Liability in Unauthorized Electronic Banking Transactions (2017), reporting within 3 days ensures 100% zero liability, and bank must credit the lost amount as shadow credit within 10 working days. This is constitutionally protected under Article 21 (Financial Security & Fair Consumer Protection); kindly follow statutory due process and provide an official written record.”
What the Law Says
- • Reporting within 3 days ensures 100% zero liability, and bank must credit the lost amount as shadow credit within 10 working days.
- • Reporting between 4 to 7 days caps liability at ₹10,000 for savings accounts.
- • Bank bears the burden of proving customer negligence.
What to Say & Do Calmly (Step-by-Step)
- Immediately block your debit/credit card and net banking via bank app or helpline.
- Dial National Cybercrime Helpline 1930 to freeze the fraudster's wallet or account.
- Submit a written dispute form to your bank branch within 3 days and get an acknowledged reference number.
Cybercrime
⚠️ CRIMINAL EXTORTION
🌐 All-India Central Act
Can digital lending apps access your contacts and harass your family with morphed photos?
CRIMINAL OFFENSE. RBI strictly bans lending apps from accessing mobile phone contacts, media, and gallery, and extortion is punishable with rigorous imprisonment.
Governing Law:
RBI Digital Lending Guidelines (2022) & Section 383/384 IPC (Extortion) / Section 308 BNS & Section 66E IT Act
Constitutional Articles:
Article 21 (Right to Privacy & Reputation)
(Art 21 →)
Exact Words to Speak Calmly:
🛡️ Article 21 Shield
“Officer / Authority, with due respect, as per RBI Digital Lending Guidelines (2022) & Section 383/384 IPC (Extortion) / Section 308 BNS & Section 66E IT Act, lending apps cannot require access to contact lists, call logs, or storage galleries. This is constitutionally protected under Article 21 (Right to Privacy & Reputation); kindly follow statutory due process and provide an official written record.”
What the Law Says
- • Lending apps cannot require access to contact lists, call logs, or storage galleries.
- • Threatening family members or circulating morphed pictures constitutes extortion and criminal intimidation.
What to Say & Do Calmly (Step-by-Step)
- Never pay ransom demands to unregulated lending apps.
- Take screenshots of abusive WhatsApp chats, morphed images, and payment UPI IDs.
- File an immediate report on cybercrime.gov.in and dial 1930.
Digital Dignity
⚠️ NON-BAILABLE CRIME
🌐 All-India Central Act
What is the legal recourse if someone leaks private intimate images or engages in sextortion?
PUNISHABLE CRIME. Capturing, publishing, or transmitting private intimate images without consent is a non-bailable offense punishable with up to 3 years jail.
Governing Law:
Section 66E & 67A Information Technology Act, 2000 & Section 354C IPC / Section 77 BNS
Constitutional Articles:
Article 21 (Bodily Integrity & Privacy)
(Art 21 →)
Exact Words to Speak Calmly:
🛡️ Article 21 Shield
“Officer / Authority, with due respect, as per Section 66E & 67A Information Technology Act, 2000 & Section 354C IPC / Section 77 BNS, victims can report directly to the Cyber Crime Cell without shame or public exposure. This is constitutionally protected under Article 21 (Bodily Integrity & Privacy); kindly follow statutory due process and provide an official written record.”
What the Law Says
- • Victims can report directly to the Cyber Crime Cell without shame or public exposure.
- • Social media intermediaries are legally obligated under IT Rules 2021 to remove intimate non-consensual images within 24 hours of notification.
What to Say & Do Calmly (Step-by-Step)
- Do not delete evidence; save chat history, timestamps, and extortion demands.
- Submit hashes to StopNCII.org to proactively block re-uploads across Meta and web platforms.
- Report immediately at cybercrime.gov.in under the 'Report Women/Child Related Crime' portal.
Social Media
⚠️ ADMIN NOT LIABLE
🌐 All-India Central Act
Is a WhatsApp Group Admin criminally liable for objectionable messages posted by group members?
NO. High Courts have repeatedly held that Group Admins have no pre-censorship power and cannot be held vicariously liable for members' posts.
Governing Law:
Kishore Tarachand v. State of Maharashtra & Section 79 Information Technology Act (Intermediary Safe Harbor)
Exact Words to Speak Calmly:
🛡️ Article 19, 21 Shield
“Officer / Authority, with due respect, as per Kishore Tarachand v. State of Maharashtra & Section 79 Information Technology Act (Intermediary Safe Harbor), admin can only be held liable if they personally created, endorsed, or circulated the unlawful message. This is my fundamental right under Article 19(1)(a) & Article 21; if any restriction applies, kindly provide the written statutory order.”
What the Law Says
- • Admin can only be held liable if they personally created, endorsed, or circulated the unlawful message.
- • Merely creating a group does not create vicarious criminal liability.
What to Say & Do Calmly (Step-by-Step)
- Remove members who share hate speech or copyright-violating content immediately.
- If police file an FIR against an admin, move the High Court under Section 482 CrPC / 528 BNSS to quash the FIR.
Cyber Shield
✅ MANDATORY BLOCKING
🌐 All-India Central Act
What is the telecom protocol if your mobile SIM card suddenly stops working due to SIM Swap fraud?
