How to report medical privacy violations and non-consensual filming

The situation

You go in for a routine procedure or an emergency surgery at a medical college. You are vulnerable, possibly under anaesthesia, and you trust the staff with your body and your dignity. Later, you find out that a staff member or a student took photos or videos of you while you were exposed on the operating table. Maybe these photos are doing the rounds on a WhatsApp group, or worse, they have been leaked online. This isn't just a 'lapse in judgment' by a bored intern; it is a serious criminal offence and a violation of your fundamental rights. Whether it happens in a government hospital in Kaushambi or a posh private clinic in South Delhi, the law protects your privacy even when you are unconscious.

What the law actually says

Since July 1, 2024, India has transitioned to the Bharatiya Nyaya Sanhita (BNS) and the Bharatiya Nagarik Suraksha Sanhita (BNSS). If your privacy is breached in a medical setting, several laws kick in to protect you.

1. Bharatiya Nyaya Sanhita (BNS) 2023

• Section 77 (Voyeurism): This replaces the old Section 354C of the IPC. It states that any man who watches or captures the image of a woman engaging in a 'private act' where she would usually expect not to be observed, or disseminates such an image, is committing a crime. A medical procedure where a patient is disrobed is legally considered a private act. The first conviction can lead to 1 to 3 years in jail plus a fine.
• Section 79 (Insulting Modesty): This replaces Section 509 of the IPC. It covers any word, gesture, or act intended to insult the modesty of a woman. Sharing private surgical photos definitely fits here.

2. Information Technology (IT) Act, 2000

• Section 66E (Violation of Privacy): This is gender-neutral. If anyone intentionally captures, publishes, or transmits the image of a 'private area' of any person without their consent, under circumstances violating their privacy, they can be jailed for up to 3 years or fined up to ₹2 lakh, or both.
• Section 67 & 67A: If the shared images are 'obscene' or contain 'sexually explicit acts' (which surgical exposures often are legally categorised as when shared non-consensually), the penalties are even harsher.

3. Medical Ethics and Constitutional Rights

• Right to Privacy: The Supreme Court in Justice K.S. Puttaswamy v. Union of India (2017) declared privacy a fundamental right under Article 21. Hospitals have a 'duty of care' to protect this.
• NMC Regulations: The National Medical Commission (NMP) Registered Medical Practitioner (Professional Conduct) Regulations mandate absolute patient confidentiality. A breach can lead to the permanent cancellation of a doctor's license to practice.

Step-by-step playbook

Step 1: Secure the evidence immediately

Do not confront the person yet if you think they might delete the evidence.

• Digital Trail: If the photo was shared on a group, take screenshots. Ensure the phone number of the sender is visible. If it is on social media, copy the URL.
• Witnesses: Note down the names of any nurses, ward boys, or other students who were in the OT (Operation Theatre) or who told you about the leak.
• Hospital Records: Get a copy of your 'OT Notes' or 'Discharge Summary' which lists the names of the surgical team present during that time.

Step 2: File an internal complaint

Before going to the police, create a paper trail within the institution.

• Who to approach: Write to the Medical Superintendent (MS) or the Principal of the Medical College. If the perpetrator is a student or staff member harassing you, you can also approach the hospital's Internal Complaints Committee (ICC). Under the POSH Act, hospitals are mandated to have these. You can learn more about POSH at workplace and college to see if your case fits.
• What to write: State the date, time, and the specific act. Demand an internal enquiry and the suspension of the involved individuals.
• Timeline: Most hospitals must acknowledge this within 24–48 hours.

Step 3: File an FIR (The most crucial step)

Go to the nearest police station. Under Section 173 of the BNSS, the police are required to register an FIR for cognizable offences like voyeurism.

• The Draft: Specifically mention Section 77 BNS and Section 66E of the IT Act.
• Zero FIR: If the hospital is in a different district (like the Kaushambi incident) but you are back home, you can file a 'Zero FIR' at any police station. They are legally bound to register it and transfer it to the relevant station later. For a detailed guide, see How to file an FIR (and what to do if police refuse).
• Lalita Kumari (2014) Rule: If the officer refuses to file the FIR, remind them of the Supreme Court judgment in Lalita Kumari v. Govt. of UP, which makes FIR registration mandatory in such cases.

Step 4: Report to the Cyber Crime Portal

Since medical photos are usually shared digitally, you must report this to the National Cyber Crime Reporting Portal.

• Action: Visit cybercrime.gov.in. Choose the 'Report Crime Related to Women/Children' section.
• What to upload: Upload the screenshots and URLs you collected in Step 1. This helps in getting the content taken down from social media platforms. Check our guide on the Cyber Crime reporting portal for a walkthrough.

Step 5: Escalate to the National Medical Commission (NMC)

If a doctor was involved, the police case isn't enough; they should lose their license.

• Action: File a formal complaint with the State Medical Council (e.g., Uttar Pradesh Medical Council) and the NMC.
• Process: Provide the FIR copy and internal complaint copy. The Council has the power to suspend the doctor pending investigation.

Step 6: Claim compensation in Consumer Court

The Supreme Court has held that medical services (even in some government setups where charges are paid) fall under the Consumer Protection Act.

• Grounds: 'Deficiency in Service'. A hospital that cannot protect a patient's naked body from being filmed is liable to pay heavy damages (compensation).
• Timeline: You can file this within 2 years of the incident.

For more ways to hold public officials and institutions accountable, you can browse all civic-action guides.

