In a landmark decision, the Karnataka High Court on April 29, 2025, ordered the Indian government to block Proton Mail, a Swiss-based encrypted email service, citing its misuse for sending obscene and threatening content. The ruling, which has not yet been implemented as of April 30, 2025, reignites a heated debate over balancing national security with digital privacy in India, a nation grappling with rising cybercrime and increasing government oversight of online platforms.
The Court’s Ruling: A Response to Cybercrime Concerns
The Karnataka High Court’s directive stems from a petition filed by M Moser Design Associates India Pvt Ltd, a Bengaluru-based architecture and interior design firm, in November 2024. The firm alleged that unidentified individuals used Proton Mail accounts to send vulgar emails containing AI-generated deepfake images and explicit content targeting its female employees and clients. These emails, described as “grossly offensive” by the petitioner’s lawyer, Jatin Sehgal, caused significant distress and reputational harm to the company.
Despite a police complaint, investigations hit a dead end due to Proton Mail’s end-to-end encryption, which prevents access to email content without user consent, and its refusal to share user data, citing Swiss privacy laws. The Bengaluru Cybercrime Police reported that Proton Mail’s servers, located outside India, and its non-compliance with Indian legal requests hindered their ability to identify the perpetrators.
Presided over by Justice M. Nagaprasanna, the court invoked Section 69A of the Information Technology Act, 2000, which allows the government to block online content in the interest of national security, public order, or to prevent incitement to cognizable offenses. The court also referenced Rule 10 of the Information Technology (Procedure and Safeguards for Blocking Access of Information by Public) Rules, 2009, directing the immediate blocking of offending URLs and a nationwide ban on Proton Mail until further notice. The order emphasized recent bomb threats sent via Proton Mail to Indian schools, underscoring the platform’s perceived role in facilitating serious crimes.
Additional Solicitor General Aravind Kamath, representing the Central Government, informed the court that the blocking process could begin immediately. However, he noted that obtaining user data from Proton Mail would require cooperation through the Mutual Legal Assistance Treaty (MLAT) between India and Switzerland, a process that could take months due to bureaucratic and legal hurdles.
As of April 30, 2025, checks by tech outlets, including TechCrunch, confirmed that Proton Mail remains accessible in India, indicating a delay in implementing the block. This lag could be attributed to procedural requirements or ongoing discussions between Indian and Swiss authorities.
Proton Mail: A Bastion of Privacy Under Fire
Founded in 2014 by scientists at CERN, Proton Mail has built a global reputation as a leading provider of secure email services, offering end-to-end encryption that ensures only the sender and recipient can access email content. With servers in Switzerland, a country known for stringent privacy laws, Proton Mail has attracted millions of users, including journalists, activists, and businesses seeking protection from surveillance and data breaches.
However, this same encryption has made Proton Mail a target for governments worldwide, including India, where authorities argue it enables cybercriminals to operate with impunity. The Karnataka High Court’s order is not the first attempt to restrict Proton Mail in India. In 2023, the Tamil Nadu police sought to block the service after hoax bomb threats were sent to schools via Proton Mail accounts. That effort was thwarted following diplomatic intervention by Switzerland, which emphasized Proton Mail’s compliance with Swiss law and international legal frameworks.
In a March 2024 blog post, Proton Mail condemned the earlier proposed ban, stating, “Blocking Proton Mail harms ordinary citizens who rely on secure communications while doing little to deter cybercriminals, who can easily switch to other platforms.” The company highlighted its zero-tolerance policy for abuse, noting that it cooperates with law enforcement through Swiss authorities under international procedures. It also invests in anti-censorship technologies, such as Proton VPN, alternative routing, and an onion site accessible via the Tor network, to ensure availability in regions facing internet restrictions.
As of April 30, 2025, Proton Mail has not issued a specific statement on the Karnataka High Court’s order. However, its previous stance suggests it will likely oppose the ban, potentially exploring legal or technical measures to maintain access for Indian users.
A Broader Context: India’s Struggles with Encrypted Platforms
The Proton Mail ban is part of a broader pattern of Indian authorities targeting encrypted communication platforms amid rising cybercrime and security threats. In October 2024, the Delhi High Court directed the Ministry of Home Affairs and police to investigate Proton Mail’s misuse in similar cases, signaling growing frustration with platforms that prioritize user privacy over government access.