EMERGENCY ACTION. Under DoT and TRAI rules, replacement SIM cards carry a mandatory 24-hour SMS bar, and victims can freeze the number immediately to prevent OTP drainage.
Governing Law:
TRAI Directives & Department of Telecommunications (DoT) Security Guidelines (2023)
Constitutional Articles:
Article 21 (Right to Financial & Digital Security)
(Art 21 →)
Exact Words to Speak Calmly:
🛡️ Article 21 Shield
“Officer / Authority, with due respect, as per TRAI Directives & Department of Telecommunications (DoT) Security Guidelines (2023), if your active SIM shows 'No Service' abruptly without reason, immediately suspect a duplicate SIM swap. This is constitutionally protected under Article 21 (Right to Financial & Digital Security); kindly follow statutory due process and provide an official written record.”
What the Law Says
- • If your active SIM shows 'No Service' abruptly without reason, immediately suspect a duplicate SIM swap.
- • DoT mandates telecom operators to verify physical biometric KYC before issuing replacement SIMs.
- • Contact your telecom operator from another phone within minutes to flag unauthorized swap.
What to Say & Do Calmly (Step-by-Step)
- Call your telecom operator immediately from an alternate phone to block the duplicate SIM.
- Temporarily lock your bank accounts and UPI IDs by dialing your bank's emergency IVR or cyber helpline 1930.
Data Privacy
✅ RIGHT TO COMPLETE DATA ERASURE UNDER DPDP ACT
🌐 All-India Central Act
Personal Data on Apps & Websites: Can you legally force companies to delete your phone number and data?
YES. Under Section 12 of the Digital Personal Data Protection Act (DPDP) 2023, citizens (Data Principals) have the statutory right to withdraw consent and demand the permanent erasure of their personal data from any company or platform.
Governing Law:
Section 12 Digital Personal Data Protection Act, 2023 (DPDP Act)
Constitutional Articles:
Article 21 (Fundamental Right to Privacy - K.S. Puttaswamy Judgment)
(Art 21 →)
Exact Words to Speak Calmly:
🛡️ Article 21 Shield
“I withdraw consent. Erase all my personal identifiers, transaction history, and contact records. (Protected under Article 21 (Fundamental Right to Privacy - K.S. Puttaswamy Judgment)).”
What the Law Says
- • 1. Data fiduciaries (apps, banks, e-commerce) must provide a simple, accessible mechanism to request data deletion.
- • 2. Upon receiving an erasure request, the company must delete data unless required by specific financial/criminal law retention.
- • 3. Companies violating DPDP provisions face penalties up to ₹250 Crores imposed by the Data Protection Board of India.
What to Say & Do Calmly (Step-by-Step)
- 1. Log into the account settings of the app/service and submit a "Delete Account & Wipe Data" request.
- 2. Email the company Data Protection Officer (DPO) citing Section 12 of the DPDP Act 2023.
- 3. State: "I withdraw consent. Erase all my personal identifiers, transaction history, and contact records."
- 4. If the company ignores your request within 30 days, file an online complaint with the Data Protection Board of India.
Cyber Shield
⚠️ AI DEEPFAKES: IMPRISONMENT UNDER IT ACT & BNS
🌐 All-India Central Act
AI Deepfake or Voice Clone Created Without Consent: How to take down and register criminal FIRs?
Under Section 66D of the Information Technology Act and Section 318(4) & 356 BNS, creating or circulating AI deepfakes, face-swaps, or voice clones to cheat, defame, or extort is a non-bailable cyber offense punishable with up to 7 years imprisonment.
Governing Law:
Section 66D & 66E Information Technology Act, 2000 & Section 318(4) & 356 Bharatiya Nyaya Sanhita, 2023
Constitutional Articles:
Article 21 (Right to Privacy and Protection of Identity & Reputation)
(Art 21 →)
Exact Words to Speak Calmly:
🛡️ Article 21 Shield
“Officer / Authority, with due respect, as per Section 66D & 66E Information Technology Act, 2000 & Section 318(4) & 356 Bharatiya Nyaya Sanhita, 2023, social media intermediaries (Meta, X, YouTube) MUST take down synthetic non-consensual deepfakes within 24 to 36 hours of reporting. This is constitutionally protected under Article 21 (Right to Privacy and Protection of Identity & Reputation); kindly follow statutory due process and provide an official written record.”
What the Law Says
- • 1. Social media intermediaries (Meta, X, YouTube) MUST take down synthetic non-consensual deepfakes within 24 to 36 hours of reporting.
- • 2. Creating sexually explicit or morphed media attracts additional offenses under Section 67A IT Act and Section 77 BNS.
- • 3. Using cloned audio to solicit money from relatives constitutes criminal cheating by personation.
What to Say & Do Calmly (Step-by-Step)
- 1. Take screenshots and record URL links of the accounts publishing the deepfake before reporting.
- 2. Report immediately to the National Cyber Crime Portal (cybercrime.gov.in) or call 1930.
- 3. Submit a takedown notice to the social media platform Resident Grievance Officer citing IT Rules 2021.
- 4. File an FIR with the Cyber Crime Police Station under Section 66D IT Act and Section 318 BNS.