Where it usually breaks

Even with clear laws, the system often tries to protect its own. Here is where you might get stuck and how to push through:

1. The "Hospital Bro-Code" cover-up Medical colleges are tight-knit. The Medical Superintendent (MS) or Principal might try to "settle" the matter internally to protect the college's reputation. They might tell you that the student’s career will be ruined or that it was just a "technical error" during a teaching session.

• The Workaround: Do not accept verbal assurances. If they don't give you a written acknowledgement of your complaint within 48 hours, escalate immediately to the State Medical Council and file an FIR. Mention in your police complaint that the hospital administration is attempting to suppress evidence.

2. Police refusal to file an FIR Local police might dismiss this as a "departmental issue" or claim that since no physical "touching" happened, it isn't a serious crime.

• The Workaround: Quote the Supreme Court judgment in Lalita Kumari v. Govt. of U.P. (2014), which makes it mandatory for police to register an FIR if the complaint discloses a cognizable offence (which Voyeurism under Section 77 BNS and Privacy Violation under Section 66E IT Act definitely are). If they still refuse, use Section 173(4) of the BNSS to send your complaint to the Superintendent of Police (SP) via registered post.

3. Vanishing digital evidence The perpetrator might delete the photo or the WhatsApp group might be dissolved the moment they realize a complaint has been filed.

• The Workaround: Do not wait for the hospital's internal probe to finish before reporting to the police. The police have the power to seize devices and use cyber-forensics to recover deleted data. Simultaneously, report the content on the National Cyber Crime Reporting Portal under the "Women/Child Related Crime" section for faster tracking of digital footprints.

4. The "Teaching Purposes" Excuse The hospital might claim the photos were taken for "academic documentation."

• The Workaround: Academic photos must never show a patient’s face or identifying marks (tattoos, birthmarks) unless specifically consented to in writing. If the photo was shared on a non-official platform like a personal WhatsApp group or social media, the "teaching" excuse is legally invalid.

Templates / script

Template 1: Complaint to the Medical Superintendent / Principal

Subject: Formal Complaint regarding non-consensual filming and breach of patient privacy.

To, The Medical Superintendent, [Hospital Name], [City].

Respected Sir/Madam,

I am writing to report a gross violation of my privacy and medical ethics. On [Date] at approximately [Time], while I was undergoing [Procedure Name] at [Department/OT Number], an unauthorized [photo/video] was taken of me in a state of undress/vulnerability by [Name/Description of staff or student, if known].

I am aware that this content has since been [shared on WhatsApp/uploaded online]. This act is a criminal offence under Section 77 of the Bharatiya Nyaya Sanhita (BNS) and Section 66E of the IT Act, 2000.

I request you to:

1. Immediately secure the CCTV footage of the OT corridor for the aforementioned time.
2. Initiate an inquiry by the Internal Complaints Committee (ICC).
3. Provide me with a written status report within 3 days.

I reserve the right to pursue criminal charges.

Sincerely, [Your Name] [Phone Number] [Patient ID/UHID Number]

---

Template 2: Script for calling the Cyber Cell or 1930

"Hello, I want to report a violation of privacy under Section 66E of the IT Act. Private photos of me taken during a medical procedure have been shared without my consent. I have screenshots of the [WhatsApp group/Social media link]. I need to know how to submit this evidence so it can be preserved before the sender deletes it. Can you guide me on filing a formal complaint through the portal?"

---

Template 3: RTI to check status of hospital inquiry

If the hospital is being silent, file an RTI to the Public Information Officer (PIO) of the government medical college.

Text for RTI Application: "Please provide the following information regarding the complaint filed by [Your Name] on [Date] regarding a privacy breach in the OT:

1. A certified copy of the minutes of the meeting held by the Internal Enquiry Committee regarding this complaint.
2. The names and designations of the staff/students found to be present in the OT during the time of the incident.
3. Details of the action taken (suspension/fine/warning) against the erring individuals as per NMC guidelines."

FAQs

1. Can I file a complaint if I don’t have the actual photo on my phone? Yes. You don't need to possess the photo to report the crime. If you have seen it, or if a witness (like another nurse or student) told you about it, that is enough to start an investigation. The police can seize the suspect's phone to find the original file.

2. Is this only for women patients? No. While Section 77 of the BNS (Voyeurism) specifically protects women, Section 66E of the IT Act is gender-neutral. Any person—man, woman, or trans person—whose private parts are filmed or shared without consent in a medical setting can file a criminal case.

3. What if the doctor says the photo was for "medical records"? Medical records are confidential. They must be stored in the hospital’s official, encrypted system—not on a doctor’s personal Redmi or iPhone. If the photo is on a personal device or a private chat, it is a violation of the National Medical Commission (NMC) Ethics Regulations and the Digital Personal Data Protection (DPDP) Act.

4. How much does it cost to file these complaints? Filing a complaint with the Hospital, the Police (FIR), or the National Medical Commission is completely free. If you file an RTI, the fee is usually ₹10. You do not need a lawyer to file the initial complaints or the FIR.

5. Can I get the content removed from the internet? Yes. Under the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, social media platforms (Instagram, X, etc.) are required to remove non-consensual nude or partially nude images within 24 hours of being notified by the victim. You can report this directly on the platform or via the National Cyber Crime portal.

6. Will I have to go to court? If the police file a chargesheet, you may be called as a witness to give your statement. However, for privacy violations, you can request an 'in-camera' trial (Section 366 of the BNSS), which means the proceedings happen in a private room rather than an open court to protect your identity.

7. Who is the highest authority I can complain to? If the hospital and local police fail, you can complain to the National Medical Commission (NMC) in New Delhi or the State Medical Council. They have the power to permanently strip a doctor of their license to practice medicine in India.