India’s legal framework, particularly the Information Technology Act, 2000, and its associated rules, grants the government sweeping powers to block online content. Since 2008, over 67,000 websites and platforms have been blocked under Section 69A, including high-profile cases like the temporary bans on TikTok in 2019 and WeChat in 2020 amid geopolitical tensions with China. However, targeting a privacy-focused service like Proton Mail raises unique challenges, given its global user base and Switzerland’s protective legal environment.
The Karnataka High Court’s order also reflects India’s ongoing efforts to assert digital sovereignty. Recent policies, such as the Digital Personal Data Protection Act, 2023, and proposed amendments to the IT Rules, 2021, aim to enhance government oversight of online platforms. Critics argue these measures risk stifling dissent and undermining privacy, particularly for marginalized groups who rely on encrypted services to communicate safely.
Implications for Users and Internet Freedom
If implemented, the Proton Mail ban could affect thousands of Indian users, including professionals in sensitive fields like journalism, law, and activism, who depend on the service for secure communications. A block would likely push users to alternative platforms, some of which may lack Proton Mail’s robust privacy protections, potentially exposing them to surveillance or data breaches.
Privacy advocates have decried the court’s order as an overreach, arguing that banning Proton Mail addresses symptoms rather than root causes of cybercrime. “Instead of restricting secure tools, the government should invest in advanced investigative techniques and international cooperation,” said Anushka Jain, a policy counsel at the Internet Freedom Foundation. She warned that the ban could set a precedent for targeting other encrypted services, such as Signal or WhatsApp, further eroding digital rights.
On the other hand, supporters of the ban, including some law enforcement officials, contend that Proton Mail’s encryption creates a “safe haven” for criminals. “When platforms refuse to cooperate, it leaves us powerless to protect citizens,” said a senior Bengaluru police officer, speaking anonymously. The officer cited recent cases, including the misuse of Proton Mail for extortion and harassment, as justification for the court’s decision.
The ban also raises technical questions. Blocking Proton Mail at the ISP level could be circumvented by users employing VPNs or accessing the service’s onion site via Tor. Such workarounds, however, may be beyond the technical expertise of average users, potentially limiting access to secure email for non-technical individuals.
International Dimensions and Switzerland’s Role
The Proton Mail case underscores the complexities of regulating global tech platforms in a fragmented legal landscape. Switzerland’s strict privacy laws, which prohibit Proton Mail from directly sharing user data with foreign governments, place the company at odds with India’s expectations of compliance. The MLAT process, while a viable channel for data requests, is often slow and limited to serious crimes, making it ill-suited for rapid cybercrime investigations.
Swiss authorities have previously defended Proton Mail’s operations, as seen in the 2023 Tamil Nadu case. It remains unclear whether Switzerland will intervene again or if Proton Mail will challenge the ban through legal avenues in India or internationally. The company’s investments in anti-censorship technologies suggest it is prepared for such scenarios, potentially enabling Indian users to access the service despite a block.
Public and Industry Reactions
The Karnataka High Court’s order has sparked widespread discussion on platforms like X, where users have expressed both support and opposition. Posts analyzed from X reveal a polarized sentiment: some users praise the government for prioritizing security, while others accuse it of authoritarian overreach. One X user wrote, “Proton Mail is a lifeline for privacy in India. Banning it is like punishing the victim for the crime.” Another countered, “If Proton Mail won’t help catch criminals, it’s part of the problem.”
Tech industry leaders have also weighed in. Representatives from Indian cybersecurity firms argue that the ban highlights the need for localized encrypted solutions compliant with national laws. Meanwhile, global privacy organizations, such as Access Now, have called on India to reconsider the ban, citing its chilling effect on free expression.
Looking Ahead: A Test Case for Digital Rights
The Proton Mail ban, if enforced, will be a pivotal moment for India’s digital ecosystem. It could accelerate the adoption of stricter internet regulations, aligning India with countries like China and Russia, which heavily restrict encrypted services. Alternatively, pushback from users, civil society, and international stakeholders could prompt a reevaluation of the order, fostering dialogue on privacy-preserving solutions to cybercrime.
For now, the situation remains fluid. The Indian government has yet to confirm when or how the block will be implemented, and Proton Mail’s response could shape the outcome. As the world watches, this case underscores the global challenge of reconciling technological innovation with regulatory demands, with far-reaching implications for internet freedom and user privacy